last executing test programs: 2.565251591s ago: executing program 1 (id=617): openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.447293544s ago: executing program 0 (id=619): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a6000a000200d82ea1bc017000000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.359686547s ago: executing program 0 (id=621): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usbip_server_init(0x4) 1.998555279s ago: executing program 2 (id=629): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x8a]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4725}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x9c}}, 0x0) 1.983296043s ago: executing program 3 (id=630): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioperm(0xc210, 0x4, 0x5) 1.977719599s ago: executing program 2 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008810}, 0x40080) 1.89096931s ago: executing program 2 (id=632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x20004080) 1.758789195s ago: executing program 2 (id=634): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4397a5c0115f3542, 0x4008032, 0xffffffffffffffff, 0x3ae84000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_destroy(0x0) 1.68637711s ago: executing program 1 (id=636): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 1.656135924s ago: executing program 0 (id=637): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff}, 0xe) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10}) 1.526112392s ago: executing program 1 (id=640): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 1.402850141s ago: executing program 1 (id=641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x6d, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.366000327s ago: executing program 1 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="8200000000000000280012800b00010067656e657665000018000280140007000000ea00000000000000000000000001080004"], 0x50}, 0x1, 0x2}, 0x0) 1.286849372s ago: executing program 3 (id=644): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) close(r0) 1.286641784s ago: executing program 2 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002000128009000100766c616e00000000100002800c0002000200000000e0"], 0x40}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) 1.248939983s ago: executing program 3 (id=647): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff11", 0x22}], 0x1}, 0x9cdc2384056b48b8) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1.215686882s ago: executing program 2 (id=648): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905020320"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 1.214781856s ago: executing program 1 (id=649): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400304c19700000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x80, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x44}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x81, 0x5, {0x7, 0x25, 0x1, 0x3, 0xff, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9a, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x5, 0x1}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 989.458418ms ago: executing program 4 (id=654): syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x16, 0x0, @private2, @local, {[@fragment={0x8e, 0x0, 0x3, 0x0, 0x0, 0x9, 0x64}, @fragment={0x2b, 0x0, 0x7, 0x0, 0x0, 0x11, 0x68}, @hopopts={0x3b, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x81}, @jumbo={0xc2, 0x4, 0x5}]}]}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) 988.662867ms ago: executing program 4 (id=655): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4dd11876d04ce31a}, 0x20040800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x10) 962.252891ms ago: executing program 4 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) 911.974352ms ago: executing program 4 (id=657): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) ppoll(&(0x7f00000000c0)=[{r0, 0x99}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 739.506457ms ago: executing program 4 (id=658): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x6, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0xa0, 0x1, 'queue1\x00', 0xfffffffe}) 726.624842ms ago: executing program 0 (id=659): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 597.028479ms ago: executing program 0 (id=660): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 596.532106ms ago: executing program 3 (id=661): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r1, 0x289}, &(0x7f0000000080)=0x8) 523.375528ms ago: executing program 3 (id=662): newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b080800418e224e0a04fcff", 0x58}], 0x1) 516.971091ms ago: executing program 4 (id=663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x120, 0x301}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000086ddffff0000"}}}}}, 0x0) 459.563944ms ago: executing program 3 (id=664): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x240}], 0x1, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 0s ago: executing program 0 (id=665): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 50.271346][ T29] audit: type=1400 audit(1737609529.294:88): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.274454][ T5802] cgroup: Unknown subsys name 'net' [ 50.294078][ T29] audit: type=1400 audit(1737609529.294:89): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.321476][ T29] audit: type=1400 audit(1737609529.334:90): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.531131][ T5802] cgroup: Unknown subsys name 'cpuset' [ 50.538001][ T5802] cgroup: Unknown subsys name 'rlimit' [ 50.680577][ T29] audit: type=1400 audit(1737609529.704:91): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.716854][ T29] audit: type=1400 audit(1737609529.704:92): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.737351][ T29] audit: type=1400 audit(1737609529.704:93): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.757896][ T29] audit: type=1400 audit(1737609529.704:94): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.778711][ T29] audit: type=1400 audit(1737609529.724:95): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 50.797125][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.799586][ T29] audit: type=1400 audit(1737609529.724:96): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 50.833173][ T29] audit: type=1400 audit(1737609529.724:97): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.633265][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.480666][ T5134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.489584][ T5134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.490290][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.496885][ T5134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.511950][ T5134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.516359][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.520064][ T5134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.534238][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.541638][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.541943][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.549757][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.556987][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.569603][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.569798][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.577530][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.591073][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.596677][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.598628][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.606144][ T5134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.612306][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.629140][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.629593][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.636401][ T5829] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.644824][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.651395][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.657738][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.671475][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.679455][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.689738][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.697547][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.906990][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 53.919907][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 54.025778][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 54.053108][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.060591][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.067712][ T5812] bridge_slave_0: entered allmulticast mode [ 54.075098][ T5812] bridge_slave_0: entered promiscuous mode [ 54.094341][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 54.106059][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.113366][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.120607][ T5812] bridge_slave_1: entered allmulticast mode [ 54.126894][ T5812] bridge_slave_1: entered promiscuous mode [ 54.156666][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.166411][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.174093][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.181418][ T5827] bridge_slave_0: entered allmulticast mode [ 54.187699][ T5827] bridge_slave_0: entered promiscuous mode [ 54.194408][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.201499][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.208533][ T5827] bridge_slave_1: entered allmulticast mode [ 54.215017][ T5827] bridge_slave_1: entered promiscuous mode [ 54.247982][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.295138][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.305295][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.318261][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.325456][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.332675][ T5824] bridge_slave_0: entered allmulticast mode [ 54.338926][ T5824] bridge_slave_0: entered promiscuous mode [ 54.356970][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.364289][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.371573][ T5824] bridge_slave_1: entered allmulticast mode [ 54.378066][ T5824] bridge_slave_1: entered promiscuous mode [ 54.389868][ T5812] team0: Port device team_slave_0 added [ 54.411124][ T5827] team0: Port device team_slave_0 added [ 54.427161][ T5812] team0: Port device team_slave_1 added [ 54.433804][ T5827] team0: Port device team_slave_1 added [ 54.440288][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 54.457480][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.464683][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.471794][ T5820] bridge_slave_0: entered allmulticast mode [ 54.478204][ T5820] bridge_slave_0: entered promiscuous mode [ 54.485361][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.493916][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.501201][ T5820] bridge_slave_1: entered allmulticast mode [ 54.507472][ T5820] bridge_slave_1: entered promiscuous mode [ 54.529561][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.539050][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.545983][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.571869][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.587034][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.594063][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.620453][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.634549][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.641522][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.667471][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.681253][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.690591][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.697510][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.723416][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.755835][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.774471][ T5824] team0: Port device team_slave_0 added [ 54.782873][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.808554][ T5824] team0: Port device team_slave_1 added [ 54.832270][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.839407][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.846494][ T5813] bridge_slave_0: entered allmulticast mode [ 54.853174][ T5813] bridge_slave_0: entered promiscuous mode [ 54.864812][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.872135][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.879293][ T5813] bridge_slave_1: entered allmulticast mode [ 54.885569][ T5813] bridge_slave_1: entered promiscuous mode [ 54.893289][ T5820] team0: Port device team_slave_0 added [ 54.902076][ T5812] hsr_slave_0: entered promiscuous mode [ 54.908101][ T5812] hsr_slave_1: entered promiscuous mode [ 54.937917][ T5820] team0: Port device team_slave_1 added [ 54.950412][ T5827] hsr_slave_0: entered promiscuous mode [ 54.956296][ T5827] hsr_slave_1: entered promiscuous mode [ 54.963803][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.972535][ T5827] Cannot create hsr debugfs directory [ 54.978268][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.985332][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.011313][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.023267][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.030316][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.056197][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.085765][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.097548][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.104743][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.130830][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.142631][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.149573][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.175482][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.192961][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.227335][ T5813] team0: Port device team_slave_0 added [ 55.252480][ T5824] hsr_slave_0: entered promiscuous mode [ 55.258298][ T5824] hsr_slave_1: entered promiscuous mode [ 55.264205][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.271795][ T5824] Cannot create hsr debugfs directory [ 55.279154][ T5813] team0: Port device team_slave_1 added [ 55.307147][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.314124][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.340385][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.361319][ T5820] hsr_slave_0: entered promiscuous mode [ 55.367212][ T5820] hsr_slave_1: entered promiscuous mode [ 55.373627][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.381260][ T5820] Cannot create hsr debugfs directory [ 55.390825][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.397750][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.425653][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.521229][ T5813] hsr_slave_0: entered promiscuous mode [ 55.527151][ T5813] hsr_slave_1: entered promiscuous mode [ 55.533272][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.541311][ T5813] Cannot create hsr debugfs directory [ 55.602811][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.625154][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.632453][ T5821] Bluetooth: hci0: command tx timeout [ 55.639389][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.663299][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.709119][ T5821] Bluetooth: hci4: command tx timeout [ 55.714600][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.727692][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.736464][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.751580][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.789118][ T5821] Bluetooth: hci1: command tx timeout [ 55.797191][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.804451][ T54] Bluetooth: hci2: command tx timeout [ 55.808224][ T5821] Bluetooth: hci3: command tx timeout [ 55.817237][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.837073][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.846281][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.877741][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.899381][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.906115][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.914717][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.957742][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.967267][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.974422][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.992646][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.003282][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.010361][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.026720][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.048001][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.067420][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.095177][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.103826][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.118240][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.142382][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.149447][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.177108][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.184150][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.220093][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.233275][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.256046][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 56.256058][ T29] audit: type=1400 audit(1737609535.274:111): avc: denied { sys_module } for pid=5812 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.314832][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.324206][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.338902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.345988][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.378607][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.385684][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.402488][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.409547][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.438783][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.456307][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.465027][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.472112][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.491039][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.506814][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.517403][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.583487][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.604159][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.655450][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.675101][ T5812] veth0_vlan: entered promiscuous mode [ 56.688586][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.695684][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.730200][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.737274][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.756155][ T5812] veth1_vlan: entered promiscuous mode [ 56.802118][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.844340][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.857871][ T5827] veth0_vlan: entered promiscuous mode [ 56.887071][ T5827] veth1_vlan: entered promiscuous mode [ 56.921685][ T5827] veth0_macvtap: entered promiscuous mode [ 56.933867][ T5812] veth0_macvtap: entered promiscuous mode [ 56.949427][ T5827] veth1_macvtap: entered promiscuous mode [ 56.956320][ T5812] veth1_macvtap: entered promiscuous mode [ 56.983959][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.995618][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.005533][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.017550][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.031079][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.041095][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.053522][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.062537][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.074519][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.084329][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.096392][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.107189][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.118001][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.140173][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.148848][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.158221][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.167508][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.180642][ T5813] veth0_vlan: entered promiscuous mode [ 57.212539][ T5820] veth0_vlan: entered promiscuous mode [ 57.219599][ T5813] veth1_vlan: entered promiscuous mode [ 57.241976][ T5824] veth0_vlan: entered promiscuous mode [ 57.258250][ T5824] veth1_vlan: entered promiscuous mode [ 57.264664][ T5820] veth1_vlan: entered promiscuous mode [ 57.303418][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.307411][ T5813] veth0_macvtap: entered promiscuous mode [ 57.317685][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.324298][ T5813] veth1_macvtap: entered promiscuous mode [ 57.337267][ T5824] veth0_macvtap: entered promiscuous mode [ 57.367323][ T5824] veth1_macvtap: entered promiscuous mode [ 57.381657][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.391209][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.403536][ T5820] veth0_macvtap: entered promiscuous mode [ 57.415499][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.427848][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.440850][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.451552][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.462244][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.474047][ T5820] veth1_macvtap: entered promiscuous mode [ 57.474859][ T29] audit: type=1400 audit(1737609536.504:112): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.CrNbsY/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.481793][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.519386][ T29] audit: type=1400 audit(1737609536.534:113): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.527571][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.543375][ T29] audit: type=1400 audit(1737609536.534:114): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.CrNbsY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.555668][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.577975][ T29] audit: type=1400 audit(1737609536.534:115): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.590486][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.609449][ T29] audit: type=1400 audit(1737609536.544:116): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.CrNbsY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.622537][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.646743][ T29] audit: type=1400 audit(1737609536.544:117): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.CrNbsY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.684372][ T29] audit: type=1400 audit(1737609536.544:118): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.688107][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.714275][ T5821] Bluetooth: hci0: command tx timeout [ 57.729703][ T29] audit: type=1400 audit(1737609536.744:119): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.732394][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.756768][ T29] audit: type=1400 audit(1737609536.744:120): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="gadgetfs" ino=6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.794268][ T5821] Bluetooth: hci4: command tx timeout [ 57.796645][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.800738][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.825215][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.835133][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.845946][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.856271][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.866049][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.872424][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.876915][ T5821] Bluetooth: hci3: command tx timeout [ 57.888492][ T54] Bluetooth: hci2: command tx timeout [ 57.890002][ T5821] Bluetooth: hci1: command tx timeout [ 57.898014][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.901342][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.918019][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.928498][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.938386][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.948863][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.961341][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.973738][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.993986][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.007952][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.018900][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.043677][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.059598][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.068287][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.077320][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.092632][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.104430][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.118570][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.131182][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.141087][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.151505][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.161408][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.171834][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.182313][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.198206][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.208742][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.218612][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.229465][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.239346][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.250003][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.259999][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.271499][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.282681][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.310781][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.318614][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.332572][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.355686][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.365876][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6'. [ 58.365947][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.387385][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.564633][ T3618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.588942][ T3618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.606547][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.626301][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.654557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.658772][ T3618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.672283][ T3618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.682637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.724857][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.734216][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.780147][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.790558][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.810022][ T5865] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.003505][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 59.045233][ T5865] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.079750][ T5865] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.113138][ T5865] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 59.139290][ T5865] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.183808][ T5865] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 59.230361][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.273792][ T5865] usb 5-1: config 0 descriptor?? [ 59.435870][ T5939] serio: Serial port ptm0 [ 59.549365][ T5875] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.559134][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.711641][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 59.717638][ T5865] hid (null): invalid report_count 56567 [ 59.732606][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.732978][ T46] usb 1-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 59.743625][ T5865] hid (null): unknown global tag 0xc [ 59.756956][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.762073][ T5875] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 59.776521][ T5865] hid (null): unknown global tag 0xd [ 59.786343][ T5865] hid (null): bogus close delimiter [ 59.786899][ T46] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 59.792804][ T5821] Bluetooth: hci0: command tx timeout [ 59.806655][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.817922][ T5865] hid (null): global environment stack overflow [ 59.818533][ T46] usb 1-1: SerialNumber: syz [ 59.824227][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.858355][ T5865] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0001/input/input5 [ 59.870796][ T5821] Bluetooth: hci4: command tx timeout [ 59.886095][ T5875] usb 2-1: config 0 descriptor?? [ 59.897503][ T5875] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 59.946329][ T5865] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 59.959637][ T5821] Bluetooth: hci2: command tx timeout [ 59.959677][ T5819] Bluetooth: hci3: command tx timeout [ 59.965016][ T5821] Bluetooth: hci1: command tx timeout [ 59.975907][ T5865] usb 5-1: USB disconnect, device number 2 [ 60.054008][ T46] usb 1-1: invalid UAC_HEADER (v1) [ 60.075370][ T46] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 60.090703][ T46] usb 1-1: USB disconnect, device number 2 [ 60.127560][ T5875] usb 2-1: USB disconnect, device number 2 [ 60.291204][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 61.311557][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 61.311570][ T29] audit: type=1400 audit(1737609540.334:178): avc: denied { bind } for pid=5979 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.403329][ T29] audit: type=1400 audit(1737609540.334:179): avc: denied { name_bind } for pid=5979 comm="syz.2.34" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 61.506154][ T29] audit: type=1400 audit(1737609540.334:180): avc: denied { node_bind } for pid=5979 comm="syz.2.34" saddr=172.20.20.39 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 61.575468][ T29] audit: type=1400 audit(1737609540.384:181): avc: denied { name_bind } for pid=5983 comm="syz.0.36" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.638232][ T29] audit: type=1400 audit(1737609540.384:182): avc: denied { node_bind } for pid=5983 comm="syz.0.36" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 61.703179][ T29] audit: type=1400 audit(1737609540.694:183): avc: denied { append } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.787371][ T29] audit: type=1400 audit(1737609540.724:184): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.869271][ T5819] Bluetooth: hci0: command tx timeout [ 61.882924][ T29] audit: type=1400 audit(1737609540.724:185): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.908577][ T29] audit: type=1400 audit(1737609540.724:186): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.951434][ T5819] Bluetooth: hci4: command tx timeout [ 61.976457][ T29] audit: type=1400 audit(1737609540.804:187): avc: denied { map_create } for pid=5993 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.029063][ T54] Bluetooth: hci2: command tx timeout [ 62.034471][ T5819] Bluetooth: hci1: command tx timeout [ 62.040531][ T54] Bluetooth: hci3: command tx timeout [ 62.181092][ T6009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.534338][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.809189][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 62.842150][ T6030] batadv0: entered promiscuous mode [ 62.858252][ T6030] team0: entered promiscuous mode [ 62.886593][ T6030] team_slave_0: entered promiscuous mode [ 62.905138][ T6030] team_slave_1: entered promiscuous mode [ 62.941229][ T6030] hsr1: entered promiscuous mode [ 62.946192][ T6030] hsr1: entered allmulticast mode [ 62.995485][ T6030] batadv0: entered allmulticast mode [ 63.015454][ T6030] team0: entered allmulticast mode [ 63.026645][ T6030] team_slave_0: entered allmulticast mode [ 63.037919][ T6030] team_slave_1: entered allmulticast mode [ 63.553730][ T6059] trusted_key: syz.3.67 sent an empty control message without MSG_MORE. [ 63.864058][ T6078] netlink: 71 bytes leftover after parsing attributes in process `syz.4.75'. [ 64.088028][ T6092] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 64.119777][ T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 64.319756][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 64.334223][ T46] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.351940][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 64.366336][ T46] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 64.385647][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.426411][ T46] usb 1-1: config 0 descriptor?? [ 64.855125][ T46] cherry 0003:046A:0023.0002: unexpected long global item [ 64.864484][ T6118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.866682][ T46] cherry 0003:046A:0023.0002: probe with driver cherry failed with error -22 [ 65.070917][ T6128] warning: `syz.1.