last executing test programs: 5.323742127s ago: executing program 4 (id=394): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) 5.115958338s ago: executing program 4 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 4.950242052s ago: executing program 4 (id=397): openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40}, 0x18) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) dup3(r0, r1, 0x0) 4.575938117s ago: executing program 4 (id=402): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, {}, {0x200000, 0xa, 0x20}], 0x1}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4.484292737s ago: executing program 4 (id=403): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000082505a1a440020000000109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809052c4240000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.489392379s ago: executing program 0 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x7, 0x2f2, 0x0, 0x8b, 0x20000000000081, 0x0, 0xf, 0x7, 0x0, 0x1, 0x3, 0x7, 0x1], 0x2000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.408083123s ago: executing program 3 (id=420): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x51e}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b8000000000000}) close(r0) 3.286794282s ago: executing program 3 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) time(0xfffffffffffffffc) 1.503752188s ago: executing program 0 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000000080)={0x18, 0x0, r1, {0x7}}, 0x18) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) 1.503315604s ago: executing program 3 (id=425): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.40608527s ago: executing program 1 (id=426): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) 1.325473451s ago: executing program 3 (id=427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xf, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.212075413s ago: executing program 1 (id=428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x6, 0x0, &(0x7f00000009c0)) 1.211781265s ago: executing program 3 (id=429): io_setup(0x7, &(0x7f0000000140)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x54000002, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x7) 1.136918425s ago: executing program 1 (id=431): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="8352", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 968.008709ms ago: executing program 1 (id=433): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 967.497723ms ago: executing program 3 (id=434): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400) 893.506197ms ago: executing program 1 (id=436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000020000000000000000000000009500000000000000ff0637"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 775.869809ms ago: executing program 1 (id=437): open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000002c0)="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", 0x2000, &(0x7f00000022c0)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x2a0022}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="33000000060000000000000000000000010000000000000005000000000000000a000000000000002f64050000007573650000"], 0x33) 615.989137ms ago: executing program 2 (id=439): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000900)={0x18, 0x0, {0x0, @empty, 'vlan0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev, 'rose0\x00'}}, 0x1e) 532.002181ms ago: executing program 0 (id=440): sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000180)='4\x00', 0x2) 531.427826ms ago: executing program 2 (id=441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRESDEC], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) 356.084573ms ago: executing program 2 (id=442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 355.799874ms ago: executing program 4 (id=443): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 295.290776ms ago: executing program 2 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 212.013126ms ago: executing program 0 (id=445): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) write$sndseq(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x8}) 211.493137ms ago: executing program 2 (id=446): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 169.80822ms ago: executing program 0 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x0) 155.362656ms ago: executing program 2 (id=448): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000cc0)={0xb4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xb4}}, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/122) 0s ago: executing program 0 (id=449): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): exists on: batadv_slave_1 [ 64.271689][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.283274][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.307979][ T5217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.317768][ T5217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.327415][ T5217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.336744][ T5217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.353931][ T5216] veth0_vlan: entered promiscuous mode [ 64.364293][ T5218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.373762][ T5218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.382802][ T5218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.391907][ T5218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.414286][ T5216] veth1_vlan: entered promiscuous mode [ 64.473806][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.483080][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.537457][ T5228] veth0_vlan: entered promiscuous mode [ 64.575035][ T5228] veth1_vlan: entered promiscuous mode [ 64.608183][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.613702][ T5216] veth0_macvtap: entered promiscuous mode [ 64.625425][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.653037][ T5216] veth1_macvtap: entered promiscuous mode [ 64.672038][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.680224][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.690057][ T29] audit: type=1400 audit(1728046955.883:112): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.uaPUV5/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.753422][ T29] audit: type=1400 audit(1728046955.883:113): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.766432][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.788631][ T29] audit: type=1400 audit(1728046955.883:114): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.uaPUV5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.817249][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.835111][ T29] audit: type=1400 audit(1728046955.883:115): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.857838][ T5228] veth0_macvtap: entered promiscuous mode [ 64.871149][ T29] audit: type=1400 audit(1728046955.883:116): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.uaPUV5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.909595][ T29] audit: type=1400 audit(1728046955.923:117): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.uaPUV5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.914563][ T5219] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.944820][ T29] audit: type=1400 audit(1728046955.933:118): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.975756][ T29] audit: type=1400 audit(1728046955.933:119): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.979495][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.008731][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.017311][ T29] audit: type=1400 audit(1728046955.943:120): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.022860][ T5228] veth1_macvtap: entered promiscuous mode [ 65.046334][ T29] audit: type=1400 audit(1728046955.953:121): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 65.076784][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.081766][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.085436][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.098294][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.113478][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.133150][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.143521][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.154185][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.165973][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.197807][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.208727][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.218883][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.229575][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.239807][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.250663][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.260721][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.271408][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.284047][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.302196][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.313674][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.323627][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.335355][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.346675][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.357279][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.368804][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.378031][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.395562][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.406295][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.416950][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.426863][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.440032][ T5221] Bluetooth: hci3: command tx timeout [ 65.445532][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.455817][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.466393][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.479601][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.501475][ T5216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.510511][ T5216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.523143][ T5221] Bluetooth: hci1: command tx timeout [ 65.529177][ T5216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.537899][ T5216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.581728][ T5228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.590891][ T5228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.603725][ T5221] Bluetooth: hci0: command tx timeout [ 65.611541][ T5221] Bluetooth: hci2: command tx timeout [ 65.617086][ T5221] Bluetooth: hci4: command tx timeout [ 65.631180][ T5228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.642360][ T5228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.929248][ T5313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.017335][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.025854][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.091708][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.092272][ T5321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.112983][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.183425][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.213610][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.295966][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.357295][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.538429][ T5221] Bluetooth: hci3: command tx timeout [ 67.619901][ T5221] Bluetooth: hci1: command tx timeout [ 67.752161][ T5221] Bluetooth: hci2: command tx timeout [ 67.757636][ T5221] Bluetooth: hci0: command tx timeout [ 67.763466][ T5221] Bluetooth: hci4: command tx timeout [ 69.655138][ T5357] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET) [ 69.710896][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 69.710914][ T29] audit: type=1400 audit(1728046960.913:164): avc: denied { create } for pid=5358 comm="syz.1.19" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.789634][ T29] audit: type=1400 audit(1728046960.953:165): avc: denied { watch watch_reads } for pid=5359 comm="syz.3.20" path="pipe:[6788]" dev="pipefs" ino=6788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 69.868464][ T29] audit: type=1400 audit(1728046960.953:166): avc: denied { relabelfrom } for pid=5359 comm="syz.3.20" name="" dev="pipefs" ino=6789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 69.930465][ T29] audit: type=1400 audit(1728046960.963:167): avc: denied { create } for pid=5358 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.994782][ T29] audit: type=1400 audit(1728046960.973:168): avc: denied { connect } for pid=5358 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.000202][ T5222] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.015274][ T5365] warning: `syz.1.