last executing test programs: 21.359276253s ago: executing program 1 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 21.048335258s ago: executing program 1 (id=142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r2 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r2, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x52e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) 6.154145579s ago: executing program 2 (id=238): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) r1 = io_uring_setup(0x3e79, &(0x7f0000000000)) poll(0x0, 0x0, 0x7ff) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) dup2(r0, r1) 3.475727311s ago: executing program 2 (id=254): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000002b80)=ANY=[@ANYBLOB="1800000000b7080000000000007b8af8ff8af0ff00000000bfe100000000000007010400f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300"/81, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) 3.238119664s ago: executing program 2 (id=256): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.405570046s ago: executing program 3 (id=276): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = dup(r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000080)={&(0x7f0000000300)={{@local}, {@host, 0xfffffffd}, 0x400, "a9e982103df53ce6b531b9df69f4a83ca7c6c257ffcec48fdd079a484b999da8d403d2d5ae19962553412682691cb347a8ca3723330043d55bab204ad8910cdf928e51f78c9f8c491e01c0d8e9144bb316d74615369a7a2ddabf419d3e2d65d38103fad0397dadd36dbe6316275a011b5f2870f38d732bfae62c9fdb0041aed9aefade394a2894e979f2fb2cd1316f801727ce4a8cfceb7bb8a9402f66c37d8206f69da312b8c1c5e8e99e2a0b16ba5295795122357d9bb1657833b8ae83ac9256afc32056ee35dba7b44623dfa55250ae9fa1f9a950b930b98a6361f11f0fbd38339dde08ba0f056107fd2dc5bfaa8af65fa3d207f1db778b17d00e0988be71bb3f9e9364b865ea45276dc6c18f32b285f198161939e68f211d940d7f5e225c5e15945f1fd125859f94b08a3e777789fb743af30d11c3c68fae32f3aaf941d7e3b0111f19e1006b1730006b876f66be174f674cfffac793cb0bf7ba79b82cf4be085a4b8d8bd131d54efd9deba758fa848320296b5268c9885bf752a7a5dc6f080e322acf3a9ee33e1895b55a171d8114f15117f84cd13f6069141e9e31332ebd5189fff0a38dd650d179ba03f4754a1fde5f15f7267db4b2dc9a5cf43b6bc13133ec7ee6a6722ff39479a10d2336cb54074b1e00264b3a5f379015bdda214080959d2d1f3d376be2e3a049c86c7235cf1a0440b0c7758d2c08e2a2f00cd408b7fdfb789d77628631f98c4b0ecc1f63b60de931f419e17833d3846aaafa8b59368b6e993a6999f5ea6f75b09e394e2fb1f36c6a7669184f33a93ebda47aa5cfa402e76badd8996a760fb0713fefe693956336604d48dd28c2ff08f9433f390fa7995fa4423be17dc484ea61af21f5d3ba81605a1a511aae387097483689502cfd5658cf430277bc0baedd616f5aed85394031652b120ff98f5f626d4667f7b00f65e8ddb68496ef402041fe33e9e44a050366c0996bd06795926fb7e769c8f64d19ae9892a5faea7216f2c2b6f556cae9a12679f111a1585b936f7ae3bcfde5c633409646950fc42d5b6361462d5a39674fdf2a290ab8ef142312060d46ef792b6dbe17f9728d5e77ca33eeb9ab5e6982091f31f53829c8ff64b13bcfbb5e76137a2e402029f5882c79f66310fd4a3af9d88518e9f39a53804ed066d0adf687634fd27525866f7a5730d6047d4e049b2f48d5ef5d88502482471eb9fafd60a2d234f69b19b232235030c5ca8975f2be003fb079dd28cb029a599169bfd17e53e94fe0802b3fd6ba43e8fad6c0ae124ca1384a66e007c9066b3da2875ab032d1354a604b472b7e27298fcbeadcad250eff76b1e7d77e1861fb38dbbbb75fdea353604ff34c6b9ca6b692305b5e3f634c7a6d431aeafb6f82456a69996793645fd91cccf5b38ff5e070f049c992003e11d6174a38e217d56f2e427901927a5c17"}, 0x418}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000180)) 1.334336626s ago: executing program 1 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303, 0x36}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) 1.268923716s ago: executing program 3 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x168, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5b, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0xd6, 0xf, [@random={0x1, 0xd0, "b9e5539072016263b860b62760ce8121f099c99af28a9374232a08c9aa9d51cb2ddb6a6c9e9752086616674fcea9f5f1891363b7857547d31a5d04c02af72ebb0bff99a076c069e936881bed27fb15bfd00d84048560dfe82e285700cda9d527165d5abab2faabbd068fab2376e98e88833b538cc788f96e951678a04f7404667c360b85aacd7847044a78e53110ff891a35967afda3ebdc55a1ed7d95578e90e01bbd13b1e77b31b050fdede943134d5caa4bce67a1fee34082060824766ce2d9adbee78f69b6178580d37248771a7f"}]}]]}, 0x168}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.169997594s ago: executing program 0 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x28000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 1.155392483s ago: executing program 4 (id=279): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) 1.084339855s ago: executing program 0 (id=280): sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='p'], 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x24000004) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000540)) 917.974808ms ago: executing program 4 (id=281): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20}, 0xe) sendto$inet6(r0, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8000, 0x4) shutdown(r0, 0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) 917.253276ms ago: executing program 3 (id=282): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r1, &(0x7f0000000b40)=[{{&(0x7f0000000ac0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close(r1) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 868.583856ms ago: executing program 0 (id=283): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000640)=@udp}, 0x20) syz_emit_vhci(&(0x7f00000027c0)=ANY=[@ANYBLOB="040f03ef0011044159"], 0x7) prctl$PR_SET_PDEATHSIG(0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4008941) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 773.588344ms ago: executing program 1 (id=284): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 710.101081ms ago: executing program 4 (id=285): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) 676.956797ms ago: executing program 3 (id=286): creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/58, 0x3a, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 653.928962ms ago: executing program 0 (id=287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x5, 0x12, 0x1, @local, 0x0, "d699449c816ad625"}]}}}}}}}}, 0x0) 600.393682ms ago: executing program 4 (id=288): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000000), &(0x7f0000000280)=0x4) 598.122244ms ago: executing program 2 (id=289): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 458.366305ms ago: executing program 1 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f0000000200), 0xd) 416.113238ms ago: executing program 0 (id=291): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCGNPMODE(r0, 0x8010743f, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) 364.391073ms ago: executing program 4 (id=292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 358.969527ms ago: executing program 3 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1001020, 0x0) 209.882408ms ago: executing program 2 (id=294): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 187.961319ms ago: executing program 1 (id=295): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffe, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 125.668993ms ago: executing program 4 (id=296): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 74.134796ms ago: executing program 0 (id=297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000400)=[@dead_binder_done={0x400c6313}], 0x0, 0x0, 0x0}) 29.740228ms ago: executing program 3 (id=298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002800)}, {&(0x7f00000028c0)='\v', 0x1}, {&(0x7f00000029c0)='A', 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0xfffffffffffffd38, &(0x7f00000013c0)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000002c0)='w', 0x1}, {&(0x7f0000000300)="ae4b0200d0b799e039fde8ffffffffa011cfb8884d00"}, {&(0x7f0000000800)="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"/383, 0x122}], 0x4}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000003200)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="4034b7fdbaf74f9942ff59d877e996936cfaa75bcc2e4838df5ba9bc25bcc4e796112e049c0ca61877346f11d398d2f60659478da2fdc23f65378009361f83503355073f99952e151adb8b3ec24ce081eb8370cadeea43f53533c1b097aabcc02f8fbe3e3d5afd08edc623d1b3071aab95ba49674aabdb8fb2cf6724155d5904a174a90ce57e03252089340001acf8e44aadd6faa24da212ba0b6655cf7f67b9a7e27c385a22dc8333a3dfc8f7d652c09cf074fc0ece7d04b49c39c4c85cd64b73383bef468a5b10fd17cb998470655ff94fec6b5ffe48b957a4ccc7f5738f31ba3a2a151427644b2d458e108e85d2784e8c4fa457251d68fa1535fdd85b9e", 0xff}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000500)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @private}}}], 0x72}}], 0x5, 0xf000080) 0s ago: executing program 2 (id=299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=@base={0x6, 0x4, 0x5, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 57.024048][ T29] audit: type=1400 audit(1727708531.785:88): avc: denied { mounton } for pid=5208 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.028964][ T5208] cgroup: Unknown subsys name 'net' [ 57.046825][ T29] audit: type=1400 audit(1727708531.785:89): avc: denied { mount } for pid=5208 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.074244][ T29] audit: type=1400 audit(1727708531.815:90): avc: denied { unmount } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.257138][ T5208] cgroup: Unknown subsys name 'cpuset' [ 57.265300][ T5208] cgroup: Unknown subsys name 'rlimit' [ 57.395755][ T29] audit: type=1400 audit(1727708532.155:91): avc: denied { setattr } for pid=5208 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.419444][ T29] audit: type=1400 audit(1727708532.155:92): avc: denied { create } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.450962][ T29] audit: type=1400 audit(1727708532.155:93): avc: denied { write } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.471508][ T29] audit: type=1400 audit(1727708532.155:94): avc: denied { read } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.491942][ T29] audit: type=1400 audit(1727708532.175:95): avc: denied { mounton } for pid=5208 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.516822][ T29] audit: type=1400 audit(1727708532.175:96): avc: denied { mount } for pid=5208 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.540120][ T29] audit: type=1400 audit(1727708532.185:97): avc: denied { read } for pid=4890 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.548423][ T5211] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.686456][ T5208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.329715][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 62.329735][ T29] audit: type=1400 audit(1727708537.085:103): avc: denied { create } for pid=5218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.368635][ T29] audit: type=1400 audit(1727708537.085:104): avc: denied { read write } for pid=5218 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.396186][ T29] audit: type=1400 audit(1727708537.085:105): avc: denied { open } for pid=5218 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.421152][ T29] audit: type=1400 audit(1727708537.115:106): avc: denied { ioctl } for pid=5221 comm="syz-executor" path="socket:[4412]" dev="sockfs" ino=4412 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.489162][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.497611][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.505930][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.521255][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.527877][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.528684][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.536717][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.545171][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.549914][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.564062][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.573435][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.580828][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.587619][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.588497][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.595906][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.603698][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.615808][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.623188][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.623208][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.631630][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.641680][ T4614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.644674][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.664362][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.664575][ T4614] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.671841][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.679263][ T4614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.686189][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.694676][ T29] audit: type=1400 audit(1727708537.405:107): avc: denied { read } for pid=5221 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.720662][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.731397][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.749179][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.785291][ T29] audit: type=1400 audit(1727708537.415:108): avc: denied { open } for pid=5221 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.811079][ T29] audit: type=1400 audit(1727708537.415:109): avc: denied { mounton } for pid=5221 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.062778][ T29] audit: type=1400 audit(1727708537.815:110): avc: denied { module_request } for pid=5218 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.166789][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 63.222569][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 63.258979][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 63.269242][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 63.400163][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 63.422389][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.429743][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.438832][ T5219] bridge_slave_0: entered allmulticast mode [ 63.445597][ T5219] bridge_slave_0: entered promiscuous mode [ 63.490993][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.499130][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.506903][ T5219] bridge_slave_1: entered allmulticast mode [ 63.513451][ T5219] bridge_slave_1: entered promiscuous mode [ 63.530236][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.537465][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.544692][ T5221] bridge_slave_0: entered allmulticast mode [ 63.551254][ T5221] bridge_slave_0: entered promiscuous mode [ 63.571979][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.579294][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.586510][ T5218] bridge_slave_0: entered allmulticast mode [ 63.593088][ T5218] bridge_slave_0: entered promiscuous mode [ 63.600020][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.607553][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.615226][ T5220] bridge_slave_0: entered allmulticast mode [ 63.621777][ T5220] bridge_slave_0: entered promiscuous mode [ 63.636044][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.643184][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.650407][ T5221] bridge_slave_1: entered allmulticast mode [ 63.657020][ T5221] bridge_slave_1: entered promiscuous mode [ 63.671768][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.679199][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.686575][ T5218] bridge_slave_1: entered allmulticast mode [ 63.693127][ T5218] bridge_slave_1: entered promiscuous mode [ 63.709105][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.716390][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.723548][ T5220] bridge_slave_1: entered allmulticast mode [ 63.730933][ T5220] bridge_slave_1: entered promiscuous mode [ 63.747938][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.788934][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.809341][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.824565][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.865553][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.899565][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.910588][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.924297][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.937068][ T5219] team0: Port device team_slave_0 added [ 63.986462][ T5219] team0: Port device team_slave_1 added [ 63.994979][ T5221] team0: Port device team_slave_0 added [ 64.001055][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.008705][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.015941][ T5222] bridge_slave_0: entered allmulticast mode [ 64.022447][ T5222] bridge_slave_0: entered promiscuous mode [ 64.039054][ T5220] team0: Port device team_slave_0 added [ 64.047586][ T5220] team0: Port device team_slave_1 added [ 64.068631][ T5221] team0: Port device team_slave_1 added [ 64.081437][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.088836][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.096235][ T5222] bridge_slave_1: entered allmulticast mode [ 64.102846][ T5222] bridge_slave_1: entered promiscuous mode [ 64.112012][ T5218] team0: Port device team_slave_0 added [ 64.145628][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.152595][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.179185][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.209811][ T5218] team0: Port device team_slave_1 added [ 64.218654][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.226021][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.252235][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.264572][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.271548][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.298328][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.320259][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.327528][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.353524][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.388580][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.398324][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.425029][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.453410][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.460406][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.488365][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.501622][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.513841][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.523444][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.531169][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.558049][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.593422][ T5219] hsr_slave_0: entered promiscuous mode [ 64.600252][ T5219] hsr_slave_1: entered promiscuous mode [ 64.616072][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.623044][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.649346][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.672393][ T5220] hsr_slave_0: entered promiscuous mode [ 64.678758][ T5220] hsr_slave_1: entered promiscuous mode [ 64.685054][ T54] Bluetooth: hci2: command tx timeout [ 64.691699][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.699518][ T5220] Cannot create hsr debugfs directory [ 64.729043][ T5222] team0: Port device team_slave_0 added [ 64.737416][ T5222] team0: Port device team_slave_1 added [ 64.771772][ T54] Bluetooth: hci3: command tx timeout [ 64.771808][ T5228] Bluetooth: hci1: command tx timeout [ 64.782956][ T5236] Bluetooth: hci0: command tx timeout [ 64.817921][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.828539][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.854607][ T5236] Bluetooth: hci4: command tx timeout [ 64.861200][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.876195][ T5221] hsr_slave_0: entered promiscuous mode [ 64.886550][ T5221] hsr_slave_1: entered promiscuous mode [ 64.892808][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.900705][ T5221] Cannot create hsr debugfs directory [ 64.929765][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.937091][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.963076][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.990890][ T5218] hsr_slave_0: entered promiscuous mode [ 64.997188][ T5218] hsr_slave_1: entered promiscuous mode [ 65.003193][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.011507][ T5218] Cannot create hsr debugfs directory [ 65.156807][ T5222] hsr_slave_0: entered promiscuous mode [ 65.163177][ T5222] hsr_slave_1: entered promiscuous mode [ 65.169755][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.177429][ T5222] Cannot create hsr debugfs directory [ 65.377310][ T5221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.392361][ T5221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.415948][ T5221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.432595][ T5221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.483178][ T5218] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.495852][ T5218] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.525487][ T5218] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.536373][ T5218] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.598021][ T5220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.609913][ T5220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.620225][ T5220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.631182][ T5220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.698423][ T5222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.722510][ T5222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.750336][ T5222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.786477][ T5222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.846119][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.852966][ T5219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.866198][ T5219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.876434][ T5219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.886841][ T5219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.928472][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.953210][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.971070][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.978417][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.998917][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.019143][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.026238][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.060539][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.084978][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.108283][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.115550][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.170304][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.177417][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.187888][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.195017][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.214882][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.221983][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.241324][ T5221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.284310][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.351146][ T29] audit: type=1400 audit(1727708541.105:111): avc: denied { sys_module } for pid=5221 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.411027][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.431725][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.462788][ T5218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.477615][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.485361][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.509316][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.524307][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.531427][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.567592][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.574751][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.613272][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.620443][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.717298][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.764860][ T5236] Bluetooth: hci2: command tx timeout [ 66.812185][ T5219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.844196][ T5236] Bluetooth: hci0: command tx timeout [ 66.849650][ T5236] Bluetooth: hci3: command tx timeout [ 66.855202][ T5228] Bluetooth: hci1: command tx timeout [ 66.903381][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.923854][ T5236] Bluetooth: hci4: command tx timeout [ 66.997645][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.140764][ T5218] veth0_vlan: entered promiscuous mode [ 67.177581][ T5220] veth0_vlan: entered promiscuous mode [ 67.198127][ T5218] veth1_vlan: entered promiscuous mode [ 67.210985][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.231908][ T5220] veth1_vlan: entered promiscuous mode [ 67.247438][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.309240][ T5218] veth0_macvtap: entered promiscuous mode [ 67.348524][ T5221] veth0_vlan: entered promiscuous mode [ 67.357075][ T5218] veth1_macvtap: entered promiscuous mode [ 67.381320][ T5221] veth1_vlan: entered promiscuous mode [ 67.402110][ T5220] veth0_macvtap: entered promiscuous mode [ 67.442298][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.454344][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.461787][ T5222] veth0_vlan: entered promiscuous mode [ 67.471468][ T5220] veth1_macvtap: entered promiscuous mode [ 67.502589][ T5219] veth0_vlan: entered promiscuous mode [ 67.509833][ T5218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.519470][ T5218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.529158][ T5218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.537934][ T5218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.556796][ T5222] veth1_vlan: entered promiscuous mode [ 67.578526][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.590163][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.602322][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.616899][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.628158][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.639665][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.662281][ T5221] veth0_macvtap: entered promiscuous mode [ 67.672518][ T5220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.681927][ T5220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.691070][ T5220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.700626][ T5220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.720209][ T5221] veth1_macvtap: entered promiscuous mode [ 67.751117][ T5219] veth1_vlan: entered promiscuous mode [ 67.793133][ T5222] veth0_macvtap: entered promiscuous mode [ 67.845750][ T5222] veth1_macvtap: entered promiscuous mode [ 67.860243][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.873215][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.883705][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.894386][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.905735][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.920103][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.932596][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.941504][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.955481][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.966667][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.977187][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.988044][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.012494][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.026103][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.037116][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.049579][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.059588][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.070255][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.081567][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.090725][ T5221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.100330][ T5221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.109382][ T5221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.118157][ T5221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.151967][ T5219] veth0_macvtap: entered promiscuous mode [ 68.177749][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.187076][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.202425][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.213874][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.225355][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.235952][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.245865][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.256346][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.268674][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.283287][ T5222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.294347][ T5222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.303058][ T5222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312993][ T5222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.339057][ T5219] veth1_macvtap: entered promiscuous mode [ 68.346383][ T29] audit: type=1400 audit(1727708543.085:112): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/root/syzkaller.JMDDUP/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.372820][ T29] audit: type=1400 audit(1727708543.105:113): avc: denied { mount } for pid=5218 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.396289][ T29] audit: type=1400 audit(1727708543.105:114): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/root/syzkaller.JMDDUP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.426965][ T29] audit: type=1400 audit(1727708543.105:115): avc: denied { mount } for pid=5218 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.463171][ T29] audit: type=1400 audit(1727708543.105:116): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/root/syzkaller.JMDDUP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.494076][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.502447][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.509164][ T5218] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.530172][ T29] audit: type=1400 