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.104688][ T46] usb 1-1: USB disconnect, device number 3 [ 65.171891][ T6130] Zero length message leads to an empty skb [ 65.739069][ T5862] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.924274][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 65.952203][ T5862] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 65.983815][ T5862] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 66.019094][ T5862] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.047478][ T5862] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.062823][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.079134][ T5862] usb 3-1: SerialNumber: syz [ 66.099682][ T6136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.208685][ T6191] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 66.227345][ T6191] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.111'. [ 66.349344][ T5862] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 66.357658][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 66.357671][ T29] audit: type=1400 audit(1737609545.374:272): avc: denied { remove_name } for pid=6202 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.401695][ T5862] usb 3-1: USB disconnect, device number 2 [ 66.483930][ T29] audit: type=1400 audit(1737609545.424:273): avc: denied { unlink } for pid=6202 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.752191][ T29] audit: type=1400 audit(1737609545.774:274): avc: denied { read } for pid=6217 comm="syz.3.119" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.801535][ T29] audit: type=1400 audit(1737609545.774:275): avc: denied { open } for pid=6217 comm="syz.3.119" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.861197][ T6221] netlink: 'syz.4.118': attribute type 10 has an invalid length. [ 66.878079][ T29] audit: type=1400 audit(1737609545.774:276): avc: denied { create } for pid=6217 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.926130][ T6221] bond0: (slave bond_slave_0): Releasing backup interface [ 66.934865][ T29] audit: type=1400 audit(1737609545.784:277): avc: denied { bind } for pid=6217 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.989189][ T29] audit: type=1400 audit(1737609545.874:278): avc: denied { listen } for pid=6225 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.057421][ T29] audit: type=1400 audit(1737609545.874:279): avc: denied { module_request } for pid=6225 comm="syz.0.121" kmod="crypto-hmac(md5)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 67.081201][ T5875] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.089317][ T6239] netlink: 'syz.2.123': attribute type 25 has an invalid length. [ 67.110628][ T6239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 67.127700][ T6244] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 67.149032][ T29] audit: type=1400 audit(1737609545.934:280): avc: denied { create } for pid=6225 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.205658][ T29] audit: type=1400 audit(1737609545.934:281): avc: denied { write } for pid=6225 comm="syz.0.121" path="socket:[9549]" dev="sockfs" ino=9549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.274694][ T5875] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 67.284581][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.292625][ T5875] usb 2-1: Product: syz [ 67.300932][ T5875] usb 2-1: Manufacturer: syz [ 67.305537][ T5875] usb 2-1: SerialNumber: syz [ 67.337294][ T5875] usb 2-1: config 0 descriptor?? [ 67.618455][ T5875] usb 2-1: USB disconnect, device number 3 [ 67.686018][ T5190] udevd[5190]: worker [5806] terminated by signal 33 (Unknown signal 33) [ 67.709923][ T5190] udevd[5190]: worker [5806] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 68.059083][ T5900] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.210376][ T6310] netlink: 71 bytes leftover after parsing attributes in process `syz.4.142'. [ 68.232910][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 68.254270][ T5900] usb 4-1: config 0 has no interfaces? [ 68.261662][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.275651][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 68.285202][ T5900] usb 4-1: SerialNumber: syz [ 68.295453][ T5900] usb 4-1: config 0 descriptor?? [ 68.451237][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.489238][ T6324] batadv0: entered allmulticast mode [ 68.514656][ T5899] usb 4-1: USB disconnect, device number 2 [ 68.631739][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 68.672003][ T46] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 68.689910][ T6336] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 68.713602][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.744904][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 68.778887][ T46] usb 3-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 68.819862][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.862591][ T46] usb 3-1: config 0 descriptor?? [ 68.984919][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 69.119402][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.290464][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 69.305595][ T5875] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.323332][ T5875] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.350904][ T5875] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 69.367129][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.374833][ T5875] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 69.385107][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.405155][ T5875] usb 5-1: config 0 descriptor?? [ 69.509893][ T5865] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.569221][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.583551][ T5862] usb 3-1: USB disconnect, device number 3 [ 69.679159][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 69.698856][ T5865] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 69.709731][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.721098][ T5865] usb 4-1: config 0 descriptor?? [ 69.733023][ T46] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 69.734745][ T5865] gspca_main: sunplus-2.14.0 probing 041e:400b [ 69.749032][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.761853][ T46] usb 1-1: Product: syz [ 69.766032][ T46] usb 1-1: Manufacturer: syz [ 69.772597][ T46] usb 1-1: SerialNumber: syz [ 69.781678][ T46] usb 1-1: config 0 descriptor?? [ 69.790024][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 69.827107][ T5875] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0004/input/input7 [ 69.844310][ T5875] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 69.959354][ T5865] gspca_sunplus: reg_w_riv err -71 [ 69.970283][ T5865] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 69.982819][ T5865] usb 4-1: USB disconnect, device number 3 [ 69.994519][ T46] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 70.045668][ T5875] usb 5-1: USB disconnect, device number 3 [ 70.133730][ T6389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.164'. [ 70.204863][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 70.221996][ T5865] usb 1-1: USB disconnect, device number 4 [ 70.380399][ T5906] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 70.399488][ T5906] usb 2-1: config 0 has no interface number 0 [ 70.408734][ T5906] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.425071][ T5906] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.439313][ T5906] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 70.448506][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.463464][ T5906] usb 2-1: config 0 descriptor?? [ 70.770758][ T6408] process 'syz.3.170' launched './file0' with NULL argv: empty string added [ 70.924667][ T5906] uclogic 0003:28BD:0905.0005: Interface probing failed: -22 [ 70.946568][ T5906] uclogic 0003:28BD:0905.0005: interface is invalid, ignoring [ 71.009474][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 71.074236][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.088991][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.171069][ T5875] usb 2-1: USB disconnect, device number 4 [ 71.179176][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 71.207097][ T46] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 71.228430][ T46] usb 3-1: config 0 has no interface number 0 [ 71.250764][ T46] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 71.271997][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.297536][ T46] usb 3-1: Product: syz [ 71.309125][ T46] usb 3-1: Manufacturer: syz [ 71.315124][ T46] usb 3-1: SerialNumber: syz [ 71.401081][ T6425] netlink: 248 bytes leftover after parsing attributes in process `syz.3.178'. [ 71.445908][ T46] usb 3-1: config 0 descriptor?? [ 71.558086][ T46] kernel write not supported for file /media0 (pid: 46 comm: kworker/1:1) [ 71.670436][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 71.670449][ T29] audit: type=1400 audit(1737609550.684:320): avc: denied { read write } for pid=6430 comm="syz.4.181" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.691647][ T5814] usb 3-1: USB disconnect, device number 4 [ 71.699461][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.706175][ T6431] loop6: detected capacity change from 0 to 524287999 [ 71.773029][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.782296][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.784983][ T29] audit: type=1400 audit(1737609550.684:321): avc: denied { open } for pid=6430 comm="syz.4.181" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.820651][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.829824][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.870676][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.879856][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.888120][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.897272][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.908744][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.917918][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.926821][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.935421][ T29] audit: type=1400 audit(1737609550.734:322): avc: denied { append } for pid=6430 comm="syz.4.181" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.935947][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.967725][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.976886][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.989747][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.998967][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.007161][ T6431] ldm_validate_partition_table(): Disk read failed. [ 72.027596][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.036769][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.040932][ T29] audit: type=1400 audit(1737609550.954:323): avc: denied { unlink } for pid=6439 comm="syz.0.185" name="#1" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.048970][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.075673][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 72.076780][ T29] audit: type=1400 audit(1737609550.994:324): avc: denied { mount } for pid=6439 comm="syz.0.185" name="/" dev="overlay" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.092745][ T6431] Dev loop6: unable to read RDB block 0 [ 72.118355][ T6431] loop6: unable to read partition table [ 72.124670][ T6431] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 72.150655][ T6434] ldm_validate_partition_table(): Disk read failed. [ 72.168186][ T6434] Dev loop6: unable to read RDB block 0 [ 72.195338][ T6434] loop6: unable to read partition table [ 72.201618][ T29] audit: type=1400 audit(1737609551.164:325): avc: denied { mount } for pid=6441 comm="syz.3.186" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.205556][ T6434] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 72.310732][ T29] audit: type=1400 audit(1737609551.224:326): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.382411][ T29] audit: type=1400 audit(1737609551.254:327): avc: denied { create } for pid=6443 comm="syz.0.187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.410560][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 72.505213][ T6456] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 73.029816][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.052141][ T29] audit: type=1400 audit(1737609552.064:328): avc: denied { name_connect } for pid=6467 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 73.106448][ T6470] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 73.149069][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.154567][ T29] audit: type=1400 audit(1737609552.164:329): avc: denied { mount } for