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.054710][ T29] audit: type=1400 audit(1728046960.973:169): avc: denied { write } for pid=5358 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.076193][ T29] audit: type=1400 audit(1728046961.163:170): avc: denied { mounton } for pid=5362 comm="syz.3.22" path="/6/bus" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.152302][ T29] audit: type=1400 audit(1728046961.333:171): avc: denied { map } for pid=5366 comm="syz.2.21" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.187926][ T29] audit: type=1400 audit(1728046961.333:172): avc: denied { read write } for pid=5366 comm="syz.2.21" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.247442][ T29] audit: type=1400 audit(1728046961.383:173): avc: denied { create } for pid=5368 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.789216][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.795777][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.067337][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.237650][ T5431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.51'. [ 73.238458][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 73.248767][ T5431] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 73.259762][ T5431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.51'. [ 73.261705][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 73.290144][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 73.305058][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.318056][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.338876][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.351097][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.378514][ T5270] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.387640][ T5222] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.548400][ T5222] usb 5-1: Using ep0 maxpacket: 8 [ 73.553919][ T5270] usb 1-1: Using ep0 maxpacket: 16 [ 73.566834][ T5270] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 73.585824][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 73.587093][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.600094][ T5222] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 73.611387][ T5222] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 73.617256][ T9] usbtmc 4-1:16.0: can't read capabilities [ 73.619647][ T5222] usb 5-1: Product: syz [ 73.631196][ T5270] usb 1-1: Product: syz [ 73.635520][ T5270] usb 1-1: Manufacturer: syz [ 73.658325][ T5270] usb 1-1: SerialNumber: syz [ 73.663292][ T5222] usb 5-1: Manufacturer: syz [ 73.672931][ T5222] usb 5-1: SerialNumber: syz [ 73.682174][ T5222] usb 5-1: config 0 descriptor?? [ 73.700039][ T5270] usb 1-1: config 0 descriptor?? [ 73.707551][ T5222] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 73.720768][ T5270] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.769160][ T5270] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 73.844179][ T5273] usb 4-1: USB disconnect, device number 2 [ 73.954673][ T5274] usb 1-1: USB disconnect, device number 2 [ 74.068410][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.230046][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.241328][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.265493][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.274858][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.291994][ T9] usb 3-1: SerialNumber: syz [ 74.305124][ T5222] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 74.407188][ T5460] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 74.453246][ T5462] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.469844][ T5462] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.515455][ T9] usb 3-1: 0:2 : does not exist [ 74.538671][ T9] usb 3-1: unit 32 not found! [ 74.585522][ T5273] usb 5-1: USB disconnect, device number 3 [ 74.595780][ T9] usb 3-1: USB disconnect, device number 2 [ 74.613667][ T5463] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.790062][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 74.790081][ T29] audit: type=1400 audit(1728046965.993:230): avc: denied { execute } for pid=5470 comm="syz.1.67" path="/27/cpuacct.usage_percpu_user" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.889091][ T29] audit: type=1400 audit(1728046966.083:231): avc: denied { read } for pid=5472 comm="syz.1.68" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.919838][ T29] audit: type=1400 audit(1728046966.083:232): avc: denied { open } for pid=5472 comm="syz.1.68" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.949022][ T5222] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.957363][ T5475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.69'. [ 74.970023][ T5475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'. [ 74.981142][ T5475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.69'. [ 74.990766][ T5475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.69'. [ 75.093429][ T29] audit: type=1400 audit(1728046966.293:233): avc: denied { read } for pid=5478 comm="syz.1.71" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.116224][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.129837][ T29] audit: type=1400 audit(1728046966.293:234): avc: denied { open } for pid=5478 comm="syz.1.71" path="/dev/ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.183507][ T5222] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.206076][ T5222] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.225045][ T5222] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.229023][ T29] audit: type=1400 audit(1728046966.303:235): avc: denied { ioctl } for pid=5478 comm="syz.1.71" path="/dev/ptp0" dev="devtmpfs" ino=1073 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.259140][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.269105][ T5467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.286639][ T5222] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.457511][ T29] audit: type=1400 audit(1728046966.653:236): avc: denied { search } for pid=5489 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.509122][ T29] audit: type=1400 audit(1728046966.693:237): avc: denied { read } for pid=5494 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.532373][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.555779][ T5497] syz.1.77 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.570848][ T5221] Bluetooth: hci4: unexpected cc 0x040d length: 0 < 7 [ 75.621035][ T29] audit: type=1400 audit(1728046966.693:238): avc: denied { open } for pid=5494 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.646014][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.660282][ T29] audit: type=1400 audit(1728046966.693:239): avc: denied { getattr } for pid=5494 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.685516][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.724122][ T5271] usb 1-1: USB disconnect, device number 3 [ 76.398171][ T5533] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.414375][ T5535] input: syz1 as /devices/virtual/input/input6 [ 76.668452][ T5271] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.820016][ T5271] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.840660][ T5271] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 76.868348][ T5271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 76.889681][ T937] cfg80211: failed to load regulatory.db [ 76.925742][ T5271] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.958402][ T5271] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.988188][ T5271] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.028404][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 77.039126][ T5271] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.068547][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.077314][ T5271] usb 1-1: Product: syz [ 77.092971][ T5271] usb 1-1: Manufacturer: syz [ 77.097676][ T5271] usb 1-1: SerialNumber: syz [ 77.195669][ T9] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 77.238581][ T9] usb 5-1: config 0 has no interface number 0 [ 77.252702][ T9] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 77.285300][ T9] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.336247][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 77.361773][ T9] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 77.404576][ T9] usb 5-1: Product: syz [ 77.426150][ T9] usb 5-1: Manufacturer: syz [ 77.448475][ T9] usb 5-1: SerialNumber: syz [ 77.470953][ T9] usb 5-1: config 0 descriptor?? [ 77.494293][ T5556] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 77.533442][ T9] usb-storage 5-1:0.20: USB Mass Storage device detected [ 77.572907][ T9] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 77.798535][ T5556] netlink: 'syz.4.93': attribute type 9 has an invalid length. [ 77.822301][ T5556] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.93'. [ 77.908728][ T9] scsi host1: usb-storage 5-1:0.20 [ 77.930679][ T9] usb 5-1: USB disconnect, device number 4 [ 78.040446][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 78.173071][ T5271] cdc_ncm 1-1:1.0: bind() failure [ 78.195930][ T5271] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 78.214712][ T5271] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 78.235557][ T5271] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 78.257985][ T5271] usb 1-1: USB disconnect, device number 4 [ 78.332647][ T5601] process 'syz.1.106' launched '/dev/fd/4' with NULL argv: empty string added [ 78.527574][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 78.548889][ T5611] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 78.677749][ T5615] random: crng reseeded on system resumption [ 79.598507][ T5271] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.760879][ T5271] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 79.776651][ T5271] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.786246][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.795351][ T5271] usb 3-1: Product: syz [ 79.800017][ T5271] usb 3-1: Manufacturer: syz [ 79.804804][ T5271] usb 3-1: SerialNumber: syz [ 79.907096][ T5648] netlink: 'syz.4.126': attribute type 9 has an invalid length. [ 79.923011][ T5648] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.126'. [ 80.028714][ T5270] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.224256][ T5270] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 80.242080][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.254028][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.266986][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 80.282558][ T5270] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 80.294509][ T5270] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 80.302985][ T5270] usb 4-1: Manufacturer: syz [ 80.318152][ T5270] usb 4-1: config 0 descriptor?? [ 80.755064][ T5270] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 80.768586][ T5270] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 80.790252][ T5270] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 80.887152][ T5271] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 80.894065][ T5271] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 80.905045][ T5271] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 80.923470][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 80.926021][ T29] audit: type=1400 audit(1728046972.123:289): avc: denied { ioctl } for pid=5670 comm="syz.1.135" path="socket:[8350]" dev="sockfs" ino=8350 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.929382][ T5669] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.991987][ T5672] netlink: 216 bytes leftover after parsing attributes in process `syz.4.134'. [ 81.086564][ T5671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.128598][ T5271] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 81.187209][ T5271] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 81.204644][ T5271] usb 3-1: USB disconnect, device number 3 [ 81.213159][ T5271] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 81.431353][ T5678] loop2: detected capacity change from 0 to 7 [ 81.445619][ T5678] Dev loop2: unable to read RDB block 7 [ 81.452042][ T5678] loop2: unable to read partition table [ 81.458036][ T5678] loop2: partition table beyond EOD, truncated [ 81.465515][ T5678] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 81.798217][ T29] audit: type=1400 audit(1728046972.993:290): avc: denied { relabelfrom } for pid=5681 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 81.846675][ T29] audit: type=1400 audit(1728046972.993:291): avc: denied { relabelto } for pid=5681 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 81.899877][ T29] audit: type=1400 audit(1728046973.053:292): avc: denied { mounton } for pid=5683 comm="syz.2.141" path="/proc/56/task" dev="proc" ino=9309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 82.236395][ T29] audit: type=1400 audit(1728046973.433:293): avc: denied { setopt } for pid=5700 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.288844][ T29] audit: type=1400 audit(1728046973.493:294): avc: denied { read } for pid=5700 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.468468][ T5222] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.654327][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.667100][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.677066][ T5222] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 82.686464][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.739361][ T5222] usb 1-1: config 0 descriptor?? [ 82.985320][ T9] usb 4-1: USB disconnect, device number 3 [ 83.058966][ T29] audit: type=1326 audit(1728046974.243:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32ab7dff9 code=0x7ffc0000 [ 83.124398][ T29] audit: type=1326 audit(1728046974.253:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32ab7dff9 code=0x7ffc0000 [ 83.182617][ T29] audit: type=1326 audit(1728046974.283:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd32ab7dff9 code=0x7ffc0000 [ 83.232002][ T29] audit: type=1326 audit(1728046974.283:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32ab7dff9 