last executing test programs: 5.229059389s ago: executing program 3 (id=2110): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) 5.048489344s ago: executing program 3 (id=2112): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x60, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x12000, 0x2000}, {0x6, 0x24, 0x1a, 0x0, 0x33}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x10}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x2, 0x612, 0xfffffff9, 0x1, 0x8, 0xda1b, 0x3, 0x2, 0x1, 0xe7d, 0x581, 0xee0}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.480561209s ago: executing program 1 (id=2123): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x3139, &(0x7f0000000400)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 2.77221928s ago: executing program 0 (id=2130): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) acct(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x5, 0x0, 0x0, 0xc, 0x4}]}}, 0x0, 0x26, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) time(0x0) 2.619796989s ago: executing program 0 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) 2.460674585s ago: executing program 1 (id=2133): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x1, 0x0, 0x1}, &(0x7f0000000040)=[{}]) 2.453886985s ago: executing program 0 (id=2134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.319499694s ago: executing program 2 (id=2135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0xac, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.053152728s ago: executing program 2 (id=2136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.901015472s ago: executing program 4 (id=2137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0xc0c0) clock_gettime(0x5, 0x0) 1.778200499s ago: executing program 3 (id=2138): unshare(0xa000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r2, r0, 0x12, 0x6, 0x0, @void, @value}, 0x10) 1.385138699s ago: executing program 3 (id=2139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f00000004c0)={0x200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.384665957s ago: executing program 1 (id=2140): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.382446529s ago: executing program 4 (id=2141): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000080)={0x0, 0x0}) 1.149726712s ago: executing program 1 (id=2142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009ce6e7"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.021067052s ago: executing program 3 (id=2143): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 952.826577ms ago: executing program 4 (id=2144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffffff000040"]) 920.633412ms ago: executing program 2 (id=2145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r3, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x0) 682.496894ms ago: executing program 1 (id=2146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 621.121588ms ago: executing program 2 (id=2147): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0, 0xffffffffffffffff}, 0x1a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 620.721131ms ago: executing program 3 (id=2148): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 612.059962ms ago: executing program 0 (id=2149): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0) fanotify_mark(r0, 0x1, 0x48001050, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r2, &(0x7f0000000bc0)=""/100, 0x64, 0x0) 482.781018ms ago: executing program 4 (id=2150): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)='~', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000000)=0x8) 296.167198ms ago: executing program 0 (id=2151): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9a8a5b3317d93f48"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000340)={0x1, 0x49b, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x48}, 0x2}, 0x0) 217.112345ms ago: executing program 2 (id=2152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 216.679526ms ago: executing program 4 (id=2153): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {}, [], {0x10, 0x4}}, 0x24, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r1, r2) chdir(&(0x7f00000001c0)='./bus\x00') 134.00351ms ago: executing program 1 (id=2154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000400)=[@dead_binder_done={0x400c6313}], 0x0, 0x0, 0x0}) 64.777177ms ago: executing program 0 (id=2155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) 887.454µs ago: executing program 4 (id=2156): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r1}, 0x20) ioctl$int_in(r1, 0x5452, &(0x7f0000000780)=0x20b) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 0s ago: executing program 2 (id=2166): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000280)={0x18, r2, 0x4, 0x0, &(0x7f0000000500)=[{0x0, 0x5}, {0x8, 0x8001}, {0x6, 0x7}, {0x10000, 0xffdffffffffffffe}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1256'. [ 232.803521][ T8434] netlink: 'syz.0.1256': attribute type 7 has an invalid length. [ 232.819667][ T8434] netlink: 'syz.0.1256': attribute type 8 has an invalid length. [ 232.827887][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'. [ 232.848182][ T8434] gretap0: entered promiscuous mode [ 232.856740][ T8434] batadv_slave_1: entered promiscuous mode [ 232.874173][ T8434] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 232.892558][ T8434] Cannot create hsr debugfs directory [ 232.898520][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 232.912186][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 233.021077][ T8] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.030511][ T8] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.045008][ T8] usb 5-1: Product: syz [ 233.049828][ T8] usb 5-1: Manufacturer: syz [ 233.055323][ T8] usb 5-1: SerialNumber: syz [ 233.073789][ T8] usb 5-1: config 0 descriptor?? [ 233.081165][ T8422] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.334594][ T939] usb 5-1: USB disconnect, device number 21 [ 233.879451][ T8474] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1271' sets config #132 [ 234.300647][ T939] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 234.464259][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1287'. [ 234.494745][ T939] usb 1-1: Using ep0 maxpacket: 8 [ 234.523634][ T939] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 234.545941][ T939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.616877][ T939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.649339][ T939] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.690502][ T939] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.703533][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.952138][ T939] usb 1-1: GET_CAPABILITIES returned 0 [ 234.971831][ T939] usbtmc 1-1:16.0: can't read capabilities [ 235.121127][ T29] audit: type=1400 audit(1727796625.311:496): avc: denied { write } for pid=8524 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 235.149437][ T8523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.204943][ T29] audit: type=1400 audit(1727796625.311:497): avc: denied { getopt } for pid=8524 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.259197][ T939] usb 1-1: USB disconnect, device number 22 [ 235.433541][ T5304] libceph: connect (1)[c::]:6789 error -101 [ 235.460240][ T5304] libceph: mon0 (1)[c::]:6789 connect error [ 235.506130][ T29] audit: type=1400 audit(1727796625.701:498): avc: denied { read write } for pid=8537 comm="syz.3.1299" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 235.518783][ T939] libceph: connect (1)[b::]:6789 error -101 [ 235.549764][ T939] libceph: mon0 (1)[b::]:6789 connect error [ 235.568063][ T29] audit: type=1400 audit(1727796625.701:499): avc: denied { open } for pid=8537 comm="syz.3.1299" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 235.665303][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 235.758688][ T5326] libceph: connect (1)[c::]:6789 error -101 [ 235.765083][ T5326] libceph: mon0 (1)[c::]:6789 connect error [ 235.829127][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 235.845954][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.866087][ T8] libceph: connect (1)[b::]:6789 error -101 [ 235.877125][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 235.888308][ T8] libceph: mon0 (1)[b::]:6789 connect error [ 235.917708][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.957643][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 235.985224][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.004414][ T25] usb 5-1: config 0 descriptor?? [ 236.018934][ T8535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.036486][ T25] hub 5-1:0.0: USB hub found [ 236.224357][ T8533] ceph: No mds server is up or the cluster is laggy [ 236.234338][ T8538] ceph: No mds server is up or the cluster is laggy [ 236.306323][ T25] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 236.320059][ T5326] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 236.494660][ T5326] usb 4-1: Using ep0 maxpacket: 8 [ 236.507995][ T5326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.518658][ T5326] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2C, changing to 0xC [ 236.565734][ T5326] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 236.578499][ T29] audit: type=1326 audit(1727796626.781:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8566 comm="syz.0.1310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f000b77dff9 code=0x0 [ 236.579126][ T5326] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 2.40 [ 236.615380][ T5326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.632740][ T8551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 236.727245][ T25] hid-generic 0003:046D:C314.0028: item fetching failed at offset 0/1 [ 236.737511][ T25] hid-generic 0003:046D:C314.0028: probe with driver hid-generic failed with error -22 [ 237.167066][ T5276] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 237.341118][ T8535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.510979][ T8582] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.577376][ T5276] usbhid 5-1:0.0: reset_resume error -71 [ 237.615212][ T5276] usb 5-1: USB disconnect, device number 22 [ 237.656693][ T5326] cdc_ncm 4-1:1.0: bind() failure [ 237.694682][ T5326] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 237.712103][ T5326] cdc_ncm 4-1:1.1: bind() failure [ 237.865126][ T25] usb 4-1: USB disconnect, device number 28 [ 238.490119][ T29] audit: type=1400 audit(1727796628.691:501): avc: denied { getopt } for pid=8607 comm="syz.0.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.588645][ T8612] netlink: 'syz.3.1327': attribute type 9 has an invalid length. [ 238.612437][ T8612] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1327'. [ 238.861744][ T29] audit: type=1400 audit(1727796629.061:502): avc: denied { bind } for pid=8619 comm="syz.3.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.887796][ T5326] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 238.944710][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 239.065540][ T5326] usb 5-1: Using ep0 maxpacket: 8 [ 239.081245][ T29] audit: type=1400 audit(1727796629.281:503): avc: denied { write } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.086191][ T5326] usb 5-1: config 0 has an invalid interface number: 222 but max is 0 [ 239.139837][ T29] audit: type=1400 audit(1727796629.281:504): avc: denied { remove_name } for pid=4655 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.143233][ T5326] usb 5-1: config 0 has no interface number 0 [ 239.181636][ T8] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 239.192527][ T5326] usb 5-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice=5a.ed [ 239.201870][ T29] audit: type=1400 audit(1727796629.281:505): avc: denied { add_name } for pid=4655 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.202401][ T5326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.230139][ T8] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 239.241446][ T8] usb 1-1: Manufacturer: syz [ 239.243865][ T5326] usb 5-1: Product: syz [ 239.252636][ T5326] usb 5-1: Manufacturer: syz [ 239.259142][ T8] usb 1-1: config 0 descriptor?? [ 239.269142][ T5326] usb 5-1: SerialNumber: syz [ 239.278995][ T5326] usb 5-1: config 0 descriptor?? [ 239.511995][ T5326] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 239.677661][ T8] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 240.296332][ T8] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 240.316177][ T8] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 240.333424][ T8] usb 1-1: USB disconnect, device number 23 [ 240.361097][ T5326] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 240.584973][ T5276] usb 5-1: USB disconnect, device number 23 [ 240.821192][ T8667] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1353'. [ 241.350968][ T8689] input: syz1 as /devices/virtual/input/input29 [ 241.601057][ T8698] input: syz0 as /devices/virtual/input/input30 [ 241.657503][ T8699] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1365'. [ 241.739355][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 241.739378][ T29] audit: type=1400 audit(1727796631.941:511): avc: denied { setopt } for pid=8701 comm="syz.0.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.848875][ T29] audit: type=1400 audit(1727796632.051:512): avc: denied { bind } for pid=8705 comm="syz.2.