pid=6472 comm="syz.0.199" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.157201][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.230657][ T5814] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.251458][ T5814] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 73.267858][ T5814] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.293413][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.305628][ T5814] usb 4-1: Product: syz [ 73.314112][ T5814] usb 4-1: Manufacturer: syz [ 73.318733][ T5814] usb 4-1: SerialNumber: syz [ 73.587245][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.606687][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.631461][ T5814] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 73.656639][ T5949] udevd[5949]: failed to send result of seq 11421 to main daemon: Connection refused [ 73.667294][ T5814] usb 4-1: USB disconnect, device number 4 [ 73.739409][ T5862] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.919430][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 73.930025][ T5862] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.959027][ T5862] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.968766][ T5862] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.008198][ T5862] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.029929][ T5862] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.039150][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 74.047140][ T5862] usb 5-1: Product: syz [ 74.119033][ T5814] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 74.269973][ T5862] usb 5-1: GET_CAPABILITIES returned 0 [ 74.275458][ T5862] usbtmc 5-1:16.0: can't read capabilities [ 74.289282][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 74.295590][ T5814] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 74.314473][ T5814] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 74.335815][ T5814] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.355778][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.379414][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 74.393902][ T5814] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.405443][ T5814] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.415251][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.490788][ T46] usb 5-1: USB disconnect, device number 4 [ 74.639261][ T5814] usb 4-1: usb_control_msg returned -71 [ 74.644840][ T5814] usbtmc 4-1:16.0: can't read capabilities [ 74.662028][ T5814] usb 4-1: USB disconnect, device number 5 [ 75.242242][ T6568] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.243'. [ 75.475929][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 75.512282][ T6586] netlink: 72 bytes leftover after parsing attributes in process `syz.0.251'. [ 75.517816][ T6591] input: syz0 as /devices/virtual/input/input8 [ 76.029038][ T5906] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 76.190439][ T117] cfg80211: failed to load regulatory.db [ 76.205951][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.221417][ T5906] usb 3-1: config 0 has no interfaces? [ 76.221699][ T6629] Invalid ELF header len 8 [ 76.226957][ T5906] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 76.250718][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.281571][ T5906] usb 3-1: config 0 descriptor?? [ 76.530629][ T46] usb 3-1: USB disconnect, device number 5 [ 76.569398][ T5814] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.679050][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.730162][ T5814] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.738884][ T5814] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.749464][ T5814] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.758408][ T5814] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.772858][ T5814] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.782286][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 76.789781][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.797733][ T5814] usb 5-1: Product: syz [ 76.802025][ T5814] usb 5-1: Manufacturer: syz [ 76.809739][ T5814] cdc_wdm 5-1:1.0: skipping garbage [ 76.814944][ T5814] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 76.836779][ T5906] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 76.846037][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.854399][ T5906] usb 1-1: Product: syz [ 76.858623][ T5906] usb 1-1: Manufacturer: syz [ 76.863352][ T5906] usb 1-1: SerialNumber: syz [ 76.868812][ T5906] usb 1-1: config 0 descriptor?? [ 76.889079][ T5900] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 76.949022][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 76.955295][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.966460][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.976268][ T5862] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 76.985332][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.994784][ T5862] usb 4-1: config 0 descriptor?? [ 77.025793][ T5814] usb 5-1: USB disconnect, device number 5 [ 77.043006][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.053987][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.068758][ T5900] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 77.088412][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.098799][ T5900] usb 2-1: config 0 descriptor?? [ 77.117053][ T117] usb 1-1: USB disconnect, device number 5 [ 77.156379][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 77.156392][ T29] audit: type=1400 audit(1737609556.174:403): avc: denied { setopt } for pid=6660 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.203330][ T29] audit: type=1400 audit(1737609556.224:404): avc: denied { write } for pid=6662 comm="syz.2.286" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.282594][ T29] audit: type=1400 audit(1737609556.304:405): avc: denied { setopt } for pid=6664 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.302574][ T29] audit: type=1400 audit(1737609556.304:406): avc: denied { read } for pid=6664 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.348693][ T29] audit: type=1400 audit(1737609556.364:407): avc: denied { write } for pid=6664 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.452367][ T5862] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 77.534191][ T5900] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 77.542609][ T5900] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 77.659371][ T5862] ft260 0003:0403:6030.0006: chip code: 5e81 abf2 [ 77.729115][ T5900] cp2112 0003:10C4:EA90.0007: Part Number: 0x6A Device Version: 0xAF [ 77.812324][ T29] audit: type=1400 audit(1737609556.834:408): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.855917][ T5862] ft260 0003:0403:6030.0006: failed to retrieve system status [ 77.868206][ T5862] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71 [ 77.890193][ T5862] usb 4-1: USB disconnect, device number 6 [ 77.899774][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.942181][ T5900] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 77.944957][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 77.959889][ T5900] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 77.990899][ T5900] usb 2-1: USB disconnect, device number 5 [ 78.059073][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 78.075255][ T46] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.088285][ T46] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.110465][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.119244][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 78.132003][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.143791][ T29] audit: type=1400 audit(1737609557.164:409): avc: denied { listen } for pid=6696 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.144565][ T46] usb 5-1: config 0 descriptor?? [ 78.162968][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.177441][ T29] audit: type=1400 audit(1737609557.194:410): avc: denied { read } for pid=6696 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.345276][ T6706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 78.361591][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 78.389593][ T6708] batadv0: entered promiscuous mode [ 78.395554][ T6708] team0: entered promiscuous mode [ 78.400876][ T6708] team_slave_0: entered promiscuous mode [ 78.406608][ T6708] team_slave_1: entered promiscuous mode [ 78.413601][ T6708] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 78.435958][ T6708] Cannot create hsr debugfs directory [ 78.464303][ T6708] hsr1: entered promiscuous mode [ 78.479158][ T6708] hsr1: entered allmulticast mode [ 78.484195][ T6708] batadv0: entered allmulticast mode [ 78.503081][ T29] audit: type=1400 audit(1737609557.524:411): avc: denied { write } for pid=6714 comm="syz.0.309" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.529239][ T6708] team0: entered allmulticast mode [ 78.534365][ T6708] team_slave_0: entered allmulticast mode [ 78.565251][ T6708] team_slave_1: entered allmulticast mode [ 78.600457][ T46] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 78.613701][ T46] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 78.622135][ T46] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 78.633716][ T46] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 78.645486][ T46] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 78.662746][ T46] magicmouse 0003:05AC:0265.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 78.738516][ T6727] openvswitch: netlink: Actions may not be safe on all matching packets [ 78.867295][ T6738] capability: warning: `syz.0.321' uses 32-bit capabilities (legacy support in use) [ 78.876147][ T46] usb 5-1: USB disconnect, device number 6 [ 79.249895][ T29] audit: type=1400 audit(1737609558.264:412): avc: denied { setopt } for pid=6754 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.373427][ T6764] 9p: Unknown access argument 18446744073709551615: -34 [ 79.550208][ T6775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.589122][ T5899] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 79.759463][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 79.769965][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.789637][ T5899] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 79.806682][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.826366][ T5899] usb 1-1: config 0 descriptor?? [ 79.837355][ T5899] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 79.889495][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 80.062148][ T46] usb 1-1: USB disconnect, device number 6 [ 80.082864][ T5900] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 80.091469][ T5900] usb 2-1: config 0 has no interface number 0 [ 80.097727][ T5900] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 80.111455][ T5900] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 80.126259][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.138840][ T5900] usb 2-1: Product: syz [ 80.147097][ T5900] usb 2-1: Manufacturer: syz [ 80.151982][ T5900] usb 2-1: SerialNumber: syz [ 80.158165][ T5900] usb 2-1: config 0 descriptor?? [ 80.167857][ T6786] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 80.181159][ T5900] qmi_wwan 2-1:0.197: probe with driver qmi_wwan failed with error -22 [ 80.302680][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 80.416400][ T5900] usb 2-1: USB disconnect, device number 6 [ 80.660043][ T6826] binder: 6825:6826 ioctl 541b 0 returned -22 [ 80.900808][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 81.208296][ T117] kernel read not supported for file /usbmon0 (pid: 117 comm: kworker/0:2) [ 81.348805][ T6863] capability: warning: `syz.0.377' uses deprecated