code=0x7ffc0000 [ 83.380525][ T5740] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 83.797306][ T5222] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input7 [ 83.882981][ T5222] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input8 [ 83.930246][ T5222] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input9 [ 83.944751][ T5756] Zero length message leads to an empty skb [ 83.987018][ T5222] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input10 [ 84.035030][ T5222] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 84.067048][ T5222] usb 1-1: USB disconnect, device number 5 [ 84.199189][ T5761] raw_sendmsg: syz.1.174 forgot to set AF_INET. Fix it! [ 91.218561][ T5221] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 91.227178][ T5221] Bluetooth: hci2: Injecting HCI hardware error event [ 91.240677][ T5221] Bluetooth: hci2: hardware error 0x00 [ 106.028885][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.049504][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.060532][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.070366][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.078013][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 106.085483][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.120721][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 106.120741][ T29] audit: type=1400 audit(1728046997.293:307): avc: denied { mounton } for pid=5773 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.121976][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.160803][ T5226] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.161505][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.177275][ T5226] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.179391][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.193252][ T5226] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.194303][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.210379][ T5226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.210378][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.231364][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 106.256286][ T5224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.265604][ T5224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.268590][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 106.273277][ T5224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.288485][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 106.300096][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 106.308052][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 106.316175][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 106.428932][ T4612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.440679][ T4612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.456005][ T4612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.464492][ T4612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.484238][ T4612] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.494350][ T4612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.607012][ T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.690957][ T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.787216][ T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.895848][ T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.991937][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 107.190911][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 107.223739][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 107.236641][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.247261][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.254632][ T5773] bridge_slave_0: entered allmulticast mode [ 107.262733][ T5773] bridge_slave_0: entered promiscuous mode [ 107.282159][ T69] bridge_slave_1: left allmulticast mode [ 107.288079][ T69] bridge_slave_1: left promiscuous mode [ 107.288375][ T5221] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 107.309749][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.336567][ T69] bridge_slave_0: left allmulticast mode [ 107.342559][ T69] bridge_slave_0: left promiscuous mode [ 107.349088][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.694550][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.707556][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.718761][ T69] bond0 (unregistering): Released all slaves [ 107.734010][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 107.752006][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.759681][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.766910][ T5773] bridge_slave_1: entered allmulticast mode [ 107.774025][ T5773] bridge_slave_1: entered promiscuous mode [ 107.860157][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 107.887150][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.967838][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.148218][ T5773] team0: Port device team_slave_0 added [ 108.192787][ T5773] team0: Port device team_slave_1 added [ 108.220561][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.227676][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.235976][ T5779] bridge_slave_0: entered allmulticast mode [ 108.244691][ T5779] bridge_slave_0: entered promiscuous mode [ 108.269022][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.276131][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.283772][ T5777] bridge_slave_0: entered allmulticast mode [ 108.292137][ T5777] bridge_slave_0: entered promiscuous mode [ 108.318486][ T5221] Bluetooth: hci5: command tx timeout [ 108.337997][ T69] hsr_slave_0: left promiscuous mode [ 108.345408][ T69] hsr_slave_1: left promiscuous mode [ 108.354626][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.362200][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.373480][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.383392][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.398617][ T5221] Bluetooth: hci8: command tx timeout [ 108.398761][ T4612] Bluetooth: hci6: command tx timeout [ 108.404202][ T5231] Bluetooth: hci7: command tx timeout [ 108.418224][ T69] veth1_macvtap: left promiscuous mode [ 108.424351][ T69] veth0_macvtap: left promiscuous mode [ 108.429965][ T69] veth1_vlan: left promiscuous mode [ 108.435390][ T69] veth0_vlan: left promiscuous mode [ 108.560236][ T5231] Bluetooth: hci0: command tx timeout [ 108.926115][ T69] team0 (unregistering): Port device team_slave_1 removed [ 108.973076][ T69] team0 (unregistering): Port device team_slave_0 removed [ 109.407532][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.415503][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.422870][ T5779] bridge_slave_1: entered allmulticast mode [ 109.435202][ T5779] bridge_slave_1: entered promiscuous mode [ 109.452266][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.459519][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.466724][ T5781] bridge_slave_0: entered allmulticast mode [ 109.475911][ T5781] bridge_slave_0: entered promiscuous mode [ 109.484656][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.491969][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.499495][ T5777] bridge_slave_1: entered allmulticast mode [ 109.506190][ T5777] bridge_slave_1: entered promiscuous mode [ 109.513696][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.526927][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.553301][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.565727][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.572968][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.599565][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.611254][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.618569][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.625750][ T5775] bridge_slave_0: entered allmulticast mode [ 109.633313][ T5775] bridge_slave_0: entered promiscuous mode [ 109.667241][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.685907][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.693478][ T5781] bridge_slave_1: entered allmulticast mode [ 109.702633][ T5781] bridge_slave_1: entered promiscuous mode [ 109.739270][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.746553][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.759887][ T5775] bridge_slave_1: entered allmulticast mode [ 109.766533][ T5775] bridge_slave_1: entered promiscuous mode [ 109.788026][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.800783][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.829504][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.899486][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.929873][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.944336][ T5773] hsr_slave_0: entered promiscuous mode [ 109.952183][ T5773] hsr_slave_1: entered promiscuous mode [ 109.958916][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.966504][ T5773] Cannot create hsr debugfs directory [ 109.974976][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.995057][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.019956][ T5779] team0: Port device team_slave_0 added [ 110.040270][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.086005][ T5779] team0: Port device team_slave_1 added [ 110.105871][ T5781] team0: Port device team_slave_0 added [ 110.115301][ T5781] team0: Port device team_slave_1 added [ 110.173885][ T5777] team0: Port device team_slave_0 added [ 110.221091][ T5775] team0: Port device team_slave_0 added [ 110.227527][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.243147][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.269503][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.292374][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.299441][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.325505][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.341167][ T5777] team0: Port device team_slave_1 added [ 110.372180][ T5775] team0: Port device team_slave_1 added [ 110.379017][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.386039][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.412438][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.418699][ T5231] Bluetooth: hci5: command tx timeout [ 110.424855][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.436252][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.463604][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.475287][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.478544][ T5231] Bluetooth: hci6: command tx timeout [ 110.488530][ T5221] Bluetooth: hci7: command tx timeout [ 110.488582][ T4612] Bluetooth: hci8: command tx timeout [ 110.499694][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.525886][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.568035][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.575217][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.601347][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.638555][ T5231] Bluetooth: hci0: command tx timeout [ 110.663363][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.670875][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.697932][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.733800][ T5779] hsr_slave_0: entered promiscuous mode [ 110.740287][ T5779] hsr_slave_1: entered promiscuous mode [ 110.746310][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.754032][ T5779] Cannot create hsr debugfs directory [ 110.788125][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.795323][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.822259][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.853504][ T5777] hsr_slave_0: entered promiscuous mode [ 110.865442][ T5777] hsr_slave_1: entered promiscuous mode [ 110.872363][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.883083][ T5777] Cannot create hsr debugfs directory [ 110.891790][ T5781] hsr_slave_0: entered promiscuous mode [ 110.904030][ T5781] hsr_slave_1: entered promiscuous mode [ 110.910184][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.917734][ T5781] Cannot create hsr debugfs directory [ 111.002136][ T5773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.099480][ T5773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.145921][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.172225][ T5775] hsr_slave_0: entered promiscuous mode [ 111.179179][ T5775] hsr_slave_1: entered promiscuous mode [ 111.185243][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.192904][ T5775] Cannot create hsr debugfs directory [ 111.247709][ T5773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.320845][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.387188][ T5773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.435561][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.577909][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.776290][ T69] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.860432][ T69] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.945715][ T69] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.984751][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.037337][ T69] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.052190][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.067117][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.088432][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.261886][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.279418][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.300392][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.312567][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.319729][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.343896][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.351046][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.374907][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.478115][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.488518][ T5231] Bluetooth: hci5: command tx timeout [ 112.556879][ T29] audit: type=1400 audit(1728047003.753:308): avc: denied { sys_module } for pid=5773 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.578892][ T5231] Bluetooth: hci6: command tx timeout [ 112.584341][ T5231] Bluetooth: hci8: command tx timeout [ 112.590293][ T5231] Bluetooth: hci7: command tx timeout [ 112.608104][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.719204][ T4612] Bluetooth: hci0: command tx timeout [ 112.760437][ T69] bridge_slave_1: left allmulticast mode [ 112.766130][ T69] bridge_slave_1: left promiscuous mode [ 112.772150][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.783452][ T69] bridge_slave_0: left allmulticast mode [ 112.791169][ T69] bridge_slave_0: left promiscuous mode [ 112.798021][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.810944][ T69] bridge_slave_1: left allmulticast mode [ 112.816707][ T69] bridge_slave_1: left promiscuous mode [ 112.823360][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.836423][ T69] bridge_slave_0: left allmulticast mode [ 112.842482][ T69] bridge_slave_0: left promiscuous mode [ 112.848207][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.860158][ T69] bridge_slave_1: left allmulticast mode [ 112.865811][ T69] bridge_slave_1: left promiscuous mode [ 112.871960][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.881303][ T69] bridge_slave_0: left allmulticast mode [ 112.886979][ T69] bridge_slave_0: left promiscuous mode [ 112.893117][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.734703][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.747191][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.761332][ T69] bond0 (unregistering): Released all slaves [ 113.864618][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.875658][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.887054][ T69] bond0 (unregistering): Released all slaves [ 113.984237][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.995011][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.007133][ T69] bond0 (unregistering): Released all slaves [ 114.045835][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.263972][ T5773] veth0_vlan: entered promiscuous mode [ 114.314635][ T5773] veth1_vlan: entered promiscuous mode [ 114.382704][ T5773] veth0_macvtap: entered promiscuous mode [ 114.395264][ T5773] veth1_macvtap: entered promiscuous mode [ 114.429178][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.439930][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.449844][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.460331][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.471071][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.481835][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.491798][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.502302][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.513316][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.543222][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.554066][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.564175][ T4612] Bluetooth: hci5: command tx timeout [ 114.569858][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.581574][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.591486][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.602073][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.612023][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.622488][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.633606][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.648857][ T4612] Bluetooth: hci7: command tx timeout [ 114.649624][ T5231] Bluetooth: hci8: command tx timeout [ 114.654278][ T4612] Bluetooth: hci6: command tx timeout [ 114.691796][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.701321][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.710154][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.718984][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.799151][ T4612] Bluetooth: hci0: command tx timeout [ 114.924148][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.939852][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.947839][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.970568][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.979744][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.027778][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.070664][ T69] hsr_slave_0: left promiscuous mode [ 115.076402][ T69] hsr_slave_1: left promiscuous mode [ 115.082516][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.094438][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.105126][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.112813][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.124276][ T69] hsr_slave_0: left promiscuous mode [ 115.130576][ T69] hsr_slave_1: left promiscuous mode [ 115.136331][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.143820][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.151770][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.159262][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.171138][ T69] hsr_slave_0: left promiscuous mode [ 115.176937][ T69] hsr_slave_1: left promiscuous mode [ 115.182874][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.190580][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.198435][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.205948][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.245587][ T69] veth1_macvtap: left promiscuous mode [ 115.251239][ T69] veth0_macvtap: left promiscuous mode [ 115.256769][ T69] veth1_vlan: left promiscuous mode [ 115.262059][ T69] veth0_vlan: left promiscuous mode [ 115.269485][ T69] veth1_macvtap: left promiscuous mode [ 115.275034][ T69] veth0_macvtap: left promiscuous mode [ 115.282272][ T69] veth1_vlan: left promiscuous mode [ 115.287559][ T69] veth0_vlan: left promiscuous mode [ 115.294453][ T69] veth1_macvtap: left promiscuous mode [ 115.300077][ T69] veth0_macvtap: left promiscuous mode [ 115.305796][ T69] veth1_vlan: left promiscuous mode [ 115.311111][ T69] veth0_vlan: left promiscuous mode [ 115.971880][ T69] team0 (unregistering): Port device team_slave_1 removed [ 116.016712][ T69] team0 (unregistering): Port device team_slave_0 removed [ 116.762531][ T69] team0 (unregistering): Port device team_slave_1 removed [ 116.805556][ T69] team0 (unregistering): Port device team_slave_0 removed [ 117.633074][ T69] team0 (unregistering): Port device team_slave_1 removed [ 117.689423][ T69] team0 (unregistering): Port device team_slave_0 removed [ 118.146551][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.187107][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.263554][ T5781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.307454][ T29] audit: type=1400 audit(1728047009.503:309): avc: denied { mount } for pid=5773 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.330069][ T5781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.360946][ T5781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.376010][ T29] audit: type=1400 audit(1728047009.533:310): avc: denied { mounton } for pid=5773 comm="syz-executor" path="/root/syzkaller.dZqVKO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 118.446801][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.471172][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.489272][ T5781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.525348][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.644158][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.716515][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.735659][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.787037][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.801349][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.898475][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.061954][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.077352][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 119.083413][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.090277][ T25] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 119.104426][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.106356][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 119.139079][ T25] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 119.168033][ T25] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 119.180272][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.191868][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.203698][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.216546][ T25] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 119.222353][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.230328][ T25] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.251176][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.262168][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.269325][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.281482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.284127][ T25] usb 4-1: Product: syz [ 119.288723][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.292714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.294777][ T25] usb 4-1: Manufacturer: syz [ 119.300608][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.327658][ T25] usb 4-1: SerialNumber: syz [ 119.334231][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.341550][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.355806][ T25] usb 4-1: config 0 descriptor?? [ 119.367647][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.374941][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.387741][ T25] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.405247][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.415391][ T25] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 119.437358][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.444765][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.460976][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.468057][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.491383][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.498566][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.575265][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.654218][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.989423][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.082756][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.103109][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.123699][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.249806][ T5777] veth0_vlan: entered promiscuous mode [ 120.293583][ T5775] veth0_vlan: entered promiscuous mode [ 120.317716][ T5779] veth0_vlan: entered promiscuous mode [ 120.334184][ T5775] veth1_vlan: entered promiscuous mode [ 120.346093][ T5777] veth1_vlan: entered promiscuous mode [ 120.377505][ T5779] veth1_vlan: entered promiscuous mode [ 120.423869][ T5775] veth0_macvtap: entered promiscuous mode [ 120.456859][ T5775] veth1_macvtap: entered promiscuous mode [ 120.466258][ T5777] veth0_macvtap: entered promiscuous mode [ 120.486638][ T5781] veth0_vlan: entered promiscuous mode [ 120.494608][ T5777] veth1_macvtap: entered promiscuous mode [ 120.505405][ T5779] veth0_macvtap: entered promiscuous mode [ 120.520304][ T5781] veth1_vlan: entered promiscuous mode [ 120.541281][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.555170][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.566121][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.576740][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.588113][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.605713][ T5779] veth1_macvtap: entered promiscuous mode [ 