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.144962][ T8717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'. [ 244.039365][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 244.397924][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'. [ 244.434209][ T8804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1413'. [ 244.605501][ T29] audit: type=1400 audit(1727796634.791:513): avc: denied { bind } for pid=8807 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.637948][ T8812] netlink: 'syz.3.1418': attribute type 9 has an invalid length. [ 244.669219][ T8812] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1418'. [ 244.861853][ T8822] netlink: 'syz.4.1422': attribute type 9 has an invalid length. [ 244.877669][ T8822] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1422'. [ 245.149882][ T29] audit: type=1400 audit(1727796635.351:514): avc: denied { override_creds } for pid=8833 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 245.461565][ T8845] input: syz1 as /devices/virtual/input/input31 [ 245.804660][ T5228] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 258.673659][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.725108][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.793127][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.810847][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.840993][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 258.848577][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.929260][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.942072][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.952146][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.969085][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.979618][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 258.979943][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.995042][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.998868][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.015936][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.027795][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.036117][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.052319][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.126900][ T8018] bond0: (slave syz_tun): Releasing backup interface [ 259.150381][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.162580][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.171167][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.179565][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.190107][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 259.197809][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.220744][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.237976][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.248694][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.263599][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.271780][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 259.279712][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.337758][ T2930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.469709][ T2930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.551921][ T2930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.669324][ T2930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.930321][ T29] audit: type=1400 audit(1727796650.131:515): avc: denied { module_request } for pid=8861 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 259.953104][ T29] audit: type=1400 audit(1727796650.131:516): avc: denied { module_request } for pid=8857 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 260.016262][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 260.152333][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 260.176752][ T2930] bridge_slave_1: left allmulticast mode [ 260.182451][ T2930] bridge_slave_1: left promiscuous mode [ 260.192316][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.544153][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.560243][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.571418][ T2930] bond0 (unregistering): Released all slaves [ 260.582324][ T8861] chnl_net:caif_netlink_parms(): no params data found [ 260.690706][ T8863] chnl_net:caif_netlink_parms(): no params data found [ 260.803824][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.811211][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.825393][ T8857] bridge_slave_0: entered allmulticast mode [ 260.832278][ T8857] bridge_slave_0: entered promiscuous mode [ 260.888305][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.895646][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.910125][ T8857] bridge_slave_1: entered allmulticast mode [ 260.918113][ T8857] bridge_slave_1: entered promiscuous mode [ 260.924754][ T5240] Bluetooth: hci0: command tx timeout [ 260.999659][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.006608][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.126847][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.164804][ T5232] Bluetooth: hci2: command tx timeout [ 261.171585][ T5240] Bluetooth: hci1: command tx timeout [ 261.190168][ T2930] hsr_slave_0: left promiscuous mode [ 261.202053][ T2930] hsr_slave_1: left promiscuous mode [ 261.227340][ T2930] veth1_macvtap: left promiscuous mode [ 261.232869][ T2930] veth0_macvtap: left promiscuous mode [ 261.238601][ T5240] Bluetooth: hci3: command tx timeout [ 261.246315][ T2930] veth1_vlan: left promiscuous mode [ 261.251616][ T2930] veth0_vlan: left promiscuous mode [ 261.314838][ T5240] Bluetooth: hci4: command tx timeout [ 261.764381][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 261.821560][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 262.276907][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.284019][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.291587][ T8859] bridge_slave_0: entered allmulticast mode [ 262.299578][ T8859] bridge_slave_0: entered promiscuous mode [ 262.308262][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.315914][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.323188][ T8859] bridge_slave_1: entered allmulticast mode [ 262.330730][ T8859] bridge_slave_1: entered promiscuous mode [ 262.338201][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 262.370974][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.459245][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.475911][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.483375][ T8863] bridge_slave_0: entered allmulticast mode [ 262.501199][ T8863] bridge_slave_0: entered promiscuous mode [ 262.524233][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.531421][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.544746][ T8861] bridge_slave_0: entered allmulticast mode [ 262.551682][ T8861] bridge_slave_0: entered promiscuous mode [ 262.582344][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.595400][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.604816][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.611987][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.625943][ T8863] bridge_slave_1: entered allmulticast mode [ 262.633312][ T8863] bridge_slave_1: entered promiscuous mode [ 262.689362][ T8857] team0: Port device team_slave_0 added [ 262.700600][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.708090][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.716798][ T8861] bridge_slave_1: entered allmulticast mode [ 262.726228][ T8861] bridge_slave_1: entered promiscuous mode [ 262.778571][ T8857] team0: Port device team_slave_1 added [ 262.810971][ T8861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.857775][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.893941][ T8861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.934005][ T8859] team0: Port device team_slave_0 added [ 262.943185][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.963395][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.971042][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.994858][ T5240] Bluetooth: hci0: command tx timeout [ 263.002539][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.049889][ T8859] team0: Port device team_slave_1 added [ 263.082696][ T8863] team0: Port device team_slave_0 added [ 263.095603][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.102597][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.131590][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.149664][ T8861] team0: Port device team_slave_0 added [ 263.160070][ T8861] team0: Port device team_slave_1 added [ 263.177916][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.191224][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.200538][ T8865] bridge_slave_0: entered allmulticast mode [ 263.208248][ T8865] bridge_slave_0: entered promiscuous mode [ 263.219728][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.229756][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.237239][ T8865] bridge_slave_1: entered allmulticast mode [ 263.244154][ T8865] bridge_slave_1: entered promiscuous mode [ 263.247459][ T5240] Bluetooth: hci1: command tx timeout [ 263.256249][ T5232] Bluetooth: hci2: command tx timeout [ 263.256850][ T8863] team0: Port device team_slave_1 added [ 263.282857][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.290242][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.316636][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.324940][ T5240] Bluetooth: hci3: command tx timeout [ 263.373641][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.380951][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.407413][ T8861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.418726][ T5240] Bluetooth: hci4: command tx timeout [ 263.429825][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.437254][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.466725][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.491895][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.568366][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.578179][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.604786][ T8861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.624401][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.645245][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.652254][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.687526][ T8863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.706779][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.713770][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.740678][ T8863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.793431][ T2930] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.864073][ T8865] team0: Port device team_slave_0 added [ 263.892615][ T8857] hsr_slave_0: entered promiscuous mode [ 263.903801][ T8857] hsr_slave_1: entered promiscuous mode [ 263.910772][ T8857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.922834][ T8857] Cannot create hsr debugfs directory [ 263.942510][ T8861] hsr_slave_0: entered promiscuous mode [ 263.949795][ T8861] hsr_slave_1: entered promiscuous mode [ 263.956833][ T8861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.964424][ T8861] Cannot create hsr debugfs directory [ 263.983348][ T8865] team0: Port device team_slave_1 added [ 264.016526][ T2930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.116061][ T8859] hsr_slave_0: entered promiscuous mode [ 264.122665][ T8859] hsr_slave_1: entered promiscuous mode [ 264.129109][ T8859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.136836][ T8859] Cannot create hsr debugfs directory [ 264.158553][ T2930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.186876][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.193871][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.220251][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.249342][ T8863] hsr_slave_0: entered promiscuous mode [ 264.256679][ T8863] hsr_slave_1: entered promiscuous mode [ 264.272078][ T8863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.280189][ T8863] Cannot create hsr debugfs directory [ 264.302805][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.310069][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.336497][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.380984][ T2930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.611305][ T8865] hsr_slave_0: entered promiscuous mode [ 264.618140][ T8865] hsr_slave_1: entered promiscuous mode [ 264.624367][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.632508][ T8865] Cannot create hsr debugfs directory [ 264.849250][ T2930] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 264.860453][ T2930] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.963583][ T8859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.013312][ T2930] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.076620][ T5240] Bluetooth: hci0: command tx timeout [ 265.085775][ T8859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.129195][ T2930] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.188161][ T8859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.249124][ T2930] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.293653][ T8859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.314650][ T5240] Bluetooth: hci1: command tx timeout [ 265.321001][ T5240] Bluetooth: hci2: command tx timeout [ 265.395623][ T5240] Bluetooth: hci3: command tx timeout [ 265.484744][ T5240] Bluetooth: hci4: command tx timeout [ 265.507343][ T8857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.524448][ T2930] bridge_slave_1: left allmulticast mode [ 265.534038][ T2930] bridge_slave_1: left promiscuous mode [ 265.542174][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.552015][ T2930] bridge_slave_0: left allmulticast mode [ 265.558102][ T2930] bridge_slave_0: left promiscuous mode [ 265.563885][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.575806][ T2930] bridge_slave_1: left allmulticast mode [ 265.581555][ T2930] bridge_slave_1: left promiscuous mode [ 265.588354][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.598907][ T2930] bridge_slave_0: left allmulticast mode [ 265.606574][ T2930] bridge_slave_0: left promiscuous mode [ 265.613060][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.982216][ T2930] gretap0 (unregistering): left promiscuous mode [ 266.118932][ T45] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 266.143230][ T45] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 266.199740][ T45] usb 3-1: USB disconnect, device number 15 [ 266.361709][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.376114][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.388110][ T2930] bond0 (unregistering): Released all slaves [ 266.538079][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.552097][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.563305][ T2930] bond0 (unregistering): Released all slaves [ 266.601127][ T8857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.718307][ T8857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.804290][ T8857] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 266.816562][ T8857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.155377][ T5240] Bluetooth: hci0: command tx timeout [ 267.318861][ T2930] hsr_slave_0: left promiscuous mode [ 267.325064][ T2930] hsr_slave_1: left promiscuous mode [ 267.331154][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.340822][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.349715][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.357410][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.368628][ T2930] batadv_slave_1: left promiscuous mode [ 267.389403][ T2930] hsr_slave_0: left promiscuous mode [ 267.395109][ T5240] Bluetooth: hci2: command tx timeout [ 267.402293][ T2930] hsr_slave_1: left promiscuous mode [ 267.404644][ T5240] Bluetooth: hci1: command tx timeout [ 267.413644][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.421384][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.431783][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.439463][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.473946][ T2930] veth1_macvtap: left promiscuous mode [ 267.479737][ T5240] Bluetooth: hci3: command tx timeout [ 267.485460][ T2930] veth0_macvtap: left promiscuous mode [ 267.491106][ T2930] veth1_vlan: left promiscuous mode [ 267.497285][ T2930] veth0_vlan: left promiscuous mode [ 267.503578][ T2930] veth0_macvtap: left promiscuous mode [ 267.509365][ T2930] veth1_vlan: left promiscuous mode [ 267.514792][ T2930] veth0_vlan: left promiscuous mode [ 267.554759][ T5240] Bluetooth: hci4: command tx timeout [ 268.178177][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 268.232098][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 269.108439][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 269.159018][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 269.632380][ T2930] lo (unregistering): left allmulticast mode [ 269.971918][ T8863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.019996][ T8863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.040448][ T8863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.063914][ T8863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.263504][ T8863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.330013][ T8863] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.358855][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.366116][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.413051][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.420260][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.503337][ T8859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.520432][ T8859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.538060][ T8863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.600759][ T8859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.645050][ T8859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.687874][ T8857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.742802][ T8857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.768855][ T8857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.798511][ T8857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 270.851501][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.017682][ T8861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.042630][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.074739][ T8861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.106437][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.125037][ T8861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.173636][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.180836][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.196527][ T8861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.230037][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.237245][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.258789][ T8865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.374236][ T8865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.407715][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.425058][ T8865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.483006][ T8865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.558344][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.582756][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.589975][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.679777][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.686992][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.711826][ T8863] veth0_vlan: entered promiscuous mode [ 271.812118][ T8863] veth1_vlan: entered promiscuous mode [ 271.947547][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.054390][ T8863] veth0_macvtap: entered promiscuous mode [ 272.078885][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.146505][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.158999][ T8863] veth1_macvtap: entered promiscuous mode [ 272.170124][ T8861] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.264346][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.286339][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.293542][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.377533][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.384736][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.411434][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.418693][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.452648][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.459865][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.509011][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.534982][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.554855][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.570771][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.583339][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.681553][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.693770][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.704255][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.721847][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.733386][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.748356][ T8859] veth0_vlan: entered promiscuous mode [ 272.757141][ T8863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.767552][ T8863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.777099][ T8863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.786383][ T8863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.822135][ T8859] veth1_vlan: entered promiscuous mode [ 272.853731][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.989757][ T8859] veth0_macvtap: entered promiscuous mode [ 273.010571][ T8859] veth1_macvtap: entered promiscuous mode [ 273.091540][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.135737][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.198579][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.215621][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.237158][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.257525][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.269459][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.281488][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.293731][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.315482][ T8857] veth0_vlan: entered promiscuous mode [ 273.331470][ T2930] bridge_slave_1: left allmulticast mode [ 273.337386][ T2930] bridge_slave_1: left promiscuous mode [ 273.343085][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.352479][ T2930] bridge_slave_0: left allmulticast mode [ 273.359922][ T2930] bridge_slave_0: left promiscuous mode [ 273.365896][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.758952][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.773433][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.789826][ T2930] bond0 (unregistering): Released all slaves [ 273.811903][ T8857] veth1_vlan: entered promiscuous mode [ 273.911582][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.923094][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.933023][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.944596][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.957712][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.968557][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.980053][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.027043][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.039106][ T8859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.051567][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.061295][ T8859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.074650][ T8859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.083423][ T8859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.292445][ T8857] veth0_macvtap: entered promiscuous mode [ 274.367163][ T2930] hsr_slave_0: left promiscuous mode [ 274.438054][ T2930] veth1_macvtap: left promiscuous mode [ 274.443707][ T2930] veth0_macvtap: left promiscuous mode [ 274.450156][ T2930] veth1_vlan: left promiscuous mode [ 274.460712][ T2930] veth0_vlan: left promiscuous mode [ 274.931347][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 274.979772][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 275.467718][ T8861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.479210][ T8857] veth1_macvtap: entered promiscuous mode [ 275.491635][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.566380][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.574276][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.581997][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.597867][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.638760][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.663141][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.673137][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.684744][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.694713][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.705346][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.717250][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.727872][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.763755][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.837533][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.865058][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.883621][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.904036][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.915515][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.926590][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.938664][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.951362][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.973627][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.001936][ T8857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.013922][ T8857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.037091][ T8857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.053751][ T8857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.073999][ T8861] veth0_vlan: entered promiscuous mode [ 276.134756][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 276.177267][ T8865] veth0_vlan: entered promiscuous mode [ 276.203506][ T8865] veth1_vlan: entered promiscuous mode [ 276.222733][ T2930] IPVS: stop unused estimator thread 0... [ 276.246788][ T8861] veth1_vlan: entered promiscuous mode [ 276.298350][ T8865] veth0_macvtap: entered promiscuous mode [ 276.310420][ T25] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 276.323167][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 276.344403][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.353888][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.376156][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.394109][ T25] usb 3-1: Product: syz [ 276.395145][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.399840][ T25] usb 3-1: Manufacturer: syz [ 276.414806][ T25] usb 3-1: SerialNumber: syz [ 276.415380][ T8865] veth1_macvtap: entered promiscuous mode [ 276.454913][ T8861] veth0_macvtap: entered promiscuous mode [ 276.471405][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.487055][ T8861] veth1_macvtap: entered promiscuous mode [ 276.492956][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.526429][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.537351][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.547971][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.559474][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.570690][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.581304][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.593840][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.607644][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.617559][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.628290][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.641636][ T8930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 