v2 capabilities in a way that may be insecure [ 81.459160][ T5862] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 81.511890][ T6875] netlink: 'syz.0.383': attribute type 8 has an invalid length. [ 81.630491][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 81.651377][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.670245][ T5862] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 81.691132][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.707844][ T5862] usb 4-1: config 0 descriptor?? [ 81.732157][ T5862] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 81.959380][ T5862] usb 4-1: USB disconnect, device number 7 [ 82.499030][ T5900] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 82.509213][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 82.532422][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 82.532434][ T29] audit: type=1400 audit(1737609561.554:429): avc: denied { read } for pid=6917 comm="syz.2.402" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.611136][ T29] audit: type=1400 audit(1737609561.634:430): avc: denied { write } for pid=6917 comm="syz.2.402" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.669125][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 82.699058][ T5900] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 82.708149][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.729447][ T5900] usb 2-1: Product: syz [ 82.739288][ T5900] usb 2-1: Manufacturer: syz [ 82.743890][ T5900] usb 2-1: SerialNumber: syz [ 82.764748][ T5900] usb 2-1: config 0 descriptor?? [ 82.807136][ T29] audit: type=1400 audit(1737609561.824:431): avc: denied { write } for pid=6932 comm="syz.4.409" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.808646][ T6933] team0: Device gtp0 is of different type [ 82.838929][ T29] audit: type=1400 audit(1737609561.854:432): avc: denied { remove_name } for pid=6932 comm="syz.4.409" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.869436][ T29] audit: type=1400 audit(1737609561.854:433): avc: denied { unlink } for pid=6932 comm="syz.4.409" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.990165][ T5819] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 82.999295][ T5819] Bluetooth: hci1: Injecting HCI hardware error event [ 83.007580][ T54] Bluetooth: hci1: hardware error 0x00 [ 83.017428][ T5819] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 83.268024][ T29] audit: type=1400 audit(1737609562.284:434): avc: denied { create } for pid=6957 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.287616][ T29] audit: type=1400 audit(1737609562.294:435): avc: denied { read } for pid=6958 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.308198][ T29] audit: type=1400 audit(1737609562.304:436): avc: denied { write } for pid=6957 comm="syz.3.419" name="kcm" dev="proc" ino=4026533010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.330615][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.443633][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 83.532269][ T29] audit: type=1326 audit(1737609562.554:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35efd8cd29 code=0x7ffc0000 [ 83.576131][ T29] audit: type=1326 audit(1737609562.554:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35efd8cd29 code=0x7ffc0000 [ 83.599324][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.611586][ T6979] loop6: detected capacity change from 0 to 8 [ 83.618572][ C0] blk_print_req_error: 24 callbacks suppressed [ 83.618584][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.633936][ C0] buffer_io_error: 24 callbacks suppressed [ 83.633947][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.639624][ T5900] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 83.662818][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.671984][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.681044][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.685666][ T5900] usb 2-1: device reset changed ep0 maxpacket size! [ 83.690180][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.706945][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.716105][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.725253][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.734424][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.742412][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.751614][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.751729][ T5900] usb 2-1: USB disconnect, device number 7 [ 83.765976][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.775125][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.789110][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.798256][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.808984][ T6979] ldm_validate_partition_table(): Disk read failed. [ 83.815898][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.825097][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.833249][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.842389][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.860463][ T6979] Dev loop6: unable to read RDB block 0 [ 83.871163][ T6979] loop6: unable to read partition table [ 83.877019][ T6979] loop6: partition table beyond EOD, truncated [ 83.886829][ T6979] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 83.959227][ T5900] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 83.999742][ T6985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.130250][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 84.136678][ T5900] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.151568][ T5900] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 84.171887][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.184704][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.202906][ T5900] usb 2-1: Product: syz [ 84.207337][ T5900] usb 2-1: Manufacturer: syz [ 84.217856][ T5900] usb 2-1: SerialNumber: syz [ 84.363011][ T7012] IPVS: Error joining to the multicast group [ 84.383148][ T7013] syz.0.443: attempt to access beyond end of device [ 84.383148][ T7013] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 84.401176][ T7013] FAT-fs (loop1): unable to read boot sector [ 84.504078][ T5900] cdc_ncm 2-1:1.0: bind() failure [ 84.521750][ T5900] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 84.528535][ T5900] cdc_ncm 2-1:1.1: bind() failure [ 84.560558][ T5900] usb 2-1: USB disconnect, device number 8 [ 84.692749][ T7033] input: syz0 as /devices/virtual/input/input13 [ 84.827667][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.012283][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 85.025183][ T46] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 85.038986][ T46] usb 1-1: config 5 has no interface number 0 [ 85.045987][ T46] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 85.069798][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 85.088228][ T46] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 85.137823][ T46] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 85.170997][ T46] usb 1-1: config 5 interface 168 has no altsetting 0 [ 85.182767][ T46] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 85.197550][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.205806][ T46] usb 1-1: Product: syz [ 85.214872][ T46] usb 1-1: Manufacturer: syz [ 85.219534][ T46] usb 1-1: SerialNumber: syz [ 85.226923][ T7021] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.239628][ T7021] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.350161][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.358309][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.365442][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.475150][ C1] usb 1-1: NFC: Urb failure (status -71) [ 85.491419][ C1] usb 1-1: NFC: Urb failure (status -71) [ 85.505208][ T46] usb 1-1: NFC: Unable to get FW version [ 85.512470][ T46] pn533_usb 1-1:5.168: probe with driver pn533_usb failed with error -71 [ 85.528049][ T46] usb 1-1: USB disconnect, device number 7 [ 85.600540][ T7087] netlink: 76 bytes leftover after parsing attributes in process `syz.4.476'. [ 85.943381][ T7108] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 85.954869][ T7108] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 86.215265][ T7129] @: renamed from vlan0 (while UP) [ 86.805633][ T7170] netlink: 'syz.2.516': attribute type 9 has an invalid length. [ 86.889195][ T117] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 87.060412][ T117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.075817][ T117] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 87.102397][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 87.115142][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 19536, setting to 64 [ 87.128089][ T117] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.143062][ T117] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 87.168763][ T117] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 87.177224][ T5862] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 87.189232][ T117] usb 2-1: Manufacturer: syz [ 87.200109][ T117] usb 2-1: config 0 descriptor?? [ 87.205689][ T7163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.221157][ T117] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 87.329119][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 87.335728][ T5862] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 87.344492][ T5862] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 87.359954][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 87.379274][ T5862] usb 1-1: config 1 has no interface number 0 [ 87.385372][ T5862] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.419219][ T5862] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 87.438025][ T117] usb 2-1: USB disconnect, device number 9 [ 87.459008][ T5862] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 87.478190][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.510663][ T5862] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 87.717267][ T5862] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 87.820039][ T5875] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 87.904540][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 87.904552][ T29] audit: type=1400 audit(1737609566.924:474): avc: denied { ioctl } for pid=7213 comm="syz.3.536" path="socket:[13704]" dev="sockfs" ino=13704 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.935180][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.989152][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 88.001315][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.004947][ T7218] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.023768][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.038109][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.053884][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 88.067254][ T5875] usb 3-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 88.090225][ T29] audit: type=1400 audit(1737609567.114:475): avc: denied { read } for pid=7221 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.092072][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.126821][ T5875] usb 3-1: config 0 descriptor?? [ 88.146377][ T29] audit: type=1400 audit(1737609567.164:476): avc: denied { create } for pid=7223 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.167509][ T29] audit: type=1400 audit(1737609567.164:477): avc: denied { write } for pid=7223 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.219570][ T29] audit: type=1400 audit(1737609567.194:478): avc: denied { setopt } for pid=7221 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.251494][ T5862] usb 1-1: USB disconnect, device number 8 [ 88.258156][ T5862] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 88.275979][ T29] audit: type=1400 audit(1737609567.214:479): avc: denied { write } for pid=7221 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.547503][ T5875] wacom 0003:056A:0101.0009: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.2-1/input0 [ 88.580578][ T117] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.693501][ T7255] bond0: entered promiscuous mode [ 88.698890][ T7255] bond_slave_0: entered promiscuous mode [ 88.707244][ T7255] bond_slave_1: entered promiscuous mode [ 88.714217][ T7255] bond0: entered allmulticast mode [ 88.724420][ T7255] bond_slave_0: entered allmulticast mode [ 88.737297][ T7255] bond_slave_1: entered allmulticast mode [ 88.763706][ T117] usb 5-1: Using ep0 maxpacket: 16 [ 88.785106][ T117] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 88.799065][ T117] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 88.819391][ T117] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 88.828444][ T117] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.862631][ T117] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.873070][ T5900] usb 3-1: USB disconnect, device number 6 [ 88.888714][ T117] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.905136][ T117] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 88.931750][ T29] audit: type=1326 audit(1737609567.944:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35efd83ce7 code=0x7ffc0000 [ 88.945354][ T7261] delete_channel: no stack [ 88.959238][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.991911][ T117] usb 5-1: config 0 descriptor?? [ 89.023601][ T29] audit: type=1326 audit(1737609567.944:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f35efd28f29 code=0x7ffc0000 [ 89.073949][ T29] audit: type=1326 audit(1737609567.944:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35efd83ce7 code=0x7ffc0000 [ 89.152664][ T29] audit: type=1326 audit(1737609567.944:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.0.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f35efd28f29 code=0x7ffc0000 [ 89.411606][ T117] kye 0003:0458:0138.000A: unknown main item tag 0x0 [ 89.424068][ T117] kye 0003:0458:0138.000A: unknown main item tag 0x0 [ 89.459041][ T117] kye 0003:0458:0138.000A: unknown main item tag 0x0 [ 89.465750][ T117] kye 0003:0458:0138.000A: report_id 915 is invalid [ 89.496781][ T117] kye 0003:0458:0138.000A: item 0 4 1 8 parsing failed [ 89.509663][ T117] kye 0003:0458:0138.000A: parse failed [ 89.519154][ T117] kye 0003:0458:0138.000A: probe with driver kye failed with error -22 [ 89.661939][ T117] usb 5-1: USB disconnect, device number 7 [ 90.077853][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.085858][ T5900] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 90.262272][ T5900] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 90.278815][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.303653][ T5900] usb 3-1: config 0 has no interface number 0 [ 90.310453][ T5900] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 90.328832][ T5900] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.352587][ T5900] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 90.376224][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.388706][ T5900] usb 3-1: Product: syz [ 90.396423][ T5900] usb 3-1: Manufacturer: syz [ 90.405696][ T5900] usb 3-1: SerialNumber: syz [ 90.416127][ T5900] usb 3-1: config 0 descriptor?? [ 90.627825][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 91.079815][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 91.108448][ T5906] usb 3-1: USB disconnect, device number 7 [ 91.666286][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 91.813226][ T7413] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 91.819894][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.854429][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 91.877089][ T7415] vhci_hcd: connection closed [ 91.878854][ T6140] vhci_hcd: stop threads [ 91.908744][ T6140] vhci_hcd: release socket [ 91.918530][ T6140] vhci_hcd: disconnect device [ 91.976100][ T7424] vlan2: entered promiscuous mode [ 91.981513][ T7424] vlan2: entered allmulticast mode [ 92.317620][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.800714][ T7465] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 93.032874][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 93.032889][ T29] audit: type=1400 audit(1737609572.054:513): avc: denied { execute } for pid=7483 comm="syz.4.652" path="/dev/dsp" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 93.149494][ T5900] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 93.159390][ T5862] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 93.302486][ T29] audit: type=1400 audit(1737609572.324:514): avc: denied { shutdown } for pid=7493 comm="syz.4.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.314481][ T5862] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 93.328984][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 93.340155][ T5900] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.345308][ T5862] usb 2-1: config 0 has no interface number 0 [ 93.357080][ T5862] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.373605][ T5862] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.379151][ T5900] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 93.383486][ T5862] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 93.403811][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.414504][ T5862] usb 2-1: config 0 descriptor?? [ 93.414689][ T5900] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 93.454121][ T29] audit: type=1400 audit(1737609572.454:515): avc: denied { read } for pid=7498 comm="syz.0.659" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.503315][ T5900] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.510749][ T5900] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 93.520003][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.533087][ T5900] usb 3-1: config 0 descriptor?? [ 93.647240][ T7508] lo: entered promiscuous mode [ 93.680424][ T7508] tunl0: entered promiscuous mode [ 93.692553][ T7508] gre0: entered promiscuous mode [ 93.723206][ T7508] gretap0: entered promiscuous mode [ 93.754656][ T7508] erspan0: entered promiscuous mode [ 93.777068][ T7508] ip_vti0: entered promiscuous mode [ 93.798496][ T7508] ip6_vti0: entered promiscuous mode [ 93.821251][ T7508] sit0: entered promiscuous mode [ 93.838779][ T5862] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 93.847400][ T7508] ip6tnl0: entered promiscuous mode [ 93.851395][ T5862] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x2 [ 93.854401][ T7508] ip6gre0: entered promiscuous mode [ 93.869886][ T7508] syz_tun: entered promiscuous mode [ 93.875377][ T5862] hid-retrode 0003:0403:97C1.000B: item fetching failed at offset 2/5 [ 93.883839][ T7508] ip6gretap0: entered promiscuous mode [ 93.893194][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.896725][ T5862] hid-retrode 0003:0403:97C1.000B: probe with driver hid-retrode failed with error -22 [ 93.912727][ T7508] bridge0: entered promiscuous mode [ 93.932896][ T7508] vcan0: entered promiscuous mode [ 93.944686][ T5900] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 93.963288][ T7508] bond0: entered promiscuous mode [ 93.970609][ T5900] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 93.982887][ T7508] bond_slave_1: entered promiscuous mode [ 93.992647][ T7508] team0: entered promiscuous mode [ 93.993172][ T5900] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 93.997666][ T7508] team_slave_0: entered promiscuous mode [ 93.997786][ T7508] team_slave_1: entered promiscuous mode [ 94.017670][ T5900] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 94.041863][ T5900] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 94.056624][ T5903] usb 2-1: USB disconnect, device number 10 [ 94.068149][ T7508] dummy0: entered promiscuous mode [ 94.079890][ T5900] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 94.103931][ T5900] ================================================================== [ 94.111994][ T5900] BUG: KASAN: stack-out-of-bounds in usb_check_int_endpoints+0x247/0x270 [ 94.120411][ T5900] Read of size 1 at addr ffffc90003e16bb1 by task kworker/1:6/5900 [ 94.121532][ T7508] nlmon0: entered promiscuous mode [ 94.128275][ T5900] [ 94.128282][ T5900] CPU: 1 UID: 0 PID: 5900 Comm: kworker/1:6 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 94.128301][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.128310][ T5900] Workqueue: usb_hub_wq hub_event [ 94.128329][ T5900] Call Trace: [ 94.128334][ T5900] [ 94.128344][ T5900] dump_stack_lvl+0x116/0x1f0 [ 94.128362][ T5900] print_report+0xc3/0x620 [ 94.128383][ T5900] ? __virt_addr_valid+0x5e/0x590 [ 94.128404][ T5900] kasan_report+0xd9/0x110 [ 94.128423][ T5900] ? usb_check_int_endpoints+0x247/0x270 [ 94.128443][ T5900] ? usb_check_int_endpoints+0x247/0x270 [ 94.128463][ T5900] usb_check_int_endpoints+0x247/0x270 [ 94.128483][ T5900] thrustmaster_probe+0x499/0xe10 [ 94.128506][ T5900] ? __pfx_thrustmaster_probe+0x10/0x10 [ 94.128526][ T5900] ? hid_match_id+0x202/0x2e0 [ 94.128549][ T5900] ? __pfx_thrustmaster_probe+0x10/0x10 [ 94.128568][ T5900] hid_device_probe+0x349/0x700 [ 94.128590][ T5900] ? __pfx_hid_device_probe+0x10/0x10 [ 94.128611][ T5900] really_probe+0x23e/0xa90 [ 94.128630][ T5900] __driver_probe_device+0x1de/0x440 [ 94.128647][ T5900] driver_probe_device+0x4c/0x1b0 [ 94.128665][ T5900] __device_attach_driver+0x1df/0x310 [ 94.128682][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 94.128699][ T5900] bus_for_each_drv+0x157/0x1e0 [ 94.128712][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 94.128726][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.128742][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 94.128757][ T5900] __device_attach+0x1e8/0x4b0 [ 94.128774][ T5900] ? __pfx___device_attach+0x10/0x10 [ 94.128791][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 94.128813][ T5900] bus_probe_device+0x17f/0x1c0 [ 94.128829][ T5900] device_add+0x114b/0x1a70 [ 94.128849][ T5900] ? __pfx_device_add+0x10/0x10 [ 94.128869][ T5900] ? debugfs_create_file_full+0x75/0xa0 [ 94.128889][ T5900] hid_add_device+0x374/0xa60 [ 94.128908][ T5900] ? lockdep_init_map_type+0x16d/0x7d0 [ 94.128927][ T5900] ? __pfx_hid_add_device+0x10/0x10 [ 94.128946][ T5900] ? lockdep_init_map_type+0x16d/0x7d0 [ 94.128963][ T5900] ? __raw_spin_lock_init+0x3a/0x110 [ 94.128984][ T5900] usbhid_probe+0xd32/0x1400 [ 94.129003][ T5900] usb_probe_interface+0x300/0x9c0 [ 94.129023][ T5900] ? __pfx_usb_probe_interface+0x10/0x10 [ 94.129042][ T5900] really_probe+0x23e/0xa90 [ 94.129060][ T5900] __driver_probe_device+0x1de/0x440 [ 94.129078][ T5900] driver_probe_device+0x4c/0x1b0 [ 94.129095][ T5900] __device_attach_driver+0x1df/0x310 [ 94.129113][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 94.129130][ T5900] bus_for_each_drv+0x157/0x1e0 [ 94.129144][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 94.129158][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.129173][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 94.129189][ T5900] __device_attach+0x1e8/0x4b0 [ 94.129206][ T5900] ? __pfx___device_attach+0x10/0x10 [ 94.129223][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 94.129244][ T5900] bus_probe_device+0x17f/0x1c0 [ 94.129260][ T5900] device_add+0x114b/0x1a70 [ 94.129279][ T5900] ? __pfx_device_add+0x10/0x10 [ 94.129299][ T5900] ? wakeup_sysfs_add+0x51/0x60 [ 94.129319][ T5900] usb_set_configuration+0x10cb/0x1c50 [ 94.129347][ T5900] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 94.129362][ T5900] usb_generic_driver_probe+0xb1/0x110 [ 94.129377][ T5900] usb_probe_device+0xec/0x3e0 [ 94.129394][ T5900] ? __pfx_usb_probe_device+0x10/0x10 [ 94.129411][ T5900] really_probe+0x23e/0xa90 [ 94.129429][ T5900] __driver_probe_device+0x1de/0x440 [ 94.129445][ T5900] ? usb_driver_applicable+0x1c7/0x220 [ 94.129465][ T5900] driver_probe_device+0x4c/0x1b0 [ 94.129483][ T5900] __device_attach_driver+0x1df/0x310 [ 94.129501][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 94.129518][ T5900] bus_for_each_drv+0x157/0x1e0 [ 94.129532][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 94.129546][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.129561][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 94.129577][ T5900] __device_attach+0x1e8/0x4b0 [ 94.129595][ T5900] ? __pfx___device_attach+0x10/0x10 [ 94.129612][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 94.129634][ T5900] bus_probe_device+0x17f/0x1c0 [ 94.129650][ T5900] device_add+0x114b/0x1a70 [ 94.129671][ T5900] ? __pfx_device_add+0x10/0x10 [ 94.129690][ T5900] ? usb_detect_static_quirks+0x335/0x3e0 [ 94.129708][ T5900] usb_new_device+0xd09/0x1a20 [ 94.129727][ T5900] ? __pfx_usb_new_device+0x10/0x10 [ 94.129747][ T5900] hub_event+0x2d9a/0x4e10 [ 94.129774][ T5900] ? __pfx_hub_event+0x10/0x10 [ 94.129791][ T5900] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 94.129809][ T5900] ? rcu_is_watching+0x12/0xc0 [ 94.129822][ T5900] ? trace_lock_acquire+0x14e/0x1f0 [ 94.129837][ T5900] ? process_one_work+0x921/0x1ba0 [ 94.129854][ T5900] ? lock_acquire+0x2f/0xb0 [ 94.129870][ T5900] ? process_one_work+0x921/0x1ba0 [ 94.129887][ T5900] process_one_work+0x9c5/0x1ba0 [ 94.129906][ T5900] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 94.129923][ T5900] ? __pfx_process_one_work+0x10/0x10 [ 94.129938][ T5900] ? rcu_is_watching+0x12/0xc0 [ 94.129953][ T5900] ? assign_work+0x1a0/0x250 [ 94.129968][ T5900] worker_thread+0x6c8/0xf00 [ 94.129987][ T5900] ? __pfx_worker_thread+0x10/0x10 [ 94.130004][ T5900] kthread+0x3af/0x750 [ 94.130020][ T5900] ? __pfx_kthread+0x10/0x10 [ 94.130034][ T5900] ? lock_acquire+0x2f/0xb0 [ 94.130052][ T5900] ? __pfx_kthread+0x10/0x10 [ 94.130066][ T5900] ret_from_fork+0x45/0x80 [ 94.130081][ T5900] ? __pfx_kthread+0x10/0x10 [ 94.130096][ T5900] ret_from_fork_asm+0x1a/0x30 [ 94.130120][ T5900] [ 94.130125][ T5900] [ 94.156692][ T7508] caif0: entered promiscuous mode [ 94.161096][ T5900] The buggy address belongs to stack of task kworker/1:6/5900 [ 94.161107][ T5900] and is located at offset 65 in frame: [ 94.161114][ T5900] thrustmaster_probe+0x0/0xe10 [ 94.161139][ T5900] [ 94.161143][ T5900] This frame has 2 objects: [ 94.161151][ T5900] [48, 52) 'trans' [ 94.161159][ T5900] [64, 65) 'ep_addr' [ 94.161168][ T5900] [ 94.161174][ T5900] The buggy address belongs to the virtual mapping at [ 94.161174][ T5900] [ffffc90003e10000, ffffc90003e19000) created by: [ 94.161174][ T5900] kernel_clone+0xfd/0x960 [ 94.165154][ T7508] batadv0: entered promiscuous mode [ 94.167347][ T5900] [ 94.167353][ T5900] The buggy address belongs to the physical page: [ 94.167358][ T5900] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888032450570 pfn:0x32450 [ 94.167374][ T5900] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 94.167393][ T5900] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 94.185496][ T7508] vxcan0: entered promiscuous mode [ 94.185800][ T5900] raw: ffff888032450570 0000000000000000 00000001ffffffff 0000000000000000 [ 94.192002][ T7508] vxcan1: entered promiscuous mode [ 94.196992][ T5900] page dumped because: kasan: bad access detected [ 94.197001][ T5900] page_owner tracks the page as allocated [ 94.197006][ T5900] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 58418528547, free_ts 58397167322 [ 94.207119][ T7508] veth0: entered promiscuous mode [ 94.207438][ T5900] post_alloc_hook+0x2d1/0x350 [ 94.827886][ T5900] get_page_from_freelist+0xfce/0x2f80 [ 94.833333][ T5900] __alloc_pages_noprof+0x221/0x2470 [ 94.838601][ T5900] __vmalloc_node_range_noprof+0x640/0x1530 [ 94.844475][ T5900] copy_process+0x2f07/0x8d10 [ 94.849135][ T5900] kernel_clone+0xfd/0x960 [ 94.853532][ T5900] kernel_thread+0xc0/0x100 [ 94.858016][ T5900] kthreadd+0x4ef/0x7d0 [ 94.862151][ T5900] ret_from_fork+0x45/0x80 [ 94.866547][ T5900] ret_from_fork_asm+0x1a/0x30 [ 94.871296][ T5900] page last free pid 5827 tgid 5827 stack trace: [ 94.877602][ T5900] free_unref_page+0x661/0x1080 [ 94.882435][ T5900] qlist_free_all+0x4e/0x120 [ 94.887006][ T5900] kasan_quarantine_reduce+0x195/0x1e0 [ 94.892446][ T5900] __kasan_slab_alloc+0x69/0x90 [ 94.897280][ T5900] kmem_cache_alloc_noprof+0x226/0x3d0 [ 94.902720][ T5900] ptlock_alloc+0x1f/0x70 [ 94.907033][ T5900] pte_alloc_one+0x74/0x390 [ 94.911518][ T5900] __pte_alloc+0x6e/0x3b0 [ 94.915827][ T5900] copy_page_range+0x3851/0x57b0 [ 94.920746][ T5900] copy_process+0x7dac/0x8d10 [ 94.925407][ T5900] kernel_clone+0xfd/0x960 [ 94.929804][ T5900] __do_sys_clone+0xba/0x100 [ 94.934387][ T5900] do_syscall_64+0xcd/0x250 [ 94.938876][ T5900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.944755][ T5900] [ 94.947058][ T5900] Memory state around the buggy address: [ 94.952663][ T5900] ffffc90003e16a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.960702][ T5900] ffffc90003e16b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 [ 94.968739][ T5900] >ffffc90003e16b80: f1 f1 f1 f1 04 f2 01 f3 f3 f3 00 00 00 00 00 00 [ 94.976773][ T5900] ^ [ 94.982378][ T5900] ffffc90003e16c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.990413][ T5900] ffffc90003e16c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.998447][ T5900] ================================================================== [ 95.018522][ T7508] veth1: entered promiscuous mode [ 95.076647][ T5900] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.083851][ T5900] CPU: 1 UID: 0 PID: 5900 Comm: kworker/1:6 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 95.094251][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 95.104287][ T5900] Workqueue: usb_hub_wq hub_event [ 95.109308][ T5900] Call Trace: [ 95.112575][ T5900] [ 95.115480][ T5900] dump_stack_lvl+0x3d/0x1f0 [ 95.120056][ T5900] panic+0x71d/0x800 [ 95.123937][ T5900] ? __pfx_panic+0x10/0x10 [ 95.128326][ T5900] ? irqentry_exit+0x3b/0x90 [ 95.132895][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.138069][ T5900] check_panic_on_warn+0xab/0xb0 [ 95.142980][ T5900] end_report+0x117/0x180 [ 95.147283][ T5900] kasan_report+0xe9/0x110 [ 95.151674][ T5900] ? usb_check_int_endpoints+0x247/0x270 [ 95.157279][ T5900] ? usb_check_int_endpoints+0x247/0x270 [ 95.162887][ T5900] usb_check_int_endpoints+0x247/0x270 [ 95.168320][ T5900] thrustmaster_probe+0x499/0xe10 [ 95.173323][ T5900] ? __pfx_thrustmaster_probe+0x10/0x10 [ 95.178856][ T5900] ? hid_match_id+0x202/0x2e0 [ 95.183523][ T5900] ? __pfx_thrustmaster_probe+0x10/0x10 [ 95.189055][ T5900] hid_device_probe+0x349/0x700 [ 95.193902][ T5900] ? __pfx_hid_device_probe+0x10/0x10 [ 95.199258][ T5900] really_probe+0x23e/0xa90 [ 95.203744][ T5900] __driver_probe_device+0x1de/0x440 [ 95.209010][ T5900] driver_probe_device+0x4c/0x1b0 [ 95.214016][ T5900] __device_attach_driver+0x1df/0x310 [ 95.219370][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 95.225246][ T5900] bus_for_each_drv+0x157/0x1e0 [ 95.230076][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.235426][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.240606][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.246390][ T5900] __device_attach+0x1e8/0x4b0 [ 95.251134][ T5900] ? __pfx___device_attach+0x10/0x10 [ 95.256401][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 95.261589][ T5900] bus_probe_device+0x17f/0x1c0 [ 95.266422][ T5900] device_add+0x114b/0x1a70 [ 95.270910][ T5900] ? __pfx_device_add+0x10/0x10 [ 95.275746][ T5900] ? debugfs_create_file_full+0x75/0xa0 [ 95.281277][ T5900] hid_add_device+0x374/0xa60 [ 95.285937][ T5900] ? lockdep_init_map_type+0x16d/0x7d0 [ 95.291379][ T5900] ? __pfx_hid_add_device+0x10/0x10 [ 95.296560][ T5900] ? lockdep_init_map_type+0x16d/0x7d0 [ 95.302001][ T5900] ? __raw_spin_lock_init+0x3a/0x110 [ 95.307270][ T5900] usbhid_probe+0xd32/0x1400 [ 95.311843][ T5900] usb_probe_interface+0x300/0x9c0 [ 95.316941][ T5900] ? __pfx_usb_probe_interface+0x10/0x10 [ 95.322558][ T5900] really_probe+0x23e/0xa90 [ 95.327045][ T5900] __driver_probe_device+0x1de/0x440 [ 95.332312][ T5900] driver_probe_device+0x4c/0x1b0 [ 95.337317][ T5900] __device_attach_driver+0x1df/0x310 [ 95.342675][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 95.348547][ T5900] bus_for_each_drv+0x157/0x1e0 [ 95.353379][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.358732][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.363911][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.369697][ T5900] __device_attach+0x1e8/0x4b0 [ 95.374443][ T5900] ? __pfx___device_attach+0x10/0x10 [ 95.379709][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 95.384892][ T5900] bus_probe_device+0x17f/0x1c0 [ 95.389723][ T5900] device_add+0x114b/0x1a70 [ 95.394214][ T5900] ? __pfx_device_add+0x10/0x10 [ 95.399051][ T5900] ? wakeup_sysfs_add+0x51/0x60 [ 95.403896][ T5900] usb_set_configuration+0x10cb/0x1c50 [ 95.409343][ T5900] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 95.415390][ T5900] usb_generic_driver_probe+0xb1/0x110 [ 95.420828][ T5900] usb_probe_device+0xec/0x3e0 [ 95.425573][ T5900] ? __pfx_usb_probe_device+0x10/0x10 [ 95.430932][ T5900] really_probe+0x23e/0xa90 [ 95.435416][ T5900] __driver_probe_device+0x1de/0x440 [ 95.440684][ T5900] ? usb_driver_applicable+0x1c7/0x220 [ 95.446126][ T5900] driver_probe_device+0x4c/0x1b0 [ 95.451132][ T5900] __device_attach_driver+0x1df/0x310 [ 95.456485][ T5900] ? __pfx___device_attach_driver+0x10/0x10 [ 95.462360][ T5900] bus_for_each_drv+0x157/0x1e0 [ 95.467188][ T5900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.472540][ T5900] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.477720][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.483505][ T5900] __device_attach+0x1e8/0x4b0 [ 95.488251][ T5900] ? __pfx___device_attach+0x10/0x10 [ 95.493520][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 95.498707][ T5900] bus_probe_device+0x17f/0x1c0 [ 95.503538][ T5900] device_add+0x114b/0x1a70 [ 95.508025][ T5900] ? __pfx_device_add+0x10/0x10 [ 95.512860][ T5900] ? usb_detect_static_quirks+0x335/0x3e0 [ 95.518560][ T5900] usb_new_device+0xd09/0x1a20 [ 95.523313][ T5900] ? __pfx_usb_new_device+0x10/0x10 [ 95.528497][ T5900] hub_event+0x2d9a/0x4e10 [ 95.532906][ T5900] ? __pfx_hub_event+0x10/0x10 [ 95.537652][ T5900] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 95.543269][ T5900] ? rcu_is_watching+0x12/0xc0 [ 95.548009][ T5900] ? trace_lock_acquire+0x14e/0x1f0 [ 95.553188][ T5900] ? process_one_work+0x921/0x1ba0 [ 95.558281][ T5900] ? lock_acquire+0x2f/0xb0 [ 95.562766][ T5900] ? process_one_work+0x921/0x1ba0 [ 95.567860][ T5900] process_one_work+0x9c5/0x1ba0 [ 95.572781][ T5900] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 95.579263][ T5900] ? __pfx_process_one_work+0x10/0x10 [ 95.584615][ T5900] ? rcu_is_watching+0x12/0xc0 [ 95.589363][ T5900] ? assign_work+0x1a0/0x250 [ 95.593933][ T5900] worker_thread+0x6c8/0xf00 [ 95.598507][ T5900] ? __pfx_worker_thread+0x10/0x10 [ 95.603602][ T5900] kthread+0x3af/0x750 [ 95.607652][ T5900] ? __pfx_kthread+0x10/0x10 [ 95.612220][ T5900] ? lock_acquire+0x2f/0xb0 [ 95.616707][ T5900] ? __pfx_kthread+0x10/0x10 [ 95.621275][ T5900] ret_from_fork+0x45/0x80 [ 95.625673][ T5900] ? __pfx_kthread+0x10/0x10 [ 95.630244][ T5900] ret_from_fork_asm+0x1a/0x30 [ 95.635001][ T5900] [ 95.638191][ T5900] Kernel Offset: disabled [ 95.642490][ T5900] Rebooting in 86400 seconds..