120.620295][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.634570][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.644742][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.655327][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.666506][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.677249][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.686189][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.695024][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.703880][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.716664][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.733373][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.745454][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.756907][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.766948][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.777408][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.788732][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.812726][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.824035][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.834038][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.845833][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.856203][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.867412][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.879131][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.897310][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.906463][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.915660][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.925467][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.936232][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.947871][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.958704][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.971083][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.981879][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.992447][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.002762][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.013432][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.024930][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.054837][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.066342][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.076507][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.087053][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.096966][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.107487][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.117686][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.128697][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.140039][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.158480][ T5781] veth0_macvtap: entered promiscuous mode [ 121.202176][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.211580][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.220393][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.229573][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.249136][ T5781] veth1_macvtap: entered promiscuous mode [ 121.320784][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.339239][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.345483][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.350580][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.371246][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.382246][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.392570][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.403086][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.412953][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.423407][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.433246][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.444379][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.456701][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.482686][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.495819][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.507060][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.517740][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.527647][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.538119][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.548158][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.559312][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.569191][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.579789][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.591438][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.610868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.616714][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.626664][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.632092][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.660175][ T5781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.671246][ T5781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.675292][ T5270] usb 4-1: USB disconnect, device number 4 [ 121.686772][ T5781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.689099][ T5270] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 121.696954][ T5781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.782046][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.795609][ T29] audit: type=1400 audit(1728047012.983:311): avc: denied { block_suspend } for pid=5844 comm="syz.3.181" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.822415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.966806][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.982638][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.001205][ T29] audit: type=1400 audit(1728047013.203:312): avc: denied { create } for pid=5851 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.029661][ T29] audit: type=1400 audit(1728047013.223:313): avc: denied { bind } for pid=5851 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.083202][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.108529][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.193542][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.221928][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.285250][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.296308][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.368967][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.517762][ T29] audit: type=1400 audit(1728047013.713:314): avc: denied { remount } for pid=5862 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.547038][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.564147][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.574950][ T5270] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.598557][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 122.619774][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.637328][ T25] usb 2-1: config 0 descriptor?? [ 122.751155][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.771910][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.808141][ T5270] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 122.842226][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.879729][ T5270] usb 4-1: config 0 descriptor?? [ 123.083619][ T25] logitech-hidpp-device 0003:046D:C086.0003: item fetching failed at offset 1/5 [ 123.098929][ T25] logitech-hidpp-device 0003:046D:C086.0003: hidpp_probe:parse failed [ 123.109059][ T25] logitech-hidpp-device 0003:046D:C086.0003: probe with driver logitech-hidpp-device failed with error -22 [ 123.268477][ T5222] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.339481][ T5271] usb 2-1: USB disconnect, device number 2 [ 123.351535][ T5270] uclogic 0003:28BD:0074.0004: interface is invalid, ignoring [ 123.426521][ T29] audit: type=1400 audit(1728047014.623:315): avc: denied { connect } for pid=5886 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.447525][ T5222] usb 1-1: Using ep0 maxpacket: 32 [ 123.454614][ T5222] usb 1-1: config 0 has no interfaces? [ 123.462409][ T5222] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=f3.0c [ 123.471778][ T5222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 123.480109][ T5222] usb 1-1: Product: syz [ 123.484282][ T5222] usb 1-1: Manufacturer: syz [ 123.488948][ T5222] usb 1-1: SerialNumber: syz [ 123.496091][ T5222] usb 1-1: config 0 descriptor?? [ 123.555274][ T5271] usb 4-1: USB disconnect, device number 5 [ 123.648427][ T5270] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.725493][ T5272] usb 1-1: USB disconnect, device number 6 [ 123.798390][ T5270] usb 5-1: Using ep0 maxpacket: 16 [ 123.807474][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.820167][ T5270] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.833203][ T5270] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.843105][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.853469][ T5270] usb 5-1: config 0 descriptor?? [ 124.152926][ T5895] 9pnet_fd: Insufficient options for proto=fd [ 124.278215][ T5270] usbhid 5-1:0.0: can't add hid device: -71 [ 124.293449][ T5270] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.313838][ T5270] usb 5-1: USB disconnect, device number 5 [ 124.353625][ T29] audit: type=1326 audit(1728047015.553:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5901 comm="syz.2.201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feab617dff9 code=0x0 [ 124.376423][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.398730][ T5222] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 124.509865][ T29] audit: type=1400 audit(1728047015.713:317): avc: denied { create } for pid=5904 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.544890][ T29] audit: type=1400 audit(1728047015.733:318): avc: denied { connect } for pid=5904 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.568836][ T29] audit: type=1400 audit(1728047015.733:319): avc: denied { write } for pid=5904 comm="syz.0.202" path="socket:[13464]" dev="sockfs" ino=13464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.592008][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.604756][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 124.619157][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.631234][ T29] audit: type=1400 audit(1728047015.763:320): avc: denied { ioctl } for pid=5894 comm="syz.3.198" path="/dev/raw-gadget" dev="devtmpfs" ino=732 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.656565][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 64 [ 124.668401][ T5222] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 124.677958][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.687019][ T29] audit: type=1400 audit(1728047015.803:321): avc: denied { read write } for pid=5904 comm="syz.0.202" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.710409][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.720362][ T5222] usb 4-1: config 0 descriptor?? [ 124.726554][ T29] audit: type=1400 audit(1728047015.803:322): avc: denied { open } for pid=5904 comm="syz.0.202" path="/dev/raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.750512][ T5895] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.757968][ T5895] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.858454][ T5270] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.074309][ T29] audit: type=1400 audit(1728047016.273:323): avc: denied { read } for pid=5904 comm="syz.0.202" path="socket:[13464]" dev="sockfs" ino=13464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.120907][ T5270] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.122600][ T5912] syz.4.204: attempt to access beyond end of device [ 125.122600][ T5912] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 125.142022][ T5270] usb 1-1: no configurations [ 125.142046][ T5270] usb 1-1: can't read configurations, error -22 [ 125.162837][ T29] audit: type=1400 audit(1728047016.313:324): avc: denied { mounton } for pid=5909 comm="syz.4.204" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.187036][ T5912] FAT-fs (loop9): unable to read boot sector [ 125.321617][ T5916] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 125.364644][ T5916] netlink: 216 bytes leftover after parsing attributes in process `syz.2.206'. [ 125.727767][ T5274] usb 4-1: USB disconnect, device number 6 [ 125.750631][ T52] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 125.797254][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.811591][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.319103][ T5221] Bluetooth: hci0: command 0x0405 tx timeout [ 126.328752][ T5928] kvm_intel: kvm [5927]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 126.804325][ T5231] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 126.898450][ T5272] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.977316][ T5954] syz.2.223: attempt to access beyond end of device [ 126.977316][ T5954] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 126.999833][ T5954] FAT-fs (loop5): unable to read boot sector [ 127.050092][ T5272] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.072837][ T5272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.088145][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.109687][ T5272] usb 1-1: Product: syz [ 127.113906][ T5272] usb 1-1: Manufacturer: syz [ 127.128472][ T5274] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.158481][ T5272] usb 1-1: SerialNumber: syz [ 127.167498][ T5958] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 127.296127][ T5958] netlink: 216 bytes leftover after parsing attributes in process `syz.1.224'. [ 127.316168][ T5274] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.364814][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.391438][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.423032][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.465385][ T5274] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.485905][ T5274] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.497375][ T5274] usb 4-1: Manufacturer: syz [ 127.510882][ T5274] usb 4-1: config 0 descriptor?? [ 127.980197][ T5274] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 127.987831][ T5274] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 128.030089][ T5274] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 128.224131][ T5272] cdc_ncm 1-1:1.0: failed to get mac address [ 128.408520][ T5231] Bluetooth: hci0: command 0x0405 tx timeout [ 128.448455][ T5274] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.540618][ T5272] cdc_ncm 1-1:1.0: bind() failure [ 128.558725][ T5272] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 128.578452][ T5272] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 128.614314][ T5272] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 