276.648917][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.672684][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.705520][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.732859][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.751386][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.766299][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.778201][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.794392][ T8935] input: syz0 as /devices/virtual/input/input32 [ 276.814711][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.832129][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.844051][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.862491][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.872750][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.884468][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.897125][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.928349][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.963502][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.022353][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.051912][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.094758][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.118026][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.132320][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.152352][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.178486][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.199844][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.214279][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.239259][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.276201][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.289069][ T8930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.294568][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.314047][ T29] audit: type=1400 audit(1727796667.511:517): avc: denied { ioctl } for pid=8944 comm="syz.0.1446" path="/dev/vhost-net" dev="devtmpfs" ino=1082 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 277.317147][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.359439][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.373587][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.386595][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.407455][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.417425][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.427984][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.437959][ T8865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.449444][ T8865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.461118][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.480880][ T8861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.504240][ T8861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.511499][ T25] cdc_ncm 3-1:1.0: bind() failure [ 277.517650][ T8861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.532147][ T25] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 277.550870][ T8861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.555719][ T25] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 277.574301][ T8865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.576191][ T25] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 277.602700][ T25] usb 3-1: USB disconnect, device number 16 [ 277.604548][ T8865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.632490][ T8865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.652769][ T8865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.837606][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.846216][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.910073][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.924372][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.987684][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.010748][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.127191][ T8951] Falling back ldisc for ttyS3. [ 278.139025][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.164698][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.604702][ T29] audit: type=1326 audit(1727796668.791:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.3.1439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x0 [ 278.651809][ T8962] mmap: syz.4.1453 (8962) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 278.766208][ T8968] netlink: 'syz.0.1454': attribute type 4 has an invalid length. [ 279.852993][ T29] audit: type=1400 audit(1727796670.051:519): avc: denied { write } for pid=8985 comm="syz.4.1463" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.911263][ T8988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.964297][ T29] audit: type=1400 audit(1727796670.051:520): avc: denied { open } for pid=8985 comm="syz.4.1463" path="/10/bus" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.086456][ T8993] syz_tun: entered promiscuous mode [ 280.168254][ T8993] syz_tun: left promiscuous mode [ 280.349081][ T9003] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 280.376311][ T9003] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 280.869273][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 280.946957][ T29] audit: type=1400 audit(1727796671.151:521): avc: denied { attach_queue } for pid=9015 comm="syz.0.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 281.049331][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 281.064359][ T45] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 281.105449][ T45] usb 5-1: config 0 has no interface number 0 [ 281.114612][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 281.163473][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.184178][ T45] usb 5-1: Product: syz [ 281.193210][ T45] usb 5-1: Manufacturer: syz [ 281.206408][ T45] usb 5-1: SerialNumber: syz [ 281.229862][ T45] usb 5-1: config 0 descriptor?? [ 281.277232][ T45] smsc95xx v2.0.0 [ 281.698756][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 281.716333][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 282.345701][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 282.412274][ T45] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 282.460535][ T45] usb 5-1: USB disconnect, device number 24 [ 282.523990][ T29] audit: type=1400 audit(1727796672.721:522): avc: denied { read } for pid=9051 comm="syz.0.1491" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 282.725149][ T9057] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 282.922821][ T9064] hsr0: entered allmulticast mode [ 282.928977][ T9064] hsr_slave_0: entered allmulticast mode [ 282.939751][ T9064] hsr_slave_1: entered allmulticast mode [ 282.956372][ T9064] hsr_slave_0: left promiscuous mode [ 282.967313][ T9064] hsr_slave_1: left promiscuous mode [ 283.051521][ T9064] hsr0 (unregistering): left allmulticast mode [ 283.653864][ T9089] netlink: 'syz.2.1509': attribute type 10 has an invalid length. [ 283.712190][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.741140][ T9089] team0: Port device batadv0 added [ 284.103062][ T9097] loop0: detected capacity change from 0 to 7 [ 284.133110][ T9097] Dev loop0: unable to read RDB block 7 [ 284.144636][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 284.150439][ T9097] loop0: unable to read partition table [ 284.162011][ T29] audit: type=1400 audit(1727796674.361:523): avc: denied { listen } for pid=9098 comm="syz.3.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.162204][ T9099] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 284.184754][ T9097] loop0: partition table beyond EOD, truncated [ 284.210350][ T9097] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 284.210350][ T9097] ) failed (rc=-5) [ 284.304680][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 284.311901][ T45] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.341250][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 284.368366][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.379472][ T45] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.393244][ T45] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.412049][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.686630][ T45] usb 1-1: usb_control_msg returned -32 [ 284.692317][ T45] usbtmc 1-1:16.0: can't read capabilities [ 285.061454][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.073888][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.082426][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.095269][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.104213][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.115944][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.157544][ T9120] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 285.168337][ T45] usb 1-1: USB disconnect, device number 25 [ 285.524196][ T29] audit: type=1400 audit(1727796675.721:524): avc: denied { setopt } for pid=9134 comm="syz.3.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.644745][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 285.681053][ T9119] chnl_net:caif_netlink_parms(): no params data found [ 285.738359][ T9141] tipc: Started in network mode [ 285.758244][ T9141] tipc: Node identity 1, cluster identity 4711 [ 285.783152][ T9141] tipc: Node number set to 1 [ 285.808739][ T45] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 285.818307][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.826631][ T45] usb 3-1: Product: syz [ 285.830953][ T45] usb 3-1: Manufacturer: syz [ 285.835745][ T5326] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 285.845619][ T45] usb 3-1: SerialNumber: syz [ 285.864770][ T45] usb 3-1: config 0 descriptor?? [ 285.872708][ T45] ch341 3-1:0.0: ch341-uart converter detected [ 285.948099][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.984731][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.997325][ T5326] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.010672][ T5326] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.018879][ T9119] bridge_slave_0: entered allmulticast mode [ 286.023481][ T5326] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.036298][ T5326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.052975][ T9137] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 286.061612][ T9119] bridge_slave_0: entered promiscuous mode [ 286.086069][ T5326] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.102925][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.120843][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.144956][ T9119] bridge_slave_1: entered allmulticast mode [ 286.165962][ T9119] bridge_slave_1: entered promiscuous mode [ 286.619083][ T5223] usb 2-1: USB disconnect, device number 20 [ 286.779231][ T1057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.125474][ T9149] syzkaller1: entered promiscuous mode [ 287.131027][ T9149] syzkaller1: entered allmulticast mode [ 287.165651][ T5240] Bluetooth: hci3: command tx timeout [ 287.310644][ T9119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.414681][ T45] usb 3-1: failed to send control message: -110 [ 287.421047][ T45] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 288.002499][ T1057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.014107][ T5223] usb 3-1: USB disconnect, device number 17 [ 288.025814][ T5223] ch341 3-1:0.0: device disconnected [ 288.088001][ T9119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.121679][ T1057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.231502][ T1057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.279600][ T9119] team0: Port device team_slave_0 added [ 288.296907][ T9119] team0: Port device team_slave_1 added [ 288.305085][ T5304] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 288.348848][ T9119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.358326][ T9119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.387057][ T9119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.400067][ T9119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.408135][ T9119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.443997][ T9119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.502444][ T5304] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 288.553953][ T5304] usb 4-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 288.580659][ T5304] usb 4-1: Product: syz [ 288.599110][ T9163] 9pnet: p9_errstr2errno: server reported unknown error [ 288.607650][ T5304] usb 4-1: Manufacturer: syz [ 288.612341][ T5304] usb 4-1: SerialNumber: syz [ 288.626453][ T5304] usb 4-1: config 0 descriptor?? [ 288.752455][ T9119] hsr_slave_0: entered promiscuous mode [ 288.812120][ T9119] hsr_slave_1: entered promiscuous mode [ 289.115851][ T1057] bridge_slave_1: left allmulticast mode [ 289.132981][ T1057] bridge_slave_1: left promiscuous mode [ 289.177214][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.235058][ T5240] Bluetooth: hci3: command tx timeout [ 289.242568][ T1057] bridge_slave_0: left allmulticast mode [ 289.248478][ T1057] bridge_slave_0: left promiscuous mode [ 289.254327][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.282954][ T9179] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 289.431287][ T29] audit: type=1400 audit(1727796679.631:525): avc: denied { write } for pid=9185 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 289.615161][ T45] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 289.686776][ T5304] usb 4-1: non-Atmel transceiver xxxx6103 [ 289.812761][ T45] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 289.833076][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.854839][ T45] usb 1-1: Product: syz [ 289.859145][ T45] usb 1-1: Manufacturer: syz [ 289.875589][ T45] usb 1-1: SerialNumber: syz [ 289.895872][ T5304] usb 4-1: Firmware version (0.0) predates our first public release. [ 289.906267][ T45] usb 1-1: config 0 descriptor?? [ 289.926373][ T5304] usb 4-1: Please update to version 0.2 or newer [ 289.959760][ T5304] usb 4-1: atusb_probe: initialization failed, error = -19 [ 289.990248][ T5304] usb 4-1: USB disconnect, device number 29 [ 290.009129][ T6906] udevd[6906]: setting owner of /dev/bus/usb/004/029 to uid=0, gid=0 failed: No such file or directory [ 290.362381][ T45] usb 1-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 290.587801][ T45] usb 1-1: no permanent extended address found, random address set [ 290.831032][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.844278][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.864966][ T1057] bond0 (unregistering): Released all slaves [ 290.899158][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.066837][ T45] usb 1-1: USB disconnect, device number 26 [ 291.319023][ T5240] Bluetooth: hci3: command tx timeout [ 291.665437][ T9239] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1566'. [ 291.686534][ T9234] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1566'. [ 292.059056][ T1057] hsr_slave_0: left promiscuous mode [ 292.076096][ T1057] hsr_slave_1: left promiscuous mode [ 292.086975][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.117938][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.155585][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.173893][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.273404][ T1057] veth1_macvtap: left promiscuous mode [ 292.292991][ T1057] veth0_macvtap: left promiscuous mode [ 292.305229][ T1057] veth1_vlan: left promiscuous mode [ 292.310619][ T1057] veth0_vlan: left promiscuous mode [ 292.321290][ T29] audit: type=1400 audit(1727796682.521:526): avc: denied { bind } for pid=9258 comm="syz.2.