audit(1727708543.105:117): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/root/syzkaller.JMDDUP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.558800][ T29] audit: type=1400 audit(1727708543.105:118): avc: denied { unmount } for pid=5218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.571091][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.582804][ T29] audit: type=1400 audit(1727708543.135:119): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.614714][ T29] audit: type=1400 audit(1727708543.135:120): avc: denied { mount } for pid=5218 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.621558][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.644598][ T29] audit: type=1400 audit(1727708543.135:121): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 68.674953][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.686396][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.696371][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.706884][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.717001][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.727840][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.739124][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.753002][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.767280][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.778929][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.789705][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.799657][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.810257][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.820453][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.831983][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.842964][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.850522][ T5236] Bluetooth: hci2: command tx timeout [ 68.862702][ T5219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.871734][ T5219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.880983][ T5219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.889968][ T5219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.924724][ T5236] Bluetooth: hci0: command tx timeout [ 68.927207][ T5228] Bluetooth: hci3: command tx timeout [ 68.930567][ T54] Bluetooth: hci1: command tx timeout [ 68.970388][ T2880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.979912][ T2880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.003998][ T5236] Bluetooth: hci4: command tx timeout [ 69.035289][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.043149][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.238233][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.264437][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.272299][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.293796][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.376501][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.387166][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.431799][ T2880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.448858][ T2880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.566919][ T5316] syz.4.5: attempt to access beyond end of device [ 69.566919][ T5316] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 69.569560][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.604620][ T5316] exFAT-fs (nbd4): unable to read boot sector [ 69.641065][ T5316] exFAT-fs (nbd4): failed to read boot sector [ 69.643249][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.664117][ T5316] exFAT-fs (nbd4): failed to recognize exfat type [ 70.246711][ T5338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.272336][ T5319] syz.1.8 (5319) used greatest stack depth: 20880 bytes left [ 70.759900][ T5357] Illegal XDP return value 4294967294 on prog (id 9) dev N/A, expect packet loss! [ 70.930166][ T5236] Bluetooth: hci2: command tx timeout [ 70.941961][ T5305] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.954275][ T5276] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.004502][ T5236] Bluetooth: hci3: command tx timeout [ 71.004700][ T54] Bluetooth: hci0: command tx timeout [ 71.009914][ T5228] Bluetooth: hci1: command tx timeout [ 71.084205][ T54] Bluetooth: hci4: command tx timeout [ 71.108669][ T5305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.121080][ T5305] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.150348][ T5305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.159794][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.168255][ T5305] usb 2-1: Product: syz [ 71.169649][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 71.172515][ T5305] usb 2-1: Manufacturer: syz [ 71.186024][ T5305] usb 2-1: SerialNumber: syz [ 71.210468][ T5276] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 71.211264][ T5374] input: syz1 as /devices/virtual/input/input5 [ 71.254377][ T5276] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 71.290621][ T5276] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.325909][ T5276] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.355882][ T5276] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.384536][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.567781][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.577923][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.670965][ T5276] usb 1-1: GET_CAPABILITIES returned 0 [ 71.694253][ T5276] usbtmc 1-1:16.0: can't read capabilities [ 71.900981][ T5225] usb 1-1: USB disconnect, device number 2 [ 72.153693][ T5272] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.299068][ T5305] cdc_ncm 2-1:1.0: bind() failure [ 72.316100][ T5305] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 72.323898][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 72.331988][ T5305] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 72.332137][ T5272] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.342656][ T5305] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 72.363869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.381210][ T5272] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.401188][ T5272] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.421147][ T5305] usb 2-1: USB disconnect, device number 2 [ 72.439438][ T5272] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.456528][ T5272] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.472948][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.594665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 72.635286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 72.723087][ T5272] usb 5-1: GET_CAPABILITIES returned 0 [ 72.730131][ T5272] usbtmc 5-1:16.0: can't read capabilities [ 72.987867][ T5305] usb 5-1: USB disconnect, device number 2 [ 73.220865][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 73.406504][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 73.406524][ T29] audit: type=1400 audit(1727708548.145:198): avc: denied { execute } for pid=5415 comm="syz.2.43" path="/13/cpu.stat" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.433722][ T941] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.496126][ T29] audit: type=1400 audit(1727708548.255:199): avc: denied { mount } for pid=5419 comm="syz.0.45" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.541108][ T29] audit: type=1400 audit(1727708548.295:200): avc: denied { watch watch_reads } for pid=5419 comm="syz.0.45" path="/6/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 73.574797][ T29] audit: type=1400 audit(1727708548.295:201): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.628091][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 73.662410][ T941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 73.680048][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 73.709069][ T29] audit: type=1326 audit(1727708548.415:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846217dff9 code=0x7ffc0000 [ 73.760296][ T941] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 73.773627][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.797889][ T29] audit: type=1326 audit(1727708548.415:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846217dff9 code=0x7ffc0000 [ 73.830968][ T941] usb 4-1: Product: syz [ 73.835619][ T941] usb 4-1: Manufacturer: syz [ 73.841765][ T941] usb 4-1: SerialNumber: syz [ 73.862384][ T941] usb 4-1: config 0 descriptor?? [ 73.867888][ T29] audit: type=1326 audit(1727708548.415:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846217dff9 code=0x7ffc0000 [ 73.903204][ T941] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 73.912589][ T29] audit: type=1326 audit(1727708548.415:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846217dff9 code=0x7ffc0000 [ 73.920179][ T941] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 73.949547][ T29] audit: type=1326 audit(1727708548.415:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846217dff9 code=0x7ffc0000 [ 74.000237][ T29] audit: type=1326 audit(1727708548.415:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846217dff9 code=0x7ffc0000 [ 74.013713][ T5431] netlink: 'syz.0.50': attribute type 9 has an invalid length. [ 74.032740][ T5431] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.50'. [ 74.042128][ T5225] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.104395][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.244247][ T5225] usb 2-1: Using ep0 maxpacket: 8 [ 74.256316][ T5225] usb 2-1: config 0 has no interfaces? [ 74.264894][ T5225] usb 2-1: New USB device found, idVendor=0548, idProduct=0069, bcdDevice= a.8d [ 74.275133][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.293275][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.306462][ T5225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.321369][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 74.339387][ T5225] usb 2-1: config 0 descriptor?? [ 74.365296][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.401872][ T25] usb 5-1: config 0 descriptor?? [ 74.513491][ T941] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 74.520722][ T941] em28xx 4-1:0.0: Config register raw data: 0x66 [ 74.528375][ T941] em28xx 4-1:0.0: I2S Audio (1 sample rate(s)) [ 74.535427][ T941] em28xx 4-1:0.0: No AC97 audio processor [ 74.618070][ T5305] usb 2-1: USB disconnect, device number 3 [ 74.863098][ T25] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 74.873329][ T25] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 74.903853][ T25] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 74.938595][ T941] usb 4-1: USB disconnect, device number 2 [ 75.322486][ T941] usb 5-1: USB disconnect, device number 3 [ 75.652515][ T5475] sctp: [Deprecated]: syz.3.67 (pid 5475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.652515][ T5475] Use struct sctp_sack_info instead [ 76.064418][ T5472] kvm_intel: kvm [5471]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 76.690340][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.699114][ T938] cfg80211: failed to load regulatory.db [ 76.705675][ T5225] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.873897][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 76.881405][ T5225] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.904705][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.924646][ T5225] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.953149][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.974121][ T5225] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.983231][ T5225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.991523][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 77.013846][ T5225] usb 4-1: SerialNumber: syz [ 77.021225][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.047476][ T25] usb 3-1: config 0 descriptor?? [ 77.247038][ T5225] usb 4-1: 0:2 : does not exist [ 77.367855][ T5225] usb 4-1: USB disconnect, device number 3 [ 77.480989][ T5361] udevd[5361]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.556215][ T25] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 77.694918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.859236][ T941] usb 3-1: USB disconnect, device number 2 [ 78.094214][ T5525] netlink: 116 bytes leftover after parsing attributes in process `syz.3.85'. [ 78.104084][ T5525] Zero length message leads to an empty skb [ 78.183822][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.346769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.376289][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.404447][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.439519][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.449733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.493990][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.533003][ T5523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.577488][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.579504][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 78.579521][ T29] audit: type=1400 audit(1727708553.325:271): avc: denied { create } for pid=5529 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.721764][ T29] audit: type=1400 audit(1727708553.375:272): avc: denied { ioctl } for pid=5529 comm="syz.2.88" path="socket:[8023]" dev="sockfs" ino=8023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.826660][ T29] audit: type=1400 audit(1727708553.375:273): avc: denied { bind } for pid=5529 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.905922][ T29] audit: type=1400 audit(1727708553.375:274): avc: denied { write } for pid=5529 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.008206][ T29] audit: type=1400 audit(1727708553.645:275): avc: denied { setopt } for pid=5533 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.123558][ T941] usb 2-1: USB disconnect, device number 4 [ 79.153809][ T5272] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.161720][ T29] audit: type=1400 audit(1727708553.915:276): avc: denied { mount } for pid=5538 comm="syz.3.91" name="/" dev="pstore" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 79.190717][ T5539] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.203665][ T5305] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.251014][ T29] audit: type=1400 audit(1727708553.995:277): avc: denied { mount } for pid=5538 comm="syz.3.91" name="/" dev="overlay" ino=4611686018427389776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.298168][ T29] audit: type=1400 audit(1727708554.055:278): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 79.306361][ T5272] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 79.355336][ T5272] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 79.380598][ T5305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.382668][ T5272] usb 1-1: Manufacturer: syz [ 79.396951][ T5305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.419791][ T5272] usb 1-1: config 0 descriptor?? [ 79.442142][ T5305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.451920][ T5305] usb 5-1: Product: syz [ 79.461017][ T5305] usb 5-1: Manufacturer: syz [ 79.466016][ T5305] usb 5-1: SerialNumber: syz [ 79.481029][ T29] audit: type=1400 audit(1727708554.235:279): avc: denied { name_bind } for pid=5542 comm="syz.2.93" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.653757][ T941] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.709865][ T29] audit: type=1400 audit(1727708554.465:280): avc: denied { setopt } for pid=5547 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.827575][ T941] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 79.836814][ T941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.853692][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.880567][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.908078][ T5272] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 79.924729][ T941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.979675][ T941] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.016218][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.051802][ T941] usb 4-1: config 0 descriptor?? [ 80.059367][ T5541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.213375][ T5558] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 80.499885][ T941] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 80.511303][ T5305] cdc_ncm 5-1:1.0: failed to get mac address [ 80.541392][ T941] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 80.561595][ T941] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 80.680827][ T5272] usb 1-1: USB disconnect, device number 3 [ 80.726646][ T5305] cdc_ncm 5-1:1.0: bind() failure [ 80.764223][ T5305] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 80.781079][ T5305] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 80.798174][ T5305] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 80.821112][ T5305] usb 5-1: USB disconnect, device number 4 [ 80.873776][ T941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.882079][ T5304] usb 4-1: USB disconnect, device number 4 [ 81.045468][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.056890][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.073145][ T941] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 81.082702][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.112253][ T941] usb 3-1: config 0 descriptor?? [ 81.194377][ T5584] capability: warning: `syz.1.108' uses deprecated v2 capabilities in a way that may be insecure [ 81.210051][ T5584] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 81.226593][ T5584] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 81.541647][ T941] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 81.570484][ T941] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 81.593380][ T5599] netlink: 'syz.3.112': attribute type 9 has an invalid length. [ 81.608439][ T941] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0004/input/input7 [ 81.663798][ T5599] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.112'. [ 81.665743][ T941] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 81.753763][ T5304] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.795091][ T5305] usb 3-1: USB disconnect, device number 3 [ 81.950225][ T5304] usb 5-1: Using ep0 maxpacket: 8 [ 81.973359][ T5304] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.013764][ T5304] usb 5-1: config 0 has no interface number 0 [ 82.019929][ T5304] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.062239][ T5304] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.088124][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.125366][ T5304] usb 5-1: config 0 descriptor?? [ 82.158837][ T5304] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 82.200884][ T5618] program syz.3.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.435962][ T5225] usb 5-1: USB disconnect, device number 5 [ 82.441858][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 82.475283][ T5225] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 82.743722][ T5304] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.753943][ T941] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.915737][ T5304] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 82.916293][ T941] usb 1-1: Using ep0 maxpacket: 16 [ 82.927924][ T5304] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.946816][ T941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.951584][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.980650][ T941] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 82.987151][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.989885][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.011308][ T5304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.028697][ T941] usb 1-1: config 0 descriptor?? [ 83.041060][ T5304] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.063767][ T941] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 83.070997][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.100423][ T5304] usb 2-1: config 0 descriptor?? [ 83.115728][ T5632] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.272084][ T4661] bcm5974 1-1:0.0: could not read from device [ 83.285599][ T941] bcm5974 1-1:0.0: could not read from device [ 83.303116][ T4661] bcm5974 1-1:0.0: could not read from device [ 83.326834][ T941] input: failed to attach handler mousedev to device input8, error: -5 [ 83.361907][ T4661] bcm5974 1-1:0.0: could not read from device [ 83.373005][ T941] usb 1-1: USB disconnect, device number 4 [ 83.379880][ T4661] bcm5974 1-1:0.0: could not read from device [ 83.555143][ T5304] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 83.572388][ T5304] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 83.611577][ T5304] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 83.657262][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 83.657280][ T29] audit: type=1400 audit(1727708558.415:327): avc: denied { name_bind } for pid=5649 comm="syz.4.128" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 83.835970][ T5272] usb 2-1: USB disconnect, device number 5 [ 83.982919][ T29] audit: type=1400 audit(1727708558.735:328): avc: denied { shutdown } for pid=5658 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.043751][ T29] audit: type=1400 audit(1727708558.795:329): avc: denied { setopt } for pid=5660 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.098830][ T29] audit: type=1400 audit(1727708558.805:330): avc: denied { connect } for pid=5660 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.150272][ T29] audit: type=1400 audit(1727708558.885:331): avc: denied { create } for pid=5662 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.190284][ T5663] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.205353][ T29] audit: type=1400 audit(1727708558.935:332): avc: denied { create } for pid=5662 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.229207][ T5663] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.253648][ T29] audit: type=1400 audit(1727708558.935:333): avc: denied { write } for pid=5662 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.588017][ T29] audit: type=1400 audit(1727708559.335:334): avc: denied { read write } for pid=5673 comm="syz.2.139" name="video36" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.647609][ T5677] vivid-007: disconnect [ 84.663444][ T5673] vivid-007: reconnect [ 84.669240][ T29] audit: type=1400 audit(1727708559.335:335): avc: denied { open } for pid=5673 comm="syz.2.139" path="/dev/video36" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.752736][ T29] audit: type=1400 audit(1727708559.405:336): avc: denied { ioctl } for pid=5673 comm="syz.2.139" path="/dev/video36" dev="devtmpfs" ino=957 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.996289][ T5688] raw_sendmsg: syz.0.144 forgot to set AF_INET. Fix it! [ 85.323786][ T5304] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.502422][ T5304] usb 3-1: Using ep0 maxpacket: 8 [ 85.519511][ T5304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.530812][ T5304] usb 3-1: config 0 has no interfaces? [ 85.547552][ T5304] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 85.560746][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.575401][ T5304] usb 3-1: SerialNumber: syz [ 85.583391][ T5304] usb 3-1: config 0 descriptor?? [ 85.803684][ T941] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.805698][ T5304] usb 3-1: USB disconnect, device number 4 [ 85.963864][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 85.975671][ T941] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.993706][ T941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.003498][ T941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.034420][ T941] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.050921][ T941] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.060222][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.343890][ T941] usb 1-1: usb_control_msg returned -32 [ 86.349533][ T941] usbtmc 1-1:16.0: can't read capabilities [ 86.539746][ T5709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.876502][ T5720] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 86.896689][ T5720] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 87.540267][ T5732] syz.2.161 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.790181][ T5739] netlink: 'syz.3.164': attribute type 2 has an invalid length. [ 87.803794][ T5739] netlink: 100 bytes leftover after parsing attributes in process `syz.3.164'. [ 87.943347][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 88.152853][ T5747] binder: 5746:5747 ioctl c0306201 0 returned -14 [ 88.644054][ T5305] usb 1-1: USB disconnect, device number 5 [ 89.490233][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 89.490251][ T29] audit: type=1400 audit(1727708564.155:346): avc: denied { create } for pid=5772 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.538396][ T29] audit: type=1400 audit(1727708564.175:347): avc: denied { ioctl } for pid=5772 comm="syz.2.178" path="socket:[8601]" dev="sockfs" ino=8601 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.734214][ T29] audit: type=1400 audit(1727708564.355:348): avc: denied { read write } for pid=5775 comm="syz.2.179" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.767533][ T29] audit: type=1400 audit(1727708564.355:349): avc: denied { open } for pid=5775 comm="syz.2.179" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.829776][ T29] audit: type=1400 audit(1727708564.585:350): avc: denied { open } for pid=5777 comm="syz.2.180" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 89.905082][ T29] audit: type=1400 audit(1727708564.615:351): avc: denied { ioctl } for pid=5777 comm="syz.2.180" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 90.253729][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 90.286553][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 90.804446][ T29] audit: type=1400 audit(1727708565.565:352): avc: denied { ioctl } for pid=5795 comm="syz.4.188" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9452 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.863009][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.104587][ T29] audit: type=1400 audit(1727708565.865:353): avc: denied { read write } for pid=5799 comm="syz.4.189" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.153211][ T29] audit: type=1400 audit(1727708565.885:354): avc: denied { open } for pid=5799 comm="syz.4.189" path="/dev/raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.176479][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.223775][ T29] audit: type=1400 audit(1727708565.885:355): avc: denied { ioctl } for pid=5799 comm="syz.4.189" path="/dev/raw-gadget" dev="devtmpfs" ino=732 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.374096][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 91.535200][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 91.580311][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.607301][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.617562][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 91.626907][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.639273][ T25] usb 5-1: config 0 descriptor?? [ 91.660961][ T25] hub 5-1:0.0: USB hub found [ 91.879446][ T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 91.897434][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 91.903764][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 91.930099][ T25] usb 5-1: USB disconnect, device number 6 [ 91.964078][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 92.413791][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.501208][ T5825] syz.3.200 uses obsolete (PF_INET,SOCK_PACKET) [ 92.554707][ T5827] Falling back ldisc for ttyS3. [ 92.563739][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 92.584000][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.618871][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.643536][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.711785][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.737561][ T25] usb 5-1: config 0 descriptor?? [ 92.758655][ T25] hub 5-1:0.0: USB hub found [ 92.957197][ T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 93.379050][ T25] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 93.700040][ T25] usb 5-1: USB disconnect, device number 7 [ 94.793960][ T5305] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.898395][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 94.898414][ T29] audit: type=1400 audit(1727708569.655:361): avc: denied { create } for pid=5838 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.954200][ T29] audit: type=1400 audit(1727708569.705:362): avc: denied { bind } for pid=5838 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.012209][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.023390][ T5225] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.031164][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.041680][ T5305] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 95.051542][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.062514][ T5305] usb 3-1: config 0 descriptor?? [ 95.247434][ T5225] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 95.315186][ T5225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.377727][ T5225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.443611][ T5225] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.524450][ T5305] wacom 0003:056A:0016.0007: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 95.558211][ T5225] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.571630][ T5305] wacom 0003:056A:0016.0007: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0 [ 95.609100][ T5225] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.639597][ T5225] usb 1-1: Manufacturer: syz [ 95.658299][ T5305] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.0007/input/input10 [ 95.685324][ T5225] usb 1-1: config 0 descriptor?? [ 95.773931][ T5305] usb 3-1: USB disconnect, device number 5 [ 95.903651][ T29] audit: type=1400 audit(1727708570.655:363): avc: denied { egress } for pid=5681 comm="syz.1.142" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 96.052232][ T29] audit: type=1400 audit(1727708570.655:364): avc: denied { sendto } for pid=5681 comm="syz.1.142" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 96.166421][ T5225] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 96.194563][ T5225] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 96.277000][ T5225] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 96.574729][ T5225] usb 1-1: USB disconnect, device number 6 [ 96.597164][ T29] audit: type=1400 audit(1727708571.355:365): avc: denied { write } for pid=5861 comm="syz.3.215" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 96.756325][ T29] audit: type=1400 audit(1727708571.355:366): avc: denied { open } for pid=5861 comm="syz.3.215" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 97.013338][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.052925][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.147479][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.231201][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.248003][ T5877] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.219'. [ 97.259220][ T5877] netlink: 'syz.3.219': attribute type 3 has an invalid length. [ 97.267273][ T5877] netlink: 105 bytes leftover after parsing attributes in process `syz.3.219'. [ 97.284717][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.308718][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.733797][ T5273] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.773281][ T29] audit: type=1400 audit(1727708572.515:367): avc: denied { mounton } for pid=5867 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 97.871138][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 97.895633][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 97.907891][ T5273] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.953902][ T5273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 98.051162][ T5273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.061444][ T5273] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.074723][ T5273] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.083875][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.234664][ T29] audit: type=1400 audit(1727708572.965:368): avc: denied { create } for pid=5898 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.292266][ T29] audit: type=1400 audit(1727708573.035:369): avc: denied { write } for pid=5898 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.375265][ T5273] usb 5-1: GET_CAPABILITIES returned 0 [ 98.380818][ T5273] usbtmc 5-1:16.0: can't read capabilities [ 98.468349][ T29] audit: type=1400 audit(1727708573.225:370): avc: denied { map } for pid=5903 comm="syz.0.229" path="/dev/sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.470219][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 98.674909][ T5273] usb 5-1: USB disconnect, device number 8 [ 98.820199][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.843751][ T5276] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.873875][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.900835][ T5867] bridge_slave_0: entered allmulticast mode [ 98.924969][ T5867] bridge_slave_0: entered promiscuous mode [ 98.958033][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.980249][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.988495][ T5867] bridge_slave_1: entered allmulticast mode [ 98.993688][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 98.996571][ T5867] bridge_slave_1: entered promiscuous mode [ 99.002788][ T5276] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 99.041894][ T5276] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 99.055096][ T5276] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.072767][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.106962][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.127383][ T5276] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.179005][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.226003][ T5276] usbtmc 4-1:16.0: bulk endpoints not found [ 99.314886][ T5867] team0: Port device team_slave_0 added [ 99.334324][ T5867] team0: Port device team_slave_1 added [ 99.443065][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.462726][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.504596][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.525827][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.538040][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.546424][ T5276] usb 4-1: USB disconnect, device number 5 [ 99.651856][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.677180][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.738809][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.816624][ T54] Bluetooth: hci5: command tx timeout [ 99.921141][ T5867] hsr_slave_0: entered promiscuous mode [ 99.938531][ T5867] hsr_slave_1: entered promiscuous mode [ 99.951345][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.972630][ T5867] Cannot create hsr debugfs directory [ 100.013817][ T5272] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.124778][ T5941] loop5: detected capacity change from 0 to 16384 [ 100.199300][ T58] I/O error, dev loop5, sector 224 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 100.212244][ T5272] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.222834][ T5272] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 100.234561][ T5272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.244288][ T5272] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 100.253550][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.262574][ T5272] usb 4-1: Product: syz [ 100.267704][ T5272] usb 4-1: Manufacturer: syz [ 100.272468][ T5272] usb 4-1: SerialNumber: syz [ 100.281684][ T5272] usb 4-1: config 0 descriptor?? [ 100.432005][ T5867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.544927][ T5272] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 100.552613][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 100.562710][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 100.572150][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 100.580664][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 100.588600][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 100.596410][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 100.616734][ T5272] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 100.626470][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 100.634306][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 100.641929][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 100.642566][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 100.649649][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 100.666181][ T5272] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 100.684820][ T5272] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 100.716590][ T5272] usb 4-1: USB disconnect, device number 6 [ 100.747238][ T5867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.774608][ T5272] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 100.917561][ T5272] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 100.927915][ T5272] keyspan 4-1:0.0: device disconnected [ 100.956769][ T5867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.072521][ T5867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.347756][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.362855][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.383061][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.411607][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.458315][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 101.458333][ T29] audit: type=1400 audit(1727708576.215:377): avc: denied { setopt } for pid=5959 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.632566][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.683081][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.715735][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.723040][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.786005][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.793158][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.884499][ T54] Bluetooth: hci5: command tx timeout [ 102.033464][ T29] audit: type=1400 audit(1727708576.785:378): avc: denied { sys_module } for pid=5867 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.221269][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.360893][ T5867] veth0_vlan: entered promiscuous mode [ 102.424633][ T5867] veth1_vlan: entered promiscuous mode [ 102.496137][ T5867] veth0_macvtap: entered promiscuous mode [ 102.523068][ T5867] veth1_macvtap: entered promiscuous mode [ 102.588098][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.616669][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.636772][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.663675][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.683929][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.703867][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.733713][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.769336][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.794066][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.820816][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.833733][ T5276] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.878039][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.919368][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.952928][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.993278][ T5991] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 103.051247][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.071234][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.108407][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.130878][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.143750][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.162558][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.162715][ T5276] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 103.173519][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.202136][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.211822][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.217033][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.256390][ T5276] usb 3-1: config 0 descriptor?? [ 103.325206][ T5867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.361129][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.390822][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.426705][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.443696][ T29] audit: type=1400 audit(1727708578.185:379): avc: denied { read write } for pid=6002 