128.668880][ T5272] usb 1-1: USB disconnect, device number 9 [ 129.485295][ T5270] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 133.041099][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 133.041120][ T29] audit: type=1400 audit(1728047024.243:330): avc: denied { mount } for pid=5990 comm="syz.4.237" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.076487][ T29] audit: type=1400 audit(1728047024.273:331): avc: denied { watch watch_reads } for pid=5990 comm="syz.4.237" path="/20/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 133.145742][ T29] audit: type=1400 audit(1728047024.343:332): avc: denied { create } for pid=5993 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.185744][ T29] audit: type=1400 audit(1728047024.363:333): avc: denied { bind } for pid=5993 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.205842][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205941][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.284563][ T29] audit: type=1400 audit(1728047024.363:334): avc: denied { connect } for pid=5993 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.349278][ T29] audit: type=1400 audit(1728047024.373:335): avc: denied { unmount } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.414453][ T29] audit: type=1400 audit(1728047024.543:336): avc: denied { bind } for pid=5999 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.414500][ T29] audit: type=1400 audit(1728047024.553:337): avc: denied { read } for pid=5999 comm="syz.4.240" name="ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.414540][ T29] audit: type=1400 audit(1728047024.553:338): avc: denied { open } for pid=5999 comm="syz.4.240" path="/dev/ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.414581][ T29] audit: type=1400 audit(1728047024.553:339): avc: denied { ioctl } for pid=5999 comm="syz.4.240" path="/dev/ppp" dev="devtmpfs" ino=693 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.543049][ T6005] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 133.728689][ T6005] netlink: 216 bytes leftover after parsing attributes in process `syz.3.244'. [ 133.782478][ T6018] syz.0.245: attempt to access beyond end of device [ 133.782478][ T6018] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 133.782539][ T6018] FAT-fs (loop1): unable to read boot sector [ 133.792499][ T5222] usb 4-1: USB disconnect, device number 7 [ 134.058383][ T5274] usb 3-1: device descriptor read/64, error -71 [ 134.059823][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.243906][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.278175][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.299205][ T5274] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.306936][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.324410][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.339510][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.360250][ T25] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.375269][ T25] usb 5-1: Manufacturer: syz [ 134.394198][ T25] usb 5-1: config 0 descriptor?? [ 134.458451][ T5274] usb 3-1: Using ep0 maxpacket: 16 [ 134.465591][ T5274] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.508391][ T5274] usb 3-1: config 0 has no interfaces? [ 134.513993][ T5274] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 134.537581][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.552275][ T5274] usb 3-1: config 0 descriptor?? [ 134.817820][ T6038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.835078][ T25] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 134.858620][ T25] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 134.888656][ T6039] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 134.896485][ T25] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 134.909455][ T5222] usb 3-1: USB disconnect, device number 5 [ 135.005384][ T6043] sctp: [Deprecated]: syz.3.260 (pid 6043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.005384][ T6043] Use struct sctp_sack_info instead [ 135.162535][ T6049] netlink: zone id is out of range [ 135.172789][ T6049] netlink: zone id is out of range [ 135.182913][ T6049] netlink: set zone limit has 4 unknown bytes [ 135.408475][ T5274] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.570077][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.582633][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.594347][ T5274] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 135.603628][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.616968][ T5274] usb 1-1: config 0 descriptor?? [ 135.686489][ T25] usb 5-1: USB disconnect, device number 6 [ 135.846356][ T5274] usbhid 1-1:0.0: can't add hid device: -71 [ 135.852867][ T5274] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.863998][ T5274] usb 1-1: USB disconnect, device number 10 [ 136.474594][ T6060] loop2: detected capacity change from 0 to 7 [ 136.504727][ T6060] Dev loop2: unable to read RDB block 7 [ 136.519091][ T6064] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 136.536588][ T6060] loop2: unable to read partition table [ 136.542585][ T6060] loop2: partition table beyond EOD, truncated [ 136.552650][ T6060] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.614868][ T6064] netlink: 216 bytes leftover after parsing attributes in process `syz.0.266'. [ 136.725632][ T6070] capability: warning: `syz.4.273' uses deprecated v2 capabilities in a way that may be insecure [ 136.868924][ T6083] syz.3.272: attempt to access beyond end of device [ 136.868924][ T6083] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 136.918636][ T6083] FAT-fs (loop7): unable to read boot sector [ 137.158429][ T940] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.320168][ T940] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.332527][ T5272] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.348633][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.372503][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.408307][ T940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.445339][ T940] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 137.465416][ T940] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 137.498443][ T940] usb 2-1: Manufacturer: syz [ 137.507037][ T940] usb 2-1: config 0 descriptor?? [ 137.519463][ T5272] usb 3-1: Using ep0 maxpacket: 32 [ 137.528979][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.548442][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.571148][ T5272] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 137.588338][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.621140][ T5272] usb 3-1: config 0 descriptor?? [ 137.794498][ T6093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6093 comm=syz.4.281 [ 137.994929][ T940] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 138.013360][ T940] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 138.044962][ T5272] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 138.052150][ T940] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 138.093613][ T6102] caif0: entered allmulticast mode [ 138.130463][ T6102] netlink: 116 bytes leftover after parsing attributes in process `syz.0.285'. [ 138.166244][ T6102] caif0 (unregistering): left allmulticast mode [ 138.258706][ T5272] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 138.450081][ T5272] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 138.663934][ T5272] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 138.690179][ T5272] ft260 0003:0403:6030.0008: failed to retrieve status: -71 [ 138.718494][ T5272] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 138.837880][ T5272] usb 3-1: USB disconnect, device number 6 [ 138.931459][ T8] usb 2-1: USB disconnect, device number 3 [ 138.968181][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 138.968201][ T29] audit: type=1400 audit(1728047030.163:353): avc: denied { connect } for pid=6119 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.020877][ T29] audit: type=1400 audit(1728047030.223:354): avc: denied { shutdown } for pid=6119 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.100468][ T29] audit: type=1400 audit(1728047030.303:355): avc: denied { read } for pid=6124 comm="syz.4.295" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.127851][ T6123] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.138391][ T29] audit: type=1400 audit(1728047030.303:356): avc: denied { open } for pid=6124 comm="syz.4.295" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.199745][ T6123] netlink: 216 bytes leftover after parsing attributes in process `syz.0.294'. [ 139.508772][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.690356][ T8] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 139.719775][ T8] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 139.725042][ T6135] syz.2.298: attempt to access beyond end of device [ 139.725042][ T6135] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 139.740841][ T8] usb 5-1: Manufacturer: syz [ 139.742804][ T8] usb 5-1: config 0 descriptor?? [ 139.789195][ T6135] FAT-fs (loop5): unable to read boot sector [ 139.891461][ T6137] Bluetooth: MGMT ver 1.23 [ 140.075743][ T6142] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.301'. [ 140.101251][ T6142] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.301'. [ 140.182068][ T8] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 140.894270][ T8] usb 5-1: USB disconnect, device number 7 [ 141.268501][ T5846] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.438530][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 141.438570][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 141.456444][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.476347][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.489788][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 58, changing to 9 [ 141.507375][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.539379][ T5846] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 141.548420][ T5222] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.559294][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.567781][ T5846] usb 3-1: Product: syz [ 141.572863][ T5846] usb 3-1: Manufacturer: syz [ 141.582258][ T5846] usb 3-1: SerialNumber: syz [ 141.590899][ T5846] usb 3-1: config 0 descriptor?? [ 141.601017][ T5846] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 141.628863][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 141.643507][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.657041][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.677347][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.687732][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.700044][ T5222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.710961][ T5222] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.727732][ T5222] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.745118][ T25] usb 1-1: config 0 descriptor?? [ 141.751651][ T5222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.771460][ T5222] usb 2-1: SerialNumber: syz [ 141.947234][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 141.995217][ T5222] usb 2-1: 0:2 : does not exist [ 142.032556][ T5222] usb 2-1: USB disconnect, device number 4 [ 142.099255][ T6177] netlink: set zone limit has 4 unknown bytes [ 142.108212][ T6177] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.316'. [ 142.139310][ T6179] netlink: 84 bytes leftover after parsing attributes in process `syz.4.317'. [ 142.180599][ T25] HID 045e:07da: Invalid code 65791 type 1 [ 142.206672][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input11 [ 142.222931][ T25] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 142.275344][ T29] audit: type=1400 audit(1728047033.473:357): avc: denied { read } for pid=6180 comm="syz.3.318" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.298767][ T29] audit: type=1400 audit(1728047033.473:358): avc: denied { open } for pid=6180 comm="syz.3.318" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.382966][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 142.459290][ T5846] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 