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 292.364094][ T29] audit: type=1400 audit(1727796682.541:527): avc: denied { listen } for pid=9258 comm="syz.2.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 292.384664][ T29] audit: type=1400 audit(1727796682.561:528): avc: denied { create } for pid=9258 comm="syz.2.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 292.433594][ T29] audit: type=1400 audit(1727796682.561:529): avc: denied { write } for pid=9258 comm="syz.2.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 292.479507][ T29] audit: type=1400 audit(1727796682.561:530): avc: denied { nlmsg_read } for pid=9258 comm="syz.2.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 292.561588][ T29] audit: type=1326 audit(1727796682.571:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7fc00000 [ 292.662799][ T29] audit: type=1326 audit(1727796682.721:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 292.800517][ T29] audit: type=1326 audit(1727796682.741:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 292.858504][ T29] audit: type=1326 audit(1727796682.741:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 293.399094][ T5240] Bluetooth: hci3: command tx timeout [ 293.465732][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 293.654870][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 293.662617][ T25] usb 3-1: config 0 has no interfaces? [ 293.672142][ T9281] input: syz0 as /devices/virtual/input/input34 [ 293.679267][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 293.704642][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.744612][ T25] usb 3-1: config 0 descriptor?? [ 294.248566][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.285427][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.315830][ T25] usb 3-1: USB disconnect, device number 18 [ 294.397252][ T9296] 9pnet: p9_errstr2errno: server reported unknown error [ 294.487477][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 294.635980][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 295.244716][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 295.407058][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 295.424307][ T25] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.444053][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.467384][ T25] usb 4-1: config 0 descriptor?? [ 296.032997][ T25] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 296.053673][ T25] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 296.064165][ T25] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 296.141248][ T9331] binder: 9330:9331 ioctl c0306201 0 returned -14 [ 296.286657][ T9119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.326759][ T9119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.372315][ T9119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 296.402912][ T9119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.555869][ T9119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.616419][ T9119] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.633748][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.640980][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.710377][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.717615][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.728347][ T9344] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1611'. [ 296.747921][ T9344] netlink: 'syz.2.1611': attribute type 1 has an invalid length. [ 297.392291][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 297.562687][ T9119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.925891][ T5304] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 297.994740][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 298.094642][ T5304] usb 1-1: Using ep0 maxpacket: 8 [ 298.099169][ T9119] veth0_vlan: entered promiscuous mode [ 298.141166][ T5304] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 298.155246][ T5304] usb 1-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 298.171379][ T5304] usb 1-1: Product: syz [ 298.182180][ T5304] usb 1-1: Manufacturer: syz [ 298.184009][ T9119] veth1_vlan: entered promiscuous mode [ 298.195139][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 298.206844][ T45] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 298.216795][ T5304] usb 1-1: SerialNumber: syz [ 298.231027][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.245958][ T5304] usb 1-1: config 0 descriptor?? [ 298.286835][ T45] usb 2-1: config 0 descriptor?? [ 298.298416][ T5304] gspca_main: sq905-2.14.0 probing 2770:9120 [ 298.307100][ T9119] veth0_macvtap: entered promiscuous mode [ 298.351975][ T9119] veth1_macvtap: entered promiscuous mode [ 298.392718][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.413089][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.424348][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.457863][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.473652][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.484765][ T8949] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 298.494858][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.515623][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.543530][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.560019][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.571054][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.591033][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.602415][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.620240][ T45] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 298.621986][ T9119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.650717][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.661654][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.661858][ T8949] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 298.675331][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.704594][ T8949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.715645][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.724772][ T8949] usb 3-1: config 0 has no interface number 0 [ 298.731683][ T8949] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x82 has invalid maxpacket 975, setting to 64 [ 298.743555][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.761826][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.773256][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.784846][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.796188][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.807074][ T8949] usb 3-1: New USB device found, idVendor=05c6, idProduct=7102, bcdDevice=10.5f [ 298.820240][ T8949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.828519][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.838800][ T8949] usb 3-1: Product: syz [ 298.843027][ T8949] usb 3-1: Manufacturer: syz [ 298.848783][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.860639][ T8949] usb 3-1: SerialNumber: syz [ 298.866517][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.879518][ T8949] usb 3-1: config 0 descriptor?? [ 298.885507][ T9384] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 298.887001][ T9119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.915739][ T9119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.924662][ T9119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.933425][ T9119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.943294][ T9119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.063122][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.086344][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.138830][ T8949] usb 3-1: USB disconnect, device number 19 [ 299.139400][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.153420][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.314857][ T5304] gspca_sq905: bulk read fail (-22) len 0/4 [ 299.326354][ T5304] sq905 1-1:0.0: probe with driver sq905 failed with error -5 [ 299.379177][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 299.379200][ T29] audit: type=1400 audit(1727796689.581:552): avc: denied { execute } for pid=9389 comm="syz.1.1625" path="/dev/dsp" dev="devtmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 299.527490][ T8949] usb 1-1: USB disconnect, device number 27 [ 299.879447][ T9405] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 300.308102][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 300.494803][ T8949] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 300.644647][ T8949] usb 5-1: Using ep0 maxpacket: 32 [ 300.671432][ T8949] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 300.702850][ T8949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.745086][ T8949] usb 5-1: config 0 descriptor?? [ 300.755295][ T9429] netlink: 'syz.2.1640': attribute type 2 has an invalid length. [ 300.781478][ T9429] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1640'. [ 300.804721][ T29] audit: type=1400 audit(1727796691.001:553): avc: denied { read } for pid=9430 comm="syz.0.1641" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 300.854742][ T29] audit: type=1400 audit(1727796691.001:554): avc: denied { open } for pid=9430 comm="syz.0.1641" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 301.846591][ T9435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.922123][ T8949] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 302.226564][ T29] audit: type=1400 audit(1727796692.421:555): avc: denied { set_context_mgr } for pid=9446 comm="syz.3.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 302.258980][ T5228] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 302.269481][ T9447] binder: 9446:9447 ioctl c0306201 20000180 returned -22 [ 302.444240][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.465058][ T29] audit: type=1400 audit(1727796692.671:556): avc: denied { write } for pid=9452 comm="syz.1.1652" path="socket:[31002]" dev="sockfs" ino=31002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.469357][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.554224][ T29] audit: type=1400 audit(1727796692.751:557): avc: denied { bind } for pid=9457 comm="syz.3.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 302.629957][ T5228] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 302.692697][ T5228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.732225][ T5228] usb 1-1: config 0 descriptor?? [ 303.091797][ T9475] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.199322][ T5228] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 303.224933][ T5228] cp2112 0003:10C4:EA90.0029: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 303.398315][ T5228] cp2112 0003:10C4:EA90.0029: error requesting version [ 303.434368][ T5228] cp2112 0003:10C4:EA90.0029: probe with driver cp2112 failed with error -71 [ 303.473546][ T5228] usb 1-1: USB disconnect, device number 28 [ 304.436824][ T9505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1672'. [ 304.474661][ T9505] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1672'. [ 304.514304][ T9505] netlink: 'syz.0.1672': attribute type 6 has an invalid length. [ 304.574563][ T9505] netlink: 'syz.0.1672': attribute type 5 has an invalid length. [ 304.582387][ T9505] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1672'. [ 304.619993][ T29] audit: type=1400 audit(1727796694.821:558): avc: denied { mounton } for pid=9511 comm="syz.3.1676" path="/proc/117/task" dev="proc" ino=30150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 304.967098][ T29] audit: type=1326 audit(1727796695.171:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 305.017997][ T29] audit: type=1326 audit(1727796695.171:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 305.171282][ T29] audit: type=1326 audit(1727796695.211:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 305.255463][ T29] audit: type=1326 audit(1727796695.211:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 305.338865][ T29] audit: type=1326 audit(1727796695.211:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 305.456119][ T29] audit: type=1326 audit(1727796695.211:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 305.563348][ T29] audit: type=1326 audit(1727796695.211:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 305.669175][ T29] audit: type=1326 audit(1727796695.211:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 305.732367][ T29] audit: type=1326 audit(1727796695.211:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f805697dff9 code=0x7ffc0000 [ 306.685749][ T9579] syz.1.1699 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 307.665906][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'. [ 307.803502][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 308.050659][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 308.703582][ T9644] input: syz1 as /devices/virtual/input/input35 [ 308.945853][ T5223] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 309.114562][ T5223] usb 1-1: Using ep0 maxpacket: 32 [ 309.136143][ T5223] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 309.156570][ T5223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.186687][ T5223] usb 1-1: config 0 descriptor?? [ 309.481038][ T5223] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 309.794838][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 309.984552][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 309.996231][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.007753][ T9] usb 3-1: config 0 has no interfaces? [ 310.015244][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 310.024355][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.068095][ T9] usb 3-1: config 0 descriptor?? [ 310.375280][ T9673] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 310.389970][ T5277] usb 3-1: USB disconnect, device number 20 [ 310.732305][ T9684] loop2: detected capacity change from 0 to 7 [ 310.750395][ T9684] Dev loop2: unable to read RDB block 7 [ 310.766277][ T9684] loop2: unable to read partition table [ 310.776780][ T9684] loop2: partition table beyond EOD, truncated [ 310.783001][ T9684] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 311.133866][ T9695] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 311.275361][ T9701] loop0: detected capacity change from 0 to 7 [ 311.284974][ T9701] Dev loop0: unable to read RDB block 7 [ 311.290615][ T9701] loop0: AHDI p2 [ 311.294325][ T9701] loop0: partition table partially beyond EOD, truncated [ 311.377941][ T5304] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 311.549969][ T5304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 93, changing to 10 [ 311.562668][ T5304] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 311.576941][ T5304] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.586314][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.595559][ T5304] usb 3-1: Product: syz [ 311.599936][ T5304] usb 3-1: Manufacturer: syz [ 311.604847][ T5304] usb 3-1: SerialNumber: syz [ 311.834391][ T9697] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 312.503621][ T9697] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 312.593292][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1756'. [ 312.603768][ T9713] netlink: 'syz.3.1756': attribute type 7 has an invalid length. [ 312.612247][ T9713] netlink: 'syz.3.1756': attribute type 8 has an invalid length. [ 312.622055][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'. [ 312.635496][ T9713] erspan0: entered promiscuous mode [ 312.641936][ T9713] batadv_slave_1: entered promiscuous mode [ 312.649464][ T9713] gretap0: entered promiscuous mode [ 312.657082][ T9713] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 312.664877][ T9713] Cannot create hsr debugfs directory [ 312.736458][ T5304] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 312.744551][ T5304] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 312.752013][ T5304] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 312.827961][ T9717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.944179][ T5304] cdc_ncm 3-1:1.0: setting tx_max = 28 [ 312.976127][ T5304] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 312.997801][ T5304] usb 3-1: USB disconnect, device number 21 [ 313.005001][ T5304] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 313.188768][ T9723] raw_sendmsg: syz.3.1761 forgot to set AF_INET. Fix it! [ 313.622606][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 313.622629][ T29] audit: type=1400 audit(1727796703.821:580): avc: denied { setopt } for pid=9733 comm="syz.2.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.406713][ T29] audit: type=1400 audit(1727796704.611:581): avc: denied { mounton } for pid=9756 comm="syz.3.1775" path="/89/file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 314.424034][ T9762] FAT-fs (loop7): invalid media value (0x90) [ 314.511997][ T9762] FAT-fs (loop7): Can't find a valid FAT filesystem [ 314.568960][ T29] audit: type=1400 audit(1727796704.771:582): avc: denied { getopt } for pid=9765 comm="syz.2.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.420607][ T9781] vivid-003: disconnect [ 315.439759][ T9778] vivid-003: reconnect [ 315.675615][ T9791] netlink: 'syz.2.1789': attribute type 10 has an invalid length. [ 315.734888][ T9791] team0: Port device netdevsim0 added [ 315.756875][ T29] audit: type=1400 audit(1727796705.951:583): avc: denied { shutdown } for pid=9786 comm="syz.1.1787" laddr=ff02::1 lport=45079 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 315.782487][ T9793] netlink: 'syz.2.1789': attribute type 10 has an invalid length. [ 315.897206][ T9793] team0: Port device netdevsim0 removed [ 315.914943][ T29] audit: type=1400 audit(1727796706.121:584): avc: denied { append } for pid=9795 comm="syz.1.1790" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.938350][ T9793] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 316.147879][ T9798] input: syz1 as /devices/virtual/input/input36 [ 316.235311][ T9802] unknown channel width for channel at 909000KHz? [ 316.252124][ T9802] unknown channel width for channel at 909000KHz? [ 316.324310][ T29] audit: type=1400 audit(1727796706.521:585): avc: denied { read } for pid=9805 comm="syz.1.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 316.654068][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'. [ 316.697163][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 317.084648][ T29] audit: type=1326 audit(1727796707.281:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673077dff9 code=0x7ffc0000 [ 317.148144][ T29] audit: type=1326 audit(1727796707.281:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673077dff9 code=0x7ffc0000 [ 317.171480][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.219357][ T29] audit: type=1326 audit(1727796707.311:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f673077dff9 code=0x7ffc0000 [ 317.291380][ T29] audit: type=1326 audit(1727796707.311:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673077dff9 code=0x7ffc0000 [ 317.826338][ T9845] vivid-007: disconnect [ 317.843555][ T9842] vivid-007: reconnect [ 318.485056][ T9865] overlay: filesystem on ./bus not supported [ 319.044044][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'. [ 319.276605][ T5305] kernel write not supported for file /media3 (pid: 5305 comm: kworker/1:5) [ 319.725177][ T9877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9877 comm=syz.1.1827 [ 319.826321][ T9913] netlink: 'syz.4.1841': attribute type 3 has an invalid length. [ 319.844556][ T9913] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1841'. [ 319.863325][ T9915] Bluetooth: MGMT ver 1.23 [ 320.004619][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 320.004643][ T29] audit: type=1400 audit(1727796710.201:604): avc: denied { watch watch_reads } for pid=9916 comm="syz.2.1844" path=2F6D656D66643A2D42D54E49C570430A202864656C6574656429 dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 320.093393][ T29] audit: type=1400 audit(1727796710.261:605): avc: denied { listen } for pid=9917 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 320.179131][ T29] audit: type=1400 audit(1727796710.271:606): avc: denied { ioctl } for pid=9917 comm="syz.4.1845" path="socket:[32134]" dev="sockfs" ino=32134 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 320.255572][ T9923] erspan0: entered promiscuous mode [ 320.285629][ T9923] erspan0: left promiscuous mode [ 320.912865][ T9942] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 321.153747][ T9952] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 321.191205][ T9954] tls_set_device_offload: netdev not found [ 321.906194][ T9970] vivid-007: disconnect [ 321.911595][ T9969] vivid-007: reconnect [ 321.925758][ T9971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.139123][ T29] audit: type=1400 audit(1727796712.341:607): avc: denied { mounton } for pid=9974 comm="syz.4.1870" path="/40/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 322.141812][ T9977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 322.475500][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.481894][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.431211][ T9993] sctp: [Deprecated]: syz.3.1878 (pid 9993) Use of int in maxseg socket option. [ 324.431211][ T9993] Use struct sctp_assoc_value instead [ 325.865351][ T5240] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 325.875764][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: kworker/u9:8 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 325.886677][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.896785][ T5240] Workqueue: hci3 hci_rx_work [ 325.901553][ T5240] Call Trace: [ 325.904874][ T5240] [ 325.907846][ T5240] dump_stack_lvl+0x16c/0x1f0 [ 325.912607][ T5240] sysfs_warn_dup+0x7f/0xa0 [ 325.917180][ T5240] sysfs_create_dir_ns+0x24d/0x2b0 [ 325.922374][ T5240] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 325.928075][ T5240] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.933519][ T5240] ? kobject_add_internal+0x12d/0x990 [ 325.939027][ T5240] ? do_raw_spin_unlock+0x172/0x230 [ 325.944294][ T5240] kobject_add_internal+0x2c8/0x990 [ 325.949584][ T5240] kobject_add+0x16f/0x240 [ 325.954080][ T5240] ? __pfx_kobject_add+0x10/0x10 [ 325.959104][ T5240] ? class_to_subsys+0x3e/0x160 [ 325.964050][ T5240] ? do_raw_spin_unlock+0x172/0x230 [ 325.969315][ T5240] ? kobject_put+0xab/0x5a0 [ 325.973910][ T5240] device_add+0x289/0x1a70 [ 325.978405][ T5240] ? __pfx_dev_set_name+0x10/0x10 [ 325.983495][ T5240] ? __pfx_device_add+0x10/0x10 [ 325.988426][ T5240] ? mgmt_send_event_skb+0x2f2/0x460 [ 325.993797][ T5240] hci_conn_add_sysfs+0x17e/0x230 [ 325.998976][ T5240] le_conn_complete_evt+0x1078/0x1d80 [ 326.004419][ T5240] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 326.010202][ T5240] ? trace_contention_end+0xea/0x140 [ 326.015555][ T5240] ? __mutex_lock+0x1a6/0x9c0 [ 326.020332][ T5240] hci_le_conn_complete_evt+0x23c/0x370 [ 326.025965][ T5240] hci_le_meta_evt+0x2e2/0x5d0 [ 326.030794][ T5240] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 326.036928][ T5240] hci_event_packet+0x666/0x1180 [ 326.041926][ T5240] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 326.047277][ T5240] ? __pfx_hci_event_packet+0x10/0x10 [ 326.052715][ T5240] ? mark_held_locks+0x9f/0xe0 [ 326.057542][ T5240] ? kcov_remote_start+0x3cf/0x6e0 [ 326.062710][ T5240] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.067996][ T5240] hci_rx_work+0x2c6/0x1610 [ 326.072568][ T5240] ? lock_acquire+0x2f/0xb0 [ 326.077234][ T5240] ? process_one_work+0x921/0x1ba0 [ 326.082417][ T5240] process_one_work+0x9c5/0x1ba0 [ 326.087442][ T5240] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 326.093132][ T5240] ? __pfx_process_one_work+0x10/0x10 [ 326.098583][ T5240] ? assign_work+0x1a0/0x250 [ 326.103256][ T5240] worker_thread+0x6c8/0xf00 [ 326.107927][ T5240] ? __pfx_worker_thread+0x10/0x10 [ 326.113094][ T5240] kthread+0x2c1/0x3a0 [ 326.117225][ T5240] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.122480][ T5240] ? __pfx_kthread+0x10/0x10 [ 326.127137][ T5240] ret_from_fork+0x45/0x80 [ 326.131617][ T5240] ? __pfx_kthread+0x10/0x10 [ 326.136282][ T5240] ret_from_fork_asm+0x1a/0x30 [ 326.141155][ T5240] [ 326.152208][ T5240] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 326.167330][ T5240] Bluetooth: hci3: failed to register connection device [ 326.294588][ T5277] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 326.376326][ T29] audit: type=1400 audit(1727796716.581:608): avc: denied { watch watch_reads } for pid=10026 comm="syz.4.1892" path="pipe:[33214]" dev="pipefs" ino=33214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 326.454803][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 326.466955][ T5277] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 326.485343][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.498248][ T5277] usb 3-1: config 0 descriptor?? [ 326.518299][ T5277] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 327.748671][ T5277] gspca_sunplus: reg_w_riv err -71 [ 327.753906][ T5277] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 327.811439][ T5277] usb 3-1: USB disconnect, device number 22 [ 328.056132][T10049] netlink: 'syz.3.1910': attribute type 9 has an invalid length. [ 328.063991][T10049] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1910'. [ 328.219615][T10055] (unnamed net_device) (uninitialized): up delay (65535) is not a multiple of miimon (8196), value rounded to 57372 ms [ 328.276979][T10062] netlink: 'syz.0.1903': attribute type 10 has an invalid length. [ 328.341203][T10062] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 328.398863][T10061] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1902'. [ 328.509016][T10054] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1902'. [ 328.934887][T10082] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.1915'. [ 328.951916][T10082] netlink: 'syz.1.1915': attribute type 3 has an invalid length. [ 328.975499][T10082] netlink: 105 bytes leftover after parsing attributes in process `syz.1.1915'. [ 329.139178][T10087] program syz.1.