comm="syz.3.264" name="ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.503800][ T29] audit: type=1400 audit(1727708578.185:380): avc: denied { open } for pid=6002 comm="syz.3.264" path="/dev/ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.577071][ T29] audit: type=1400 audit(1727708578.195:381): avc: denied { ioctl } for pid=6002 comm="syz.3.264" path="/dev/ppp" dev="devtmpfs" ino=693 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.883012][ T29] audit: type=1400 audit(1727708578.625:382): avc: denied { write } for pid=6012 comm="syz.3.268" name="file0" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.928849][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.964522][ T54] Bluetooth: hci5: command tx timeout [ 103.975564][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.013135][ T29] audit: type=1400 audit(1727708578.625:383): avc: denied { open } for pid=6012 comm="syz.3.268" path="/63/file0" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.138613][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.172502][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.223344][ T29] audit: type=1400 audit(1727708578.955:384): avc: denied { mounton } for pid=5867 comm="syz-executor" path="/root/syzkaller.DKsyLV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 104.309678][ T5276] usb 3-1: Cannot set autoneg [ 104.321468][ T5276] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 104.413895][ T29] audit: type=1400 audit(1727708579.165:385): avc: denied { watch_mount } for pid=6024 comm="syz.0.275" path="/69" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.474616][ T6029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.574106][ T5276] usb 3-1: USB disconnect, device number 6 [ 104.747491][ T6038] tls_set_device_offload_rx: netdev not found [ 104.973305][ T29] audit: type=1400 audit(1727708579.725:386): avc: denied { read } for pid=6043 comm="syz.4.281" path="socket:[10486]" dev="sockfs" ino=10486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.288071][ T6061] tipc: Started in network mode [ 105.288554][ T6060] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 105.293125][ T6061] tipc: Node identity , cluster identity 4711 [ 105.293146][ T6061] tipc: Failed to obtain node identity [ 105.293176][ T6061] tipc: Enabling of bearer rejected, failed to enable media [ 105.794465][ T5305] ================================================================== [ 105.802569][ T5305] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x14c/0x1c0 [ 105.811820][ T5305] Read of size 8 at addr ffff88802f67b308 by task kworker/1:7/5305 [ 105.819731][ T5305] [ 105.822080][ T5305] CPU: 1 UID: 0 PID: 5305 Comm: kworker/1:7 Not tainted 6.12.0-rc1-syzkaller #0 [ 105.831121][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.841190][ T5305] Workqueue: events binder_deferred_func [ 105.846861][ T5305] Call Trace: [ 105.850146][ T5305] [ 105.853090][ T5305] dump_stack_lvl+0x116/0x1f0 [ 105.857803][ T5305] print_report+0xc3/0x620 [ 105.862239][ T5305] ? __virt_addr_valid+0x5e/0x590 [ 105.867287][ T5305] ? __phys_addr+0xc6/0x150 [ 105.871824][ T5305] kasan_report+0xd9/0x110 [ 105.876266][ T5305] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 105.882706][ T5305] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 105.889151][ T5305] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 105.895420][ T5305] binder_release_work+0x9b/0x490 [ 105.900468][ T5305] binder_deferred_func+0xe6e/0x12e0 [ 105.905791][ T5305] process_one_work+0x9c5/0x1ba0 [ 105.910755][ T5305] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 105.916408][ T5305] ? __pfx_process_one_work+0x10/0x10 [ 105.921803][ T5305] ? assign_work+0x1a0/0x250 [ 105.926424][ T5305] worker_thread+0x6c8/0xf00 [ 105.931036][ T5305] ? __kthread_parkme+0x148/0x220 [ 105.936088][ T5305] ? __pfx_worker_thread+0x10/0x10 [ 105.941223][ T5305] kthread+0x2c1/0x3a0 [ 105.945313][ T5305] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.950538][ T5305] ? __pfx_kthread+0x10/0x10 [ 105.955150][ T5305] ret_from_fork+0x45/0x80 [ 105.959578][ T5305] ? __pfx_kthread+0x10/0x10 [ 105.964191][ T5305] ret_from_fork_asm+0x1a/0x30 [ 105.968985][ T5305] [ 105.972009][ T5305] [ 105.974338][ T5305] Allocated by task 6074: [ 105.978674][ T5305] kasan_save_stack+0x33/0x60 [ 105.983369][ T5305] kasan_save_track+0x14/0x30 [ 105.988058][ T5305] __kasan_kmalloc+0xaa/0xb0 [ 105.992670][ T5305] binder_thread_write+0xe19/0x4c60 [ 105.997899][ T5305] binder_ioctl+0x265b/0x6fa0 [ 106.002600][ T5305] __x64_sys_ioctl+0x18f/0x220 [ 106.007387][ T5305] do_syscall_64+0xcd/0x250 [ 106.011908][ T5305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.017820][ T5305] [ 106.020146][ T5305] Freed by task 5305: [ 106.024129][ T5305] kasan_save_stack+0x33/0x60 [ 106.028827][ T5305] kasan_save_track+0x14/0x30 [ 106.033526][ T5305] kasan_save_free_info+0x3b/0x60 [ 106.038566][ T5305] __kasan_slab_free+0x51/0x70 [ 106.043347][ T5305] kfree+0x14f/0x4b0 [ 106.047256][ T5305] binder_deferred_func+0xdd7/0x12e0 [ 106.052568][ T5305] process_one_work+0x9c5/0x1ba0 [ 106.057527][ T5305] worker_thread+0x6c8/0xf00 [ 106.062143][ T5305] kthread+0x2c1/0x3a0 [ 106.066232][ T5305] ret_from_fork+0x45/0x80 [ 106.070664][ T5305] ret_from_fork_asm+0x1a/0x30 [ 106.075452][ T5305] [ 106.077783][ T5305] The buggy address belongs to the object at ffff88802f67b300 [ 106.077783][ T5305] which belongs to the cache kmalloc-64 of size 64 [ 106.091682][ T5305] The buggy address is located 8 bytes inside of [ 106.091682][ T5305] freed 64-byte region [ffff88802f67b300, ffff88802f67b340) [ 106.105337][ T5305] [ 106.107669][ T5305] The buggy address belongs to the physical page: [ 106.114098][ T5305] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802f67b780 pfn:0x2f67b [ 106.124190][ T5305] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.131315][ T5305] page_type: f5(slab) [ 106.135330][ T5305] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122 [ 106.143932][ T5305] raw: ffff88802f67b780 0000000080200017 00000001f5000000 0000000000000000 [ 106.152527][ T5305] page dumped because: kasan: bad access detected [ 106.158965][ T5305] page_owner tracks the page as allocated [ 106.164691][ T5305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4676, tgid 4676 (udevd), ts 71424716050, free_ts 71419625186 [ 106.183215][ T5305] post_alloc_hook+0x2d1/0x350 [ 106.188009][ T5305] get_page_from_freelist+0x101e/0x3070 [ 106.193667][ T5305] __alloc_pages_noprof+0x223/0x25c0 [ 106.198977][ T5305] alloc_pages_mpol_noprof+0x2c9/0x610 [ 106.204467][ T5305] new_slab+0x2ba/0x3f0 [ 106.208640][ T5305] ___slab_alloc+0xdac/0x1880 [ 106.213431][ T5305] __slab_alloc.constprop.0+0x56/0xb0 [ 106.218830][ T5305] __kmalloc_noprof+0x367/0x400 [ 106.223707][ T5305] tomoyo_encode2+0x100/0x3e0 [ 106.228404][ T5305] tomoyo_encode+0x29/0x50 [ 106.232842][ T5305] tomoyo_realpath_from_path+0x19d/0x720 [ 106.238498][ T5305] tomoyo_check_open_permission+0x2a7/0x3b0 [ 106.244432][ T5305] tomoyo_file_open+0xcf/0x100 [ 106.249224][ T5305] security_file_open+0x64c/0x9d0 [ 106.254272][ T5305] do_dentry_open+0x57c/0x1530 [ 106.259069][ T5305] vfs_open+0x82/0x3f0 [ 106.263161][ T5305] page last free pid 5219 tgid 5219 stack trace: [ 106.269503][ T5305] free_unref_page+0x5f4/0xdc0 [ 106.274294][ T5305] vfree+0x17a/0x890 [ 106.278209][ T5305] do_ip6t_get_ctl+0x8ec/0xaf0 [ 106.282992][ T5305] nf_getsockopt+0x79/0xe0 [ 106.287435][ T5305] ipv6_getsockopt+0x1f7/0x280 [ 106.292218][ T5305] tcp_getsockopt+0x9e/0x100 [ 106.296838][ T5305] do_sock_getsockopt+0x3fe/0x800 [ 106.301886][ T5305] __sys_getsockopt+0x1a1/0x270 [ 106.306769][ T5305] __x64_sys_getsockopt+0xbd/0x160 [ 106.311912][ T5305] do_syscall_64+0xcd/0x250 [ 106.316447][ T5305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.322367][ T5305] [ 106.324701][ T5305] Memory state around the buggy address: [ 106.330351][ T5305] ffff88802f67b200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 106.338431][ T5305] ffff88802f67b280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 106.346515][ T5305] >ffff88802f67b300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 106.354588][ T5305] ^ [ 106.358923][ T5305] ffff88802f67b380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 106.366999][ T5305] ffff88802f67b400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 106.375078][ T5305] ================================================================== [ 106.384558][ T5305] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.391781][ T5305] CPU: 1 UID: 0 PID: 5305 Comm: kworker/1:7 Not tainted 6.12.0-rc1-syzkaller #0 [ 106.400828][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.410908][ T5305] Workqueue: events binder_deferred_func [ 106.416575][ T5305] Call Trace: [ 106.419865][ T5305] [ 106.422807][ T5305] dump_stack_lvl+0x3d/0x1f0 [ 106.427424][ T5305] panic+0x71d/0x800 [ 106.431350][ T5305] ? __pfx_panic+0x10/0x10 [ 106.435802][ T5305] ? check_panic_on_warn+0x1f/0xb0 [ 106.440948][ T5305] check_panic_on_warn+0xab/0xb0 [ 106.445920][ T5305] end_report+0x117/0x180 [ 106.450275][ T5305] kasan_report+0xe9/0x110 [ 106.454721][ T5305] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 106.461159][ T5305] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 106.467605][ T5305] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 106.473873][ T5305] binder_release_work+0x9b/0x490 [ 106.478925][ T5305] binder_deferred_func+0xe6e/0x12e0 [ 106.484241][ T5305] process_one_work+0x9c5/0x1ba0 [ 106.489203][ T5305] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 106.494853][ T5305] ? __pfx_process_one_work+0x10/0x10 [ 106.500229][ T5305] ? assign_work+0x1a0/0x250 [ 106.504828][ T5305] worker_thread+0x6c8/0xf00 [ 106.509418][ T5305] ? __kthread_parkme+0x148/0x220 [ 106.514447][ T5305] ? __pfx_worker_thread+0x10/0x10 [ 106.519555][ T5305] kthread+0x2c1/0x3a0 [ 106.523628][ T5305] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.528835][ T5305] ? __pfx_kthread+0x10/0x10 [ 106.533425][ T5305] ret_from_fork+0x45/0x80 [ 106.537835][ T5305] ? __pfx_kthread+0x10/0x10 [ 106.542423][ T5305] ret_from_fork_asm+0x1a/0x30 [ 106.547196][ T5305] [ 106.550428][ T5305] Kernel Offset: disabled [ 106.554736][ T5305] Rebooting in 86400 seconds..