142.505304][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.512278][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.519275][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.526203][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.533191][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.540120][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.547784][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.556451][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.563504][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.570429][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.577360][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.584293][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.591486][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.598559][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.605464][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.612388][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.619321][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.626243][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.633151][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.640236][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.648288][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.655229][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.662154][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.669151][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.676082][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.683046][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.690692][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.697634][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.704554][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.711481][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.718448][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.725370][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.732288][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.739210][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.747288][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.755212][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.763034][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.770026][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.776953][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.785193][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.792714][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.799634][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.806555][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.813557][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.820577][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.827497][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.834504][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.841487][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.848409][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.856593][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.863582][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.870512][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.877449][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.884428][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.891254][ T5222] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.891346][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.906046][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.913072][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.920091][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.927029][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.934064][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.940996][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.947899][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.955975][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.963401][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.970341][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.977264][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.984190][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.991071][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 142.997959][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.004856][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.011738][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.018636][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.025521][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.032488][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.039554][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.046476][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.053453][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.062002][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.069936][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.076875][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.083714][ T5222] usb 4-1: Using ep0 maxpacket: 32 [ 143.083793][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.096458][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.099598][ T5222] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 143.103465][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.119582][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.126544][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.133446][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.135672][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.140390][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.155628][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.158635][ T5271] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.163015][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.178293][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.185249][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.192228][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.199232][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.206141][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.213117][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.215030][ T5222] usb 4-1: config 0 descriptor?? [ 143.219991][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.233401][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.240329][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.247259][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.254793][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.263188][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.270153][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.277918][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.285801][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.292742][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.299690][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.303831][ T5301] usb 1-1: USB disconnect, device number 11 [ 143.306580][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.319654][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.326659][ T29] audit: type=1400 audit(1728047034.523:359): avc: denied { search } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.326746][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.355658][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.363187][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.368479][ T5271] usb 2-1: Using ep0 maxpacket: 8 [ 143.372358][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.382232][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.389176][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.395814][ T5271] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 143.396071][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.411410][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.414499][ T5271] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 143.418309][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.435343][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.444885][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.452981][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.459943][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.467361][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.475303][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.482331][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.489367][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.496282][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.498158][ T5271] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.503282][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.523797][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.530729][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.537651][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.544586][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.551636][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.558719][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.565679][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.573263][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.580904][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.587847][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.595515][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.602581][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.609043][ T5271] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.609472][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.625814][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.632725][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.639770][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.646701][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.653610][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.660688][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.666922][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.667626][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.682766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 143.691861][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.699603][ T5846] usb 3-1: USB disconnect, device number 7 [ 143.705479][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 143.705504][ C0] gspca_main: Resubmit URB failed with error -19 [ 143.725029][ T5271] usbtmc 2-1:16.0: bulk endpoints not found [ 143.744908][ T5222] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 143.783016][ T5222] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 143.793404][ T5222] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 143.932551][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.970810][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.019742][ T5846] usb 2-1: USB disconnect, device number 5 [ 144.131261][ T29] audit: type=1400 audit(1728047035.323:360): avc: denied { read write } for pid=6202 comm="syz.0.326" name="sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 144.166522][ T29] audit: type=1400 audit(1728047035.323:361): avc: denied { open } for pid=6202 comm="syz.0.326" path="/dev/sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 144.484257][ T5271] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.661547][ T5271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.692178][ T5271] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 144.713075][ T5271] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.735515][ T5271] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 144.747341][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.763532][ T5271] usb 2-1: Product: syz [ 144.767833][ T5271] usb 2-1: Manufacturer: syz [ 144.800824][ T5271] usb 2-1: SerialNumber: syz [ 144.808666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.810257][ T5271] usb 2-1: config 0 descriptor?? [ 144.866823][ T29] audit: type=1400 audit(1728047036.063:362): avc: denied { ioctl } for pid=6214 comm="syz.2.331" path="/dev/sg0" dev="devtmpfs" ino=694 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.042948][ T5271] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 145.060152][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 145.069688][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 145.077427][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 145.088115][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 145.096979][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 145.108905][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 145.123914][ T5271] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 145.154309][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 145.174741][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 145.184754][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 145.192769][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 145.201153][ T5271] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 145.215565][ T5271] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 145.251986][ T5271] usb 2-1: USB disconnect, device number 6 [ 145.264518][ T5271] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 145.286151][ T5271] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 145.299141][ T5271] keyspan 2-1:0.0: device disconnected [ 145.331905][ T29] audit: type=1400 audit(1728047036.523:363): avc: denied { getopt } for pid=6225 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.398586][ T29] audit: type=1400 audit(1728047036.583:364): avc: denied { setopt } for pid=6225 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.620887][ T6235] serio: Serial port pts0 [ 145.708522][ T5846] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.774281][ T29] audit: type=1326 audit(1728047036.973:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6239 comm="syz.4.339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff6f17dff9 code=0x0 [ 145.892859][ T5846] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 145.902981][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.936693][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.948580][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 145.960482][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.985913][ T5846] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.000874][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.017933][ T5846] usb 1-1: config 0 descriptor?? [ 146.029120][ T6233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.091832][ T29] audit: type=1400 audit(1728047037.293:366): avc: denied { setopt } for pid=6253 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.114184][ T29] audit: type=1400 audit(1728047037.313:367): avc: denied { read } for pid=6253 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.452077][ T5846] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 