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.611565][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1925'. [ 329.882573][ T29] audit: type=1400 audit(1727796720.061:609): avc: denied { mount } for pid=10110 comm="syz.4.1928" name="/" dev="rpc_pipefs" ino=32453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 330.427724][ T29] audit: type=1400 audit(1727796720.631:610): avc: denied { accept } for pid=10124 comm="syz.1.1934" path="socket:[33375]" dev="sockfs" ino=33375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.486213][ T29] audit: type=1400 audit(1727796720.691:611): avc: denied { read } for pid=10126 comm="syz.4.1935" path="socket:[32501]" dev="sockfs" ino=32501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.668703][T10136] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 330.792870][T10142] syz.4.1939: attempt to access beyond end of device [ 330.792870][T10142] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 330.834641][T10142] FAT-fs (loop9): unable to read boot sector [ 331.784029][T10154] kvm: kvm [10153]: vcpu1, guest rIP: 0xfff0 Unhandled RDMSR(0x40000005) [ 331.928187][T10161] netlink: 'syz.4.1949': attribute type 9 has an invalid length. [ 331.944066][T10161] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1949'. [ 332.048570][T10165] netlink: 'syz.4.1951': attribute type 1 has an invalid length. [ 332.056559][T10165] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.1951'. [ 332.077695][T10165] netlink: 'syz.4.1951': attribute type 2 has an invalid length. [ 332.092586][T10165] netlink: 177 bytes leftover after parsing attributes in process `syz.4.1951'. [ 332.355220][ T5240] Bluetooth: hci3: command 0x0406 tx timeout [ 332.858590][T10192] syz.2.1960: attempt to access beyond end of device [ 332.858590][T10192] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 332.924621][T10192] FAT-fs (loop5): unable to read boot sector [ 333.962682][T10197] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 334.190612][ T29] audit: type=1400 audit(1727796724.391:612): avc: denied { create } for pid=10201 comm="syz.1.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 334.283867][ T29] audit: type=1400 audit(1727796724.421:613): avc: denied { ioctl } for pid=10201 comm="syz.1.1965" path="socket:[33469]" dev="sockfs" ino=33469 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 334.422518][ T29] audit: type=1400 audit(1727796724.621:614): avc: denied { watch watch_reads } for pid=10207 comm="syz.1.1968" path="/proc/223" dev="proc" ino=33472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 334.597028][ T29] audit: type=1400 audit(1727796724.801:615): avc: denied { create } for pid=10212 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 334.616534][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.655000][ T29] audit: type=1400 audit(1727796724.861:616): avc: denied { write } for pid=10212 comm="syz.1.1970" path="socket:[33484]" dev="sockfs" ino=33484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 337.137011][T10254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10254 comm=syz.2.1983 [ 337.547832][ T29] audit: type=1400 audit(1727796727.751:617): avc: denied { ioctl } for pid=10296 comm="syz.2.2003" path="/142/file0" dev="tmpfs" ino=758 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.572033][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.614043][T10297] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 339.461031][T10320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10320 comm=syz.4.2013 [ 339.534620][T10330] netlink: 'syz.2.2016': attribute type 4 has an invalid length. [ 339.596521][T10331] netlink: 'syz.2.2016': attribute type 4 has an invalid length. [ 339.786956][T10335] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 339.809139][T10335] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 340.044683][ T5277] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 340.070856][ T29] audit: type=1400 audit(1727796730.271:618): avc: denied { bind } for pid=10341 comm="syz.4.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 340.215779][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 340.236537][ T5277] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 340.258034][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.284527][ T5277] usb 3-1: Product: syz [ 340.295509][ T5277] usb 3-1: Manufacturer: syz [ 340.307061][ T5277] usb 3-1: SerialNumber: syz [ 340.326659][ T5277] usb 3-1: config 0 descriptor?? [ 340.349344][ T5277] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.361990][T10356] syz.1.2025: attempt to access beyond end of device [ 340.361990][T10356] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 340.378602][T10355] syz.4.2028: attempt to access beyond end of device [ 340.378602][T10355] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 340.408418][T10356] FAT-fs (loop3): unable to read boot sector [ 340.423564][ T5277] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 340.530755][ T6906] udevd[6906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.582240][ T5277] usb 3-1: USB disconnect, device number 23 [ 341.502433][ T2930] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.706679][ T2930] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.766554][ T4673] Dev loop7: unable to read RDB block 1 [ 341.774517][ T4673] loop7: unable to read partition table [ 341.780420][ T4673] loop7: partition table beyond EOD, truncated [ 341.887252][ T2930] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.107794][ T2930] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.135317][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.153517][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.162900][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.171181][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.180995][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.188918][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.301721][ T29] audit: type=1400 audit(1727796732.501:619): avc: denied { map } for pid=10394 comm="syz.2.2048" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 342.502764][ T29] audit: type=1400 audit(1727796732.701:620): avc: denied { write } for pid=10399 comm="syz.0.2050" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 342.598729][ T2930] bridge_slave_1: left allmulticast mode [ 342.605320][ T2930] bridge_slave_1: left promiscuous mode [ 342.612218][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.632473][ T2930] bridge_slave_0: left allmulticast mode [ 342.638412][ T2930] bridge_slave_0: left promiscuous mode [ 342.645485][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.674912][ T5304] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 342.840599][T10407] syz.0.2052: attempt to access beyond end of device [ 342.840599][T10407] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 342.856889][ T5304] usb 3-1: Using ep0 maxpacket: 32 [ 342.862267][T10407] FAT-fs (loop1): unable to read boot sector [ 342.877231][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.903713][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.929923][ T5304] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 342.955263][ T2930] erspan0 (unregistering): left promiscuous mode [ 342.962941][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.992674][ T2930] gretap0 (unregistering): left promiscuous mode [ 342.997509][ T5304] usb 3-1: config 0 descriptor?? [ 343.399867][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.418336][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.431324][ T2930] bond0 (unregistering): Released all slaves [ 343.449700][ T5304] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 343.472693][ T2930] bond1 (unregistering): Released all slaves [ 343.621117][ T2930] tipc: Left network mode [ 343.652156][ T5304] ft260 0003:0403:6030.002A: chip code: 5e81 abf2 [ 343.822557][T10385] chnl_net:caif_netlink_parms(): no params data found [ 343.842071][ T5304] ft260 0003:0403:6030.002A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 344.209455][ T2930] batadv_slave_1: left promiscuous mode [ 344.243963][ T5304] ft260 0003:0403:6030.002A: failed to retrieve status: -71 [ 344.252925][ T2930] hsr_slave_0: left promiscuous mode [ 344.264038][ T2930] hsr_slave_1: left promiscuous mode [ 344.273169][ T5304] ft260 0003:0403:6030.002A: failed to reset I2C controller: -71 [ 344.284768][ T5232] Bluetooth: hci4: command tx timeout [ 344.324031][ T5304] usb 3-1: USB disconnect, device number 24 [ 344.379139][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.391089][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.412686][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.421740][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.457500][ T2930] veth1_macvtap: left promiscuous mode [ 344.464060][ T2930] veth0_macvtap: left promiscuous mode [ 344.470697][ T2930] veth1_vlan: left promiscuous mode [ 344.485473][ T2930] veth0_vlan: left promiscuous mode [ 345.199955][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 345.301540][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 346.090291][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.099504][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.107962][T10385] bridge_slave_0: entered allmulticast mode [ 346.115753][T10385] bridge_slave_0: entered promiscuous mode [ 346.123890][T10385] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.135580][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.142883][T10385] bridge_slave_1: entered allmulticast mode [ 346.150266][T10385] bridge_slave_1: entered promiscuous mode [ 346.246614][T10385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.364508][ T5232] Bluetooth: hci4: command tx timeout [ 347.561386][T10385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.693409][T10385] team0: Port device team_slave_0 added [ 347.728626][T10385] team0: Port device team_slave_1 added [ 347.880808][T10385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.890216][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.918486][T10385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.947149][T10385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.966855][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.007210][T10462] syz.4.2069: attempt to access beyond end of device [ 348.007210][T10462] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 348.056580][T10462] FAT-fs (loop9): unable to read boot sector [ 348.065473][T10385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.291436][T10385] hsr_slave_0: entered promiscuous mode [ 348.302606][T10469] sctp: [Deprecated]: syz.0.2073 (pid 10469) Use of int in maxseg socket option. [ 348.302606][T10469] Use struct sctp_assoc_value instead [ 348.328766][T10385] hsr_slave_1: entered promiscuous mode [ 348.349260][T10385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.377979][T10385] Cannot create hsr debugfs directory [ 348.434939][ T5232] Bluetooth: hci4: command tx timeout [ 349.753004][T10499] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 349.801442][T10385] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.903864][T10385] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.966191][T10385] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.987654][T10385] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.115169][T10512] sctp: [Deprecated]: syz.2.2090 (pid 10512) Use of int in maxseg socket option. [ 350.115169][T10512] Use struct sctp_assoc_value instead [ 350.248838][T10385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.366789][T10385] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.434408][T10520] ALSA: seq fatal error: cannot create timer (-16) [ 350.458159][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.465360][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.502232][T10522] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29557 sclass=netlink_xfrm_socket pid=10522 comm=syz.4.2093 [ 350.524856][ T5232] Bluetooth: hci4: command tx timeout [ 350.526635][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.537511][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.720875][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2095'. [ 350.750975][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2095'. [ 350.782846][T10528] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 350.977622][T10535] netlink: 'syz.4.2098': attribute type 1 has an invalid length. [ 351.170588][T10385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.258050][ T29] audit: type=1400 audit(1727796741.461:621): avc: denied { write } for pid=10544 comm="syz.4.2101" name="fd" dev="proc" ino=35479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 351.298050][T10385] veth0_vlan: entered promiscuous mode [ 351.327544][T10385] veth1_vlan: entered promiscuous mode [ 351.368746][T10385] veth0_macvtap: entered promiscuous mode [ 351.381171][T10385] veth1_macvtap: entered promiscuous mode [ 351.425336][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.436652][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.453385][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.472075][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.485272][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.495927][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.512504][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.534650][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.553528][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.565291][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.586833][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.607307][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.617758][ T29] audit: type=1400 audit(1727796741.811:622): avc: denied { read } for pid=10548 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 351.627298][T10385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.658525][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.669626][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.680696][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.691311][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.704129][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.717934][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.732125][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.743002][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.753102][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.774336][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.792339][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.803630][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.829422][T10385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.898254][T10385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.910459][T10385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.922539][T10385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.935738][T10385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.089656][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.124509][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.195754][T10554] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 352.226220][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.234133][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.367142][ T29] audit: type=1400 audit(1727796742.551:623): avc: denied { mounton } for pid=10385 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 352.565167][ T29] audit: type=1400 audit(1727796742.771:624): avc: denied { getopt } for pid=10566 comm="syz.3.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.920410][T10573] team0: Device ipvlan1 failed to register rx_handler Stopping sshd: [ 353.778723][ T29] audit: type=1400 audit(1727796743.981:625): avc: denied { name_bind } for pid=10589 comm="syz.1.2116" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 353.855166][ T29] audit: type=1400 audit(1727796743.981:626): avc: denied { write } for pid=10589 comm="syz.1.2116" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.944060][ T29] audit: type=1400 audit(1727796743.981:627): avc: denied { connect } for pid=10589 comm="syz.1.2116" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 354.011261][T10595] syz.4.2117: attempt to access beyond end of device [ 354.011261][T10595] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 354.022173][ T29] audit: type=1400 audit(1727796743.981:628): avc: denied { name_connect } for pid=10589 comm="syz.1.2116" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 354.042200][T10595] exFAT-fs (nbd4): unable to read boot sector [ 354.059778][T10595] exFAT-fs (nbd4): failed to read boot sector [ 354.076357][T10595] exFAT-fs (nbd4): failed to recognize exfat type [ 354.141543][ T29] audit: type=1400 audit(1727796744.131:629): avc: denied { read } for pid=10589 comm="syz.1.2116" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 354.358206][ T5232] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 354.367274][ T5232] Bluetooth: hci1: Injecting HCI hardware error event [ 354.378142][ T5240] Bluetooth: hci1: hardware error 0x00 [ 354.660645][T10616] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 354.722209][ T29] audit: type=1400 audit(1727796744.921:630): avc: denied { read write } for pid=8857 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 Connection to 10.128.0.181 closed by remote host. OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 4886) Stopping network: [ 355.492519][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'. [ 356.514851][ T5240] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 356.897600][T10668] 9pnet: p9_errstr2errno: server reported unknown error OK Stopping iptables: [ 357.312617][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 357.312641][ T29] audit: type=1400 audit(1727796747.511:641): avc: denied { read write } for pid=10678 comm="iptables" path="/dev/console" dev="rootfs" ino=1065 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 357.342932][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.422465][ T29] audit: type=1400 audit(1727796747.601:642): avc: denied { relabelfrom } for pid=10679 comm="syz.1.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 357.460230][ T29] audit: type=1400 audit(1727796747.601:643): avc: denied { relabelto } for pid=10679 comm="syz.1.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 357.509818][ T29] audit: type=1400 audit(1727796747.611:644): avc: denied { map_create } for pid=10682 comm="syz.2.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.567544][ T29] audit: type=1400 audit(1727796747.611:645): avc: denied { map_read map_write } for pid=10682 comm="syz.2.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 OK [ 357.613127][ T29] audit: type=1326 audit(1727796747.621:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.3.2148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe02417dff9 code=0x0 [ 357.671407][ T29] audit: type=1400 audit(1727796747.621:647): avc: denied { watch_sb } for pid=10681 comm="syz.0.2149" path="/132/net_prio.prioidx" dev="tmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 357.753465][ T29] audit: type=1400 audit(1727796747.621:648): avc: denied { prog_load } for pid=10682 comm="syz.2.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 Stopping system message bus: [ 357.819180][ T29] audit: type=1400 audit(1727796747.621:649): avc: denied { prog_run } for pid=10682 comm="syz.2.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.901630][ T29] audit: type=1400 audit(1727796747.661:650): avc: denied { search } for pid=10678 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.925439][ T5276] ================================================================== [ 357.933547][ T5276] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x14c/0x1c0 [ 357.942967][ T5276] Read of size 8 at addr ffff88805e03e488 by task kworker/0:6/5276 [ 357.950908][ T5276] [ 357.953331][ T5276] CPU: 0 UID: 0 PID: 5276 Comm: kworker/0:6 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 357.964138][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.974239][ T5276] Workqueue: events binder_deferred_func [ 357.979938][ T5276] Call Trace: [ 357.983244][ T5276] [ 357.986212][ T5276] dump_stack_lvl+0x116/0x1f0 [ 357.990939][ T5276] print_report+0xc3/0x620 [ 357.995401][ T5276] ? __virt_addr_valid+0x5e/0x590 [ 358.000486][ T5276] ? __phys_addr+0xc6/0x150 [ 358.005045][ T5276] kasan_report+0xd9/0x110 [ 358.009514][ T5276] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 358.015991][ T5276] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 358.022470][ T5276] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 358.028862][ T5276] binder_release_work+0x9b/0x490 [ 358.033933][ T5276] binder_deferred_func+0xe6e/0x12e0 [ 358.039277][ T5276] process_one_work+0x9c5/0x1ba0 [ 358.044267][ T5276] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 358.049949][ T5276] ? __pfx_process_one_work+0x10/0x10 [ 358.055373][ T5276] ? assign_work+0x1a0/0x250 [ 358.060049][ T5276] worker_thread+0x6c8/0xf00 [ 358.064689][ T5276] ? __kthread_parkme+0x148/0x220 [ 358.069799][ T5276] ? __pfx_worker_thread+0x10/0x10 [ 358.074961][ T5276] kthread+0x2c1/0x3a0 [ 358.079108][ T5276] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.084365][ T5276] ? __pfx_kthread+0x10/0x10 [ 358.089039][ T5276] ret_from_fork+0x45/0x80 [ 358.093516][ T5276] ? __pfx_kthread+0x10/0x10 [ 358.098206][ T5276] ret_from_fork_asm+0x1a/0x30 [ 358.103054][ T5276] [ 358.106104][ T5276] [ 358.108479][ T5276] Allocated by task 10699: [ 358.112932][ T5276] kasan_save_stack+0x33/0x60 [ 358.117678][ T5276] kasan_save_track+0x14/0x30 [ 358.122412][ T5276] __kasan_kmalloc+0xaa/0xb0 [ 358.127050][ T5276] binder_thread_write+0xe19/0x4c60 [ 358.132311][ T5276] binder_ioctl+0x265b/0x6fa0 [ 358.137500][ T5276] __x64_sys_ioctl+0x18f/0x220 [ 358.142320][ T5276] do_syscall_64+0xcd/0x250 [ 358.146882][ T5276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.152827][ T5276] [ 358.155179][ T5276] Freed by task 5276: [ 358.159199][ T5276] kasan_save_stack+0x33/0x60 [ 358.163926][ T5276] kasan_save_track+0x14/0x30 [ 358.168654][ T5276] kasan_save_free_info+0x3b/0x60 [ 358.173737][ T5276] __kasan_slab_free+0x51/0x70 [ 358.178639][ T5276] kfree+0x14f/0x4b0 [ 358.182582][ T5276] binder_deferred_func+0xdd7/0x12e0 [ 358.187922][ T5276] process_one_work+0x9c5/0x1ba0 [ 358.192904][ T5276] worker_thread+0x6c8/0xf00 [ 358.197542][ T5276] kthread+0x2c1/0x3a0 [ 358.201663][ T5276] ret_from_fork+0x45/0x80 [ 358.206130][ T5276] ret_from_fork_asm+0x1a/0x30 [ 358.210957][ T5276] [ 358.213314][ T5276] The buggy address belongs to the object at ffff88805e03e480 [ 358.213314][ T5276] which belongs to the cache kmalloc-64 of size 64 [ 358.227388][ T5276] The buggy address is located 8 bytes inside of [ 358.227388][ T5276] freed 64-byte region [ffff88805e03e480, ffff88805e03e4c0) [ 358.240974][ T5276] [ 358.243337][ T5276] The buggy address belongs to the physical page: [ 358.249793][ T5276] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e03e [ 358.258599][ T5276] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 358.266188][ T5276] page_type: f5(slab) [ 358.270215][ T5276] raw: 00fff00000000000 ffff88801b0418c0 ffffea0000c44d00 dead000000000005 [ 358.278847][ T5276] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 358.287469][ T5276] page dumped because: kasan: bad access detected [ 358.293921][ T5276] page_owner tracks the page as allocated [ 358.299670][ T5276] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5219, tgid 5219 (syz-executor), ts 80013679637, free_ts 26451900401 [ 358.318845][ T45] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 358.319415][ T5276] post_alloc_hook+0x2d1/0x350 [ 358.335102][ T8949] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 358.339106][ T5276] get_page_from_freelist+0x101e/0x3070 [ 358.339158][ T5276] __alloc_pages_noprof+0x223/0x25c0 [ 358.364985][ T5276] alloc_pages_mpol_noprof+0x2c9/0x610 [ 358.370503][ T5276] new_slab+0x2ba/0x3f0 [ 358.374705][ T5276] ___slab_alloc+0xdac/0x1880 [ 358.379425][ T5276] __slab_alloc.constprop.0+0x56/0xb0 [ 358.384847][ T5276] __kmalloc_cache_noprof+0x2b4/0x300 [ 358.385078][ T25] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 358.390263][ T5276] register_netdevice+0x504/0x1e90 [ 358.390300][ T5276] veth_newlink+0x366/0x9e0 [ 358.415106][ T5276] __rtnl_newlink+0x1197/0x1920 [ 358.420016][ T5276] rtnl_newlink+0x67/0xa0 [ 358.424396][ T5276] rtnetlink_rcv_msg+0x3c7/0xea0 [ 358.427217][ T45] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 358.429368][ T5276] netlink_rcv_skb+0x16b/0x440 [ 358.443231][ T5276] netlink_unicast+0x53c/0x7f0 [ 358.448052][ T5276] netlink_sendmsg+0x8b8/0xd70 [ 358.452033][ T8949] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 358.452876][ T5276] page last free pid 1 tgid 1 stack trace: [ 358.467814][ T5276] free_unref_page+0x5f4/0xdc0 [ 358.472630][ T5276] free_contig_range+0x135/0x3f0 [ 358.477630][ T5276] destroy_args+0xa27/0xe00 [ 358.482186][ T5276] debug_vm_pgtable+0x168e/0x31a0 [ 358.487267][ T5276] do_one_initcall+0x128/0x700 [ 358.488600][ T25] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 358.492072][ T5276] kernel_init_freeable+0x5c7/0x900 [ 358.492119][ T5276] kernel_init+0x1c/0x2b0 [ 358.510885][ T5276] ret_from_fork+0x45/0x80 [ 358.515349][ T5276] ret_from_fork_asm+0x1a/0x30 [ 358.520197][ T5276] [ 358.522552][ T5276] Memory state around the buggy address: [ 358.528222][ T5276] ffff88805e03e380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 358.534682][ T8949] usb 5-1: USB disconnect, device number 25 [ 358.536400][ T5276] ffff88805e03e400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 358.536428][ T5276] >ffff88805e03e480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 358.544826][ T45] usb 2-1: USB disconnect, device number 21 [ 358.550646][ T5276] ^ [ 358.550667][ T5276] ffff88805e03e500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 358.550693][ T5276] ffff88805e03e580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 358.585323][ T5276] ================================================================== [ 358.593467][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.601805][ T5276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 358.609050][ T5276] CPU: 0 UID: 0 PID: 5276 Comm: kworker/0:6 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 358.619856][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.630126][ T5276] Workqueue: events binder_deferred_func [ 358.635821][ T5276] Call Trace: [ 358.639137][ T5276] [ 358.642104][ T5276] dump_stack_lvl+0x3d/0x1f0 [ 358.646865][ T5276] panic+0x71d/0x800 [ 358.650833][ T5276] ? __pfx_panic+0x10/0x10 [ 358.655327][ T5276] ? check_panic_on_warn+0x1f/0xb0 [ 358.660512][ T5276] check_panic_on_warn+0xab/0xb0 [ 358.665519][ T5276] end_report+0x117/0x180 [ 358.669903][ T5276] kasan_report+0xe9/0x110 [ 358.674375][ T5276] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 358.680850][ T5276] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 358.687344][ T5276] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 358.693647][ T5276] binder_release_work+0x9b/0x490 [ 358.698735][ T5276] binder_deferred_func+0xe6e/0x12e0 [ 358.704111][ T5276] process_one_work+0x9c5/0x1ba0 [ 358.709202][ T5276] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 358.714867][ T5276] ? __pfx_process_one_work+0x10/0x10 [ 358.720273][ T5276] ? assign_work+0x1a0/0x250 [ 358.724906][ T5276] worker_thread+0x6c8/0xf00 [ 358.729529][ T5276] ? __kthread_parkme+0x148/0x220 [ 358.734602][ T5276] ? __pfx_worker_thread+0x10/0x10 [ 358.739748][ T5276] kthread+0x2c1/0x3a0 [ 358.743848][ T5276] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.749073][ T5276] ? __pfx_kthread+0x10/0x10 [ 358.753700][ T5276] ret_from_fork+0x45/0x80 [ 358.758144][ T5276] ? __pfx_kthread+0x10/0x10 [ 358.762766][ T5276] ret_from_fork_asm+0x1a/0x30 [ 358.767595][ T5276] [ 358.770979][ T5276] Kernel Offset: disabled [ 358.775313][ T5276] Rebooting in 86400 seconds..