146.462780][ T5846] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 146.473470][ T5846] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 146.662393][ T6270] serio: Serial port pts0 [ 146.670476][ T29] audit: type=1400 audit(1728047037.863:368): avc: denied { create } for pid=6268 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 146.693352][ T29] audit: type=1400 audit(1728047037.893:369): avc: denied { ioctl } for pid=6268 comm="syz.2.361" path="socket:[14131]" dev="sockfs" ino=14131 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 146.731025][ T5846] usb 1-1: USB disconnect, device number 12 [ 147.182414][ T6294] vivid-007: disconnect [ 147.187441][ T6293] vivid-007: reconnect [ 147.465714][ T6301] serio: Serial port pts0 [ 148.371262][ T6329] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 148.378565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 148.388312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 148.711948][ T6338] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 148.795578][ T6341] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 148.804855][ T6343] loop5: detected capacity change from 0 to 16384 [ 148.890595][ T6343] I/O error, dev loop5, sector 360 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 148.904516][ T6343] I/O error, dev loop5, sector 360 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 149.231230][ T6360] sctp: [Deprecated]: syz.4.387 (pid 6360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.231230][ T6360] Use struct sctp_sack_info instead [ 149.267329][ T6363] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 149.298587][ T6363] netlink: 100 bytes leftover after parsing attributes in process `syz.3.389'. [ 149.700222][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 149.700243][ T29] audit: type=1400 audit(1728047040.903:376): avc: denied { sqpoll } for pid=6377 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 149.735927][ T6378] block nbd4: shutting down sockets [ 149.989150][ T29] audit: type=1400 audit(1728047041.183:377): avc: denied { ioctl } for pid=6385 comm="syz.0.398" path="socket:[14333]" dev="sockfs" ino=14333 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.732127][ T5846] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.761793][ T6411] input: syz0 as /devices/virtual/input/input14 [ 150.888365][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 150.903754][ T5846] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.932777][ T5846] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2C, changing to 0xC [ 150.968603][ T5846] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 150.988774][ T5846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 2.40 [ 151.001527][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.013729][ T6400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.103870][ T29] audit: type=1400 audit(1728047042.303:378): avc: denied { bind } for pid=6426 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.421176][ T6439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.428523][ T5271] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.748369][ T5271] usb 3-1: device descriptor read/all, error -71 [ 153.328075][ T29] audit: type=1400 audit(1728047044.523:379): avc: denied { append } for pid=6447 comm="syz.1.423" name="001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 153.584268][ T29] audit: type=1400 audit(1728047044.783:380): avc: denied { create } for pid=6456 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.637752][ T29] audit: type=1400 audit(1728047044.813:381): avc: denied { getopt } for pid=6456 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.669578][ T29] audit: type=1400 audit(1728047044.873:382): avc: denied { accept } for pid=6461 comm="syz.2.430" lport=55483 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.693790][ T29] audit: type=1400 audit(1728047044.873:383): avc: denied { setopt } for pid=6461 comm="syz.2.430" lport=55483 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.830412][ T29] audit: type=1400 audit(1728047045.023:384): avc: denied { read } for pid=6467 comm="syz.3.434" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.853901][ T29] audit: type=1400 audit(1728047045.023:385): avc: denied { open } for pid=6467 comm="syz.3.434" path="/dev/input/mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.936874][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 153.972175][ T6474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.248672][ T6483] netlink: 'syz.2.441': attribute type 9 has an invalid length. [ 154.256672][ T6483] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.441'. [ 154.342956][ T5846] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 154.349244][ T5846] cdc_ncm 5-1:1.0: bind() failure [ 154.357749][ T5846] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 154.375592][ T5846] cdc_ncm 5-1:1.1: bind() failure [ 154.389567][ T5846] usb 5-1: USB disconnect, device number 8 [ 154.767452][ T29] audit: type=1400 audit(1728047045.963:386): avc: denied { ioctl } for pid=6511 comm="syz.0.449" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.794242][ T29] audit: type=1400 audit(1728047045.973:387): avc: denied { set_context_mgr } for pid=6511 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.811277][ T5846] ================================================================== [ 154.821946][ T5846] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x14c/0x1c0 [ 154.831246][ T5846] Read of size 8 at addr ffff888029c14808 by task kworker/0:7/5846 [ 154.839257][ T5846] [ 154.841582][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/0:7 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 154.852324][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.862382][ T5846] Workqueue: events binder_deferred_func [ 154.868045][ T5846] Call Trace: [ 154.871327][ T5846] [ 154.874269][ T5846] dump_stack_lvl+0x116/0x1f0 [ 154.878990][ T5846] print_report+0xc3/0x620 [ 154.883436][ T5846] ? __virt_addr_valid+0x5e/0x590 [ 154.888492][ T5846] ? __phys_addr+0xc6/0x150 [ 154.893014][ T5846] kasan_report+0xd9/0x110 [ 154.897451][ T5846] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 154.903892][ T5846] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 154.910342][ T5846] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 154.916615][ T5846] binder_release_work+0x9b/0x490 [ 154.921672][ T5846] binder_deferred_func+0xe6e/0x12e0 [ 154.926997][ T5846] process_one_work+0x9c5/0x1ba0 [ 154.931963][ T5846] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 154.938147][ T5846] ? __pfx_process_one_work+0x10/0x10 [ 154.943558][ T5846] ? assign_work+0x1a0/0x250 [ 154.948180][ T5846] worker_thread+0x6c8/0xf00 [ 154.952793][ T5846] ? __kthread_parkme+0x148/0x220 [ 154.957835][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 154.962942][ T5846] kthread+0x2c1/0x3a0 [ 154.967006][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.972195][ T5846] ? __pfx_kthread+0x10/0x10 [ 154.976776][ T5846] ret_from_fork+0x45/0x80 [ 154.981180][ T5846] ? __pfx_kthread+0x10/0x10 [ 154.985794][ T5846] ret_from_fork_asm+0x1a/0x30 [ 154.990574][ T5846] [ 154.993664][ T5846] [ 154.995976][ T5846] Allocated by task 6512: [ 155.000294][ T5846] kasan_save_stack+0x33/0x60 [ 155.004978][ T5846] kasan_save_track+0x14/0x30 [ 155.009677][ T5846] __kasan_kmalloc+0xaa/0xb0 [ 155.014293][ T5846] binder_thread_write+0xe19/0x4c60 [ 155.019514][ T5846] binder_ioctl+0x265b/0x6fa0 [ 155.024200][ T5846] __x64_sys_ioctl+0x18f/0x220 [ 155.028952][ T5846] do_syscall_64+0xcd/0x250 [ 155.033447][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.039337][ T5846] [ 155.041648][ T5846] Freed by task 5846: [ 155.045612][ T5846] kasan_save_stack+0x33/0x60 [ 155.050280][ T5846] kasan_save_track+0x14/0x30 [ 155.054950][ T5846] kasan_save_free_info+0x3b/0x60 [ 155.059994][ T5846] __kasan_slab_free+0x51/0x70 [ 155.064766][ T5846] kfree+0x14f/0x4b0 [ 155.068647][ T5846] binder_deferred_func+0xdd7/0x12e0 [ 155.073933][ T5846] process_one_work+0x9c5/0x1ba0 [ 155.078856][ T5846] worker_thread+0x6c8/0xf00 [ 155.083444][ T5846] kthread+0x2c1/0x3a0 [ 155.087500][ T5846] ret_from_fork+0x45/0x80 [ 155.091905][ T5846] ret_from_fork_asm+0x1a/0x30 [ 155.096659][ T5846] [ 155.098962][ T5846] The buggy address belongs to the object at ffff888029c14800 [ 155.098962][ T5846] which belongs to the cache kmalloc-64 of size 64 [ 155.112841][ T5846] The buggy address is located 8 bytes inside of [ 155.112841][ T5846] freed 64-byte region [ffff888029c14800, ffff888029c14840) [ 155.126386][ T5846] [ 155.128696][ T5846] The buggy address belongs to the physical page: [ 155.135102][ T5846] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29c14 [ 155.143867][ T5846] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 155.150971][ T5846] page_type: f5(slab) [ 155.154937][ T5846] raw: 00fff00000000000 ffff88801b0418c0 ffffea0000be3c00 dead000000000006 [ 155.163510][ T5846] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 155.172080][ T5846] page dumped because: kasan: bad access detected [ 155.178478][ T5846] page_owner tracks the page as allocated [ 155.184176][ T5846] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5228, tgid 5228 (syz-executor), ts 60147791965, free_ts 60131951188 [ 155.203443][ T5846] post_alloc_hook+0x2d1/0x350 [ 155.208205][ T5846] get_page_from_freelist+0x101e/0x3070 [ 155.213750][ T5846] __alloc_pages_noprof+0x223/0x25c0 [ 155.219039][ T5846] alloc_pages_mpol_noprof+0x2c9/0x610 [ 155.224525][ T5846] new_slab+0x2ba/0x3f0 [ 155.228702][ T5846] ___slab_alloc+0xdac/0x1880 [ 155.233395][ T5846] __slab_alloc.constprop.0+0x56/0xb0 [ 155.238784][ T5846] __kmalloc_cache_noprof+0x2b4/0x300 [ 155.244179][ T5846] mpls_dev_notify+0x346/0xa20 [ 155.248972][ T5846] notifier_call_chain+0xb9/0x410 [ 155.254020][ T5846] call_netdevice_notifiers_info+0xbe/0x140 [ 155.259934][ T5846] register_netdevice+0x17a0/0x1e90 [ 155.265161][ T5846] veth_newlink+0x366/0x9e0 [ 155.269788][ T5846] __rtnl_newlink+0x1197/0x1920 [ 155.274667][ T5846] rtnl_newlink+0x67/0xa0 [ 155.279029][ T5846] rtnetlink_rcv_msg+0x3c7/0xea0 [ 155.283991][ T5846] page last free pid 5217 tgid 5217 stack trace: [ 155.290331][ T5846] free_unref_page+0x5f4/0xdc0 [ 155.295121][ T5846] __put_partials+0x14c/0x170 [ 155.299819][ T5846] qlist_free_all+0x4e/0x120 [ 155.304435][ T5846] kasan_quarantine_reduce+0x192/0x1e0 [ 155.309912][ T5846] __kasan_slab_alloc+0x69/0x90 [ 155.314787][ T5846] __kmalloc_cache_noprof+0x11e/0x300 [ 155.320184][ T5846] kobject_uevent_env+0x265/0x1860 [ 155.325492][ T5846] __kobject_del+0x168/0x1f0 [ 155.330119][ T5846] kobject_put+0x327/0x5a0 [ 155.334569][ T5846] net_rx_queue_update_kobjects+0x478/0x5f0 [ 155.340499][ T5846] netif_set_real_num_rx_queues+0x169/0x210 [ 155.346509][ T5846] veth_init_queues+0x151/0x190 [ 155.351394][ T5846] veth_newlink+0x54c/0x9e0 [ 155.355926][ T5846] __rtnl_newlink+0x1197/0x1920 [ 155.360807][ T5846] rtnl_newlink+0x67/0xa0 [ 155.365171][ T5846] rtnetlink_rcv_msg+0x3c7/0xea0 [ 155.370131][ T5846] [ 155.372474][ T5846] Memory state around the buggy address: [ 155.378108][ T5846] ffff888029c14700: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 155.386271][ T5846] ffff888029c14780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 155.394347][ T5846] >ffff888029c14800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 155.402419][ T5846] ^ [ 155.406764][ T5846] ffff888029c14880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 155.414846][ T5846] ffff888029c14900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 155.422931][ T5846] ================================================================== [ 155.432857][ T5846] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.440076][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/0:7 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 155.450838][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.460891][ T5846] Workqueue: events binder_deferred_func [ 155.466621][ T5846] Call Trace: [ 155.469890][ T5846] [ 155.472823][ T5846] dump_stack_lvl+0x3d/0x1f0 [ 155.477418][ T5846] panic+0x71d/0x800 [ 155.481316][ T5846] ? __pfx_panic+0x10/0x10 [ 155.485738][ T5846] ? check_panic_on_warn+0x1f/0xb0 [ 155.490856][ T5846] check_panic_on_warn+0xab/0xb0 [ 155.495795][ T5846] end_report+0x117/0x180 [ 155.500124][ T5846] kasan_report+0xe9/0x110 [ 155.504537][ T5846] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 155.510954][ T5846] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 155.517387][ T5846] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 155.523649][ T5846] binder_release_work+0x9b/0x490 [ 155.528691][ T5846] binder_deferred_func+0xe6e/0x12e0 [ 155.533984][ T5846] process_one_work+0x9c5/0x1ba0 [ 155.538923][ T5846] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 155.545078][ T5846] ? __pfx_process_one_work+0x10/0x10 [ 155.550454][ T5846] ? assign_work+0x1a0/0x250 [ 155.555051][ T5846] worker_thread+0x6c8/0xf00 [ 155.559638][ T5846] ? __kthread_parkme+0x148/0x220 [ 155.564661][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 155.569767][ T5846] kthread+0x2c1/0x3a0 [ 155.573833][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.579028][ T5846] ? __pfx_kthread+0x10/0x10 [ 155.583615][ T5846] ret_from_fork+0x45/0x80 [ 155.588023][ T5846] ? __pfx_kthread+0x10/0x10 [ 155.592613][ T5846] ret_from_fork_asm+0x1a/0x30 [ 155.597383][ T5846] [ 155.600647][ T5846] Kernel Offset: disabled [ 155.604955][ T5846] Rebooting in 86400 seconds..