last executing test programs: 4.711057617s ago: executing program 2 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4.525493109s ago: executing program 0 (id=91): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000018c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES64], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$vnet(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 4.512699418s ago: executing program 2 (id=92): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 2.611581673s ago: executing program 2 (id=103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x109101) close_range(r1, 0xffffffffffffffff, 0x0) 2.512180154s ago: executing program 3 (id=104): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xecf, 0xa}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r0, 0x0, 0x0) 2.401701089s ago: executing program 2 (id=106): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_disconnect(r0) 2.241709683s ago: executing program 3 (id=108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.192680567s ago: executing program 0 (id=110): r0 = socket(0x28, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 2.08897219s ago: executing program 4 (id=111): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0x5, 0x80a, {0xac78, 0x0, 0x3, 0xffff, 0xf4b, 0x1, 0x2, 0x11, 0x412f, 0xe151, 0x1000, 0x4, 0xff, 0xffffffff, "3e1d0000fbffffffffffffffb42717e498e6ffffffffffffef00"}}) 1.986989727s ago: executing program 0 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000800)={0x7ef1afdee983757f, 0x0, [0x100000000, 0x40, 0x3, 0x9, 0x1, 0xfffffffffffffffd, 0x8c, 0x10000a71]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.934421173s ago: executing program 4 (id=114): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtaction={0x14, 0x30, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.720345771s ago: executing program 1 (id=115): r0 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x20002170, 0x0, 0x1, 0x1c1}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.720217685s ago: executing program 3 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="0f01cfb8007800000f23d00f21f8350000000a0f23f80fc7180f229fb8009000000f23d80f21f835000000b00f23f80f20e035002000000f22e00f01c4360fa90fc76bd20f214b", 0x47}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.720036413s ago: executing program 4 (id=117): prctl$PR_SET_NAME(0xf, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x900, &(0x7f0000000c00)=[{&(0x7f00000020c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x4, 0xbd}, @nested={0x10, 0xfe, 0x0, 0x1, [@nested={0x4, 0x147}, @typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}]}]}, 0x30}], 0x1}, 0x0) 1.644890703s ago: executing program 0 (id=118): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffc80) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.541969325s ago: executing program 4 (id=119): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.340286171s ago: executing program 4 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000000000207000000fffffffff8"]) 1.139321599s ago: executing program 1 (id=121): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 840.24723ms ago: executing program 3 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[0x7], &(0x7f0000000280), 0x3, 0x1, 0x1}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 839.641272ms ago: executing program 4 (id=123): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 642.338734ms ago: executing program 1 (id=124): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 471.608126ms ago: executing program 1 (id=125): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"10628c1965c61e00", r3}) close_range(r0, 0xffffffffffffffff, 0x0) 389.452316ms ago: executing program 0 (id=126): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 285.844429ms ago: executing program 3 (id=127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0) 186.053953ms ago: executing program 1 (id=128): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x101}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) 159.285421ms ago: executing program 2 (id=129): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = dup(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r1, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x57, &(0x7f0000000000)=ANY=[], 0x0) 74.565592ms ago: executing program 0 (id=130): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x9}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x50) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) 26.25679ms ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 26.028018ms ago: executing program 3 (id=132): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x6, 0x10001, 0xcdb2, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0xffffffff, 0x1}) 0s ago: executing program 2 (id=133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='}', 0x1}], 0x1}}], 0x1, 0x20008000) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 57.837451][ T30] audit: type=1400 audit(1748364445.899:65): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.840686][ T5797] cgroup: Unknown subsys name 'net' [ 57.860489][ T30] audit: type=1400 audit(1748364445.899:66): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.889257][ T30] audit: type=1400 audit(1748364445.949:67): avc: denied { unmount } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.028867][ T5797] cgroup: Unknown subsys name 'cpuset' [ 58.036651][ T5797] cgroup: Unknown subsys name 'rlimit' [ 58.181261][ T30] audit: type=1400 audit(1748364446.239:68): avc: denied { setattr } for pid=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.212565][ T30] audit: type=1400 audit(1748364446.239:69): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.233650][ T30] audit: type=1400 audit(1748364446.239:70): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.254508][ T30] audit: type=1400 audit(1748364446.239:71): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.279154][ T30] audit: type=1400 audit(1748364446.249:72): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.288001][ T5799] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.304230][ T30] audit: type=1400 audit(1748364446.249:73): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.335789][ T30] audit: type=1400 audit(1748364446.289:74): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.183037][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.158600][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.167879][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.176686][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.184042][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.205740][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.207149][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.212949][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.227766][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.235234][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.235929][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.242662][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.250808][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.257425][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.264566][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.278537][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.286885][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.287257][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.294260][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.312924][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.317436][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.328964][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.337481][ T5134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.352743][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.361620][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.369088][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.788121][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 61.875273][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 61.910538][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 61.929972][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 61.974556][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 62.072695][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.080037][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.087423][ T5816] bridge_slave_0: entered allmulticast mode [ 62.094398][ T5816] bridge_slave_0: entered promiscuous mode [ 62.101857][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.109079][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.116647][ T5816] bridge_slave_1: entered allmulticast mode [ 62.123624][ T5816] bridge_slave_1: entered promiscuous mode [ 62.133628][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.140730][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.147869][ T5820] bridge_slave_0: entered allmulticast mode [ 62.154481][ T5820] bridge_slave_0: entered promiscuous mode [ 62.187810][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.194896][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.202193][ T5820] bridge_slave_1: entered allmulticast mode [ 62.209051][ T5820] bridge_slave_1: entered promiscuous mode [ 62.238200][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.245320][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.252909][ T5810] bridge_slave_0: entered allmulticast mode [ 62.259787][ T5810] bridge_slave_0: entered promiscuous mode [ 62.284460][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.291593][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.299046][ T5813] bridge_slave_0: entered allmulticast mode [ 62.305675][ T5813] bridge_slave_0: entered promiscuous mode [ 62.312504][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.321076][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.328756][ T5810] bridge_slave_1: entered allmulticast mode [ 62.335406][ T5810] bridge_slave_1: entered promiscuous mode [ 62.353598][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.378825][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.385930][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.393180][ T5813] bridge_slave_1: entered allmulticast mode [ 62.400145][ T5813] bridge_slave_1: entered promiscuous mode [ 62.415550][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.432961][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.445115][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.474145][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.486274][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.503266][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.510464][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.518473][ T5807] bridge_slave_0: entered allmulticast mode [ 62.525093][ T5807] bridge_slave_0: entered promiscuous mode [ 62.542062][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.553060][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.577947][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.585070][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.592679][ T5807] bridge_slave_1: entered allmulticast mode [ 62.599983][ T5807] bridge_slave_1: entered promiscuous mode [ 62.639444][ T5816] team0: Port device team_slave_0 added [ 62.647331][ T5810] team0: Port device team_slave_0 added [ 62.662306][ T5820] team0: Port device team_slave_0 added [ 62.671186][ T5820] team0: Port device team_slave_1 added [ 62.684971][ T5816] team0: Port device team_slave_1 added [ 62.692403][ T5810] team0: Port device team_slave_1 added [ 62.708683][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.733737][ T5813] team0: Port device team_slave_0 added [ 62.741010][ T5813] team0: Port device team_slave_1 added [ 62.769313][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.776524][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.802821][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.815713][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.825856][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.834753][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.861016][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.885618][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.892632][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.919036][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.930472][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.938032][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.964249][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.989882][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.997123][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.023102][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.042658][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.049647][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.076403][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.114168][ T5807] team0: Port device team_slave_0 added [ 63.120455][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.127801][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.153936][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.165979][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.172994][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.198889][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.225556][ T5807] team0: Port device team_slave_1 added [ 63.257897][ T5816] hsr_slave_0: entered promiscuous mode [ 63.264103][ T5816] hsr_slave_1: entered promiscuous mode [ 63.275891][ T5810] hsr_slave_0: entered promiscuous mode [ 63.281998][ T5810] hsr_slave_1: entered promiscuous mode [ 63.288036][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.295711][ T5810] Cannot create hsr debugfs directory [ 63.310651][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.317654][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.343671][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.376748][ T5811] Bluetooth: hci1: command tx timeout [ 63.382333][ T5811] Bluetooth: hci2: command tx timeout [ 63.387966][ T5814] Bluetooth: hci0: command tx timeout [ 63.396717][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.403667][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.429996][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.456225][ T5809] Bluetooth: hci4: command tx timeout [ 63.461825][ T5811] Bluetooth: hci3: command tx timeout [ 63.481935][ T5820] hsr_slave_0: entered promiscuous mode [ 63.488009][ T5820] hsr_slave_1: entered promiscuous mode [ 63.493856][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.501934][ T5820] Cannot create hsr debugfs directory [ 63.515648][ T5813] hsr_slave_0: entered promiscuous mode [ 63.521744][ T5813] hsr_slave_1: entered promiscuous mode [ 63.527802][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.535352][ T5813] Cannot create hsr debugfs directory [ 63.645596][ T5807] hsr_slave_0: entered promiscuous mode [ 63.652520][ T5807] hsr_slave_1: entered promiscuous mode [ 63.658812][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.666930][ T5807] Cannot create hsr debugfs directory [ 63.920096][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.933045][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.958927][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.968565][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.993868][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.003793][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.014630][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.030004][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.110110][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.119815][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.132096][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.141676][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.230743][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.238817][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.252348][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.269028][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.279456][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.330477][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.349804][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.359773][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.367031][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.376183][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.383269][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.410764][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.421164][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.431022][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.441543][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.466569][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.506030][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.513237][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.523273][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.530337][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.600427][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.629768][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.651155][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.681168][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.688326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.700568][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 64.700580][ T30] audit: type=1400 audit(1748364452.759:89): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.744285][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.760263][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.767408][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.841409][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.848557][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.861854][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.868920][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.920591][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.932281][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.968415][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.020641][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.039793][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.067143][ T577] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.074269][ T577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.084614][ T577] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.091708][ T577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.121259][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.144375][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.263249][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.365547][ T5810] veth0_vlan: entered promiscuous mode [ 65.378845][ T5816] veth0_vlan: entered promiscuous mode [ 65.395368][ T5810] veth1_vlan: entered promiscuous mode [ 65.407142][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.414935][ T5816] veth1_vlan: entered promiscuous mode [ 65.459768][ T5811] Bluetooth: hci2: command tx timeout [ 65.465199][ T5811] Bluetooth: hci0: command tx timeout [ 65.470717][ T5809] Bluetooth: hci1: command tx timeout [ 65.524245][ T5810] veth0_macvtap: entered promiscuous mode [ 65.538498][ T5811] Bluetooth: hci3: command tx timeout [ 65.543914][ T5811] Bluetooth: hci4: command tx timeout [ 65.561515][ T5816] veth0_macvtap: entered promiscuous mode [ 65.577090][ T5820] veth0_vlan: entered promiscuous mode [ 65.587572][ T5810] veth1_macvtap: entered promiscuous mode [ 65.621823][ T5816] veth1_macvtap: entered promiscuous mode [ 65.644094][ T5820] veth1_vlan: entered promiscuous mode [ 65.654588][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.679969][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.704455][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.714489][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.723658][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.732731][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.745422][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.758580][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.775632][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.784569][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.793503][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.803816][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.819705][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.872310][ T5820] veth0_macvtap: entered promiscuous mode [ 65.903196][ T5820] veth1_macvtap: entered promiscuous mode [ 65.912432][ T5813] veth0_vlan: entered promiscuous mode [ 65.965475][ T4513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.977166][ T5813] veth1_vlan: entered promiscuous mode [ 65.982654][ T4513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.010173][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.028099][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.032549][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.035911][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.048996][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.059791][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.069197][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.078363][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.094627][ T5807] veth0_vlan: entered promiscuous mode [ 66.179219][ T4513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.183872][ T5807] veth1_vlan: entered promiscuous mode [ 66.187446][ T4513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.211411][ T577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.212826][ T5813] veth0_macvtap: entered promiscuous mode [ 66.225584][ T577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.240531][ T30] audit: type=1400 audit(1748364454.299:90): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.izC7cB/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.271390][ T577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.273334][ T30] audit: type=1400 audit(1748364454.299:91): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.304752][ T577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.305595][ T30] audit: type=1400 audit(1748364454.299:92): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.izC7cB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.352174][ T30] audit: type=1400 audit(1748364454.299:93): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.353972][ T5813] veth1_macvtap: entered promiscuous mode [ 66.377447][ T30] audit: type=1400 audit(1748364454.299:94): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.izC7cB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.406320][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.409329][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.423075][ T30] audit: type=1400 audit(1748364454.359:95): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.TMtE9P/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.454439][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.463395][ T30] audit: type=1400 audit(1748364454.359:96): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.483469][ T30] audit: type=1400 audit(1748364454.399:97): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.485721][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.510590][ T30] audit: type=1400 audit(1748364454.409:98): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="gadgetfs" ino=7342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.537466][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.537494][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.568753][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.595550][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.606039][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.624372][ T5807] veth0_macvtap: entered promiscuous mode [ 66.719409][ T5807] veth1_macvtap: entered promiscuous mode [ 66.818518][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.849615][ T577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.864033][ T577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.879698][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.912245][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.923729][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.933353][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.945834][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.001773][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.043679][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.077938][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.106919][ T973] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.160801][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.174218][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.222934][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 67.249931][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.261038][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.268982][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 67.281726][ T973] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 67.287685][ T5861] usb 4-1: config index 0 descriptor too short (expected 29970, got 18) [ 67.310511][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.318754][ T5861] usb 4-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 67.339998][ T973] usb 2-1: Product: syz [ 67.341593][ T5861] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 67.356934][ T5850] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.366758][ T973] usb 2-1: Manufacturer: syz [ 67.379377][ T5861] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 67.382011][ T973] usb 2-1: SerialNumber: syz [ 67.392162][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.428880][ T973] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 67.445275][ T5861] usb 4-1: Product: syz [ 67.485638][ T5861] usb 4-1: Manufacturer: syz [ 67.500609][ T5861] usb 4-1: SerialNumber: syz [ 67.513368][ T5909] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 67.526592][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 67.533670][ T5861] usb 4-1: config 0 descriptor?? [ 67.536665][ T5814] Bluetooth: hci1: command tx timeout [ 67.544529][ T5809] Bluetooth: hci2: command tx timeout [ 67.553192][ T5811] Bluetooth: hci0: command tx timeout [ 67.555470][ T5850] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 67.578185][ T5861] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 67.602683][ T5850] usb 3-1: config 179 has no interface number 0 [ 67.619709][ T5811] Bluetooth: hci4: command tx timeout [ 67.619893][ T5861] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 67.625145][ T5811] Bluetooth: hci3: command tx timeout [ 67.640896][ T5850] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 67.669493][ T5850] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 67.713459][ T5850] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 67.770221][ C1] usb 2-1: ath: unknown panic pattern! [ 67.796149][ T5850] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 67.846620][ T5850] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 67.938952][ T5850] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 67.980106][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.995660][ T5861] usb 4-1: USB disconnect, device number 2 [ 67.998333][ T5857] usb 2-1: USB disconnect, device number 2 [ 68.066687][ T5907] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.306374][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.455091][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 68.487944][ T5863] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 68.519951][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.579747][ T5909] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 68.590438][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.624301][ T5909] ath9k_htc: Failed to initialize the device [ 68.657400][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.675896][ T5857] usb 2-1: ath9k_htc: USB layer deinitialized [ 68.691705][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.724590][ T5863] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.752650][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.776697][ T5863] usb 5-1: config 0 descriptor?? [ 68.792986][ T5919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 68.902440][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.914242][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.044925][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 69.182113][ T5904] usb 3-1: USB disconnect, device number 2 [ 69.182135][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 69.196672][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 69.240796][ T5863] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 69.290100][ T5863] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 69.342112][ T5863] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 69.451666][ T5944] Bluetooth: MGMT ver 1.23 [ 69.558716][ T43] usb 5-1: USB disconnect, device number 2 [ 69.617039][ T5811] Bluetooth: hci0: command tx timeout [ 69.622498][ T5809] Bluetooth: hci2: command tx timeout [ 69.629889][ T5809] Bluetooth: hci1: command tx timeout [ 69.637501][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.696404][ T5811] Bluetooth: hci4: command tx timeout [ 69.794856][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 69.794870][ T30] audit: type=1400 audit(1748364457.849:152): avc: denied { map_read map_write } for pid=5952 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.826250][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 69.838353][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.861561][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 69.878582][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.891548][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.903729][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.936236][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.952843][ T30] audit: type=1400 audit(1748364458.009:153): avc: denied { mount } for pid=5955 comm="syz.0.24" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 69.964314][ T5956] ======================================================= [ 69.964314][ T5956] WARNING: The mand mount option has been deprecated and [ 69.964314][ T5956] and is ignored by this kernel. Remove the mand [ 69.964314][ T5956] option from the mount to silence this warning. [ 69.964314][ T5956] ======================================================= [ 69.976276][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.021536][ T30] audit: type=1400 audit(1748364458.009:154): avc: denied { mounton } for pid=5955 comm="syz.0.24" path="/6/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 70.043867][ T30] audit: type=1400 audit(1748364458.079:155): avc: denied { mount } for pid=5955 comm="syz.0.24" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.066559][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.071827][ T30] audit: type=1400 audit(1748364458.079:156): avc: denied { unmount } for pid=5955 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.077833][ T5850] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.097016][ T30] audit: type=1400 audit(1748364458.129:157): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 70.104206][ T5850] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.135773][ T5850] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.164137][ T5850] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.189264][ T5850] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.205857][ T5960] team0: No ports can be present during mode change [ 70.217597][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.236316][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.241804][ T30] audit: type=1400 audit(1748364458.299:158): avc: denied { create } for pid=5961 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.244326][ T5850] usb 4-1: Product: syz [ 70.304760][ T30] audit: type=1400 audit(1748364458.329:159): avc: denied { setopt } for pid=5961 comm="syz.4.27" lport=130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.325019][ T5850] usb 4-1: Manufacturer: syz [ 70.338056][ T5850] cdc_wdm 4-1:1.0: skipping garbage [ 70.354732][ T30] audit: type=1400 audit(1748364458.329:160): avc: denied { connect } for pid=5961 comm="syz.4.27" lport=130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.354893][ T9] usb 2-1: usb_control_msg returned -32 [ 70.375292][ T30] audit: type=1400 audit(1748364458.329:161): avc: denied { write } for pid=5961 comm="syz.4.27" path="socket:[7150]" dev="sockfs" ino=7150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.407306][ T5850] cdc_wdm 4-1:1.0: skipping garbage [ 70.427866][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 70.434630][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.443300][ T43] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 70.452801][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.463356][ T43] usb 3-1: Product: syz [ 70.464124][ T5850] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 70.476126][ T43] usb 3-1: Manufacturer: syz [ 70.489833][ T43] usb 3-1: SerialNumber: syz [ 70.504212][ T43] usb 3-1: config 0 descriptor?? [ 70.544059][ T9] usbtmc 2-1:16.0: can't read capabilities [ 70.550717][ T5850] cdc_wdm 4-1:1.0: Unknown control protocol [ 70.687407][ T5904] usb 4-1: USB disconnect, device number 3 [ 70.723666][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.821826][ T5974] netlink: 96 bytes leftover after parsing attributes in process `syz.0.31'. [ 70.949407][ T43] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 70.979274][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.986375][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.016239][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.188458][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 71.196870][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 71.207219][ T9] usb 5-1: config 220 has no interface number 2 [ 71.213512][ T9] usb 5-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x74, changing to 0x4 [ 71.227034][ T9] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x4 has an invalid bInterval 58, changing to 9 [ 71.239296][ T9] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x4 has invalid maxpacket 25705, setting to 1024 [ 71.251715][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 71.265532][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 71.276477][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 71.283437][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 71.298135][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 71.309356][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.317444][ T9] usb 5-1: Product: syz [ 71.321618][ T9] usb 5-1: Manufacturer: syz [ 71.326425][ T9] usb 5-1: SerialNumber: syz [ 71.355951][ T43] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 71.546292][ T5857] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.546953][ T9] usb 5-1: selecting invalid altsetting 0 [ 71.564345][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 71.570846][ T9] usb 5-1: No valid video chain found. [ 71.591410][ T9] usb 5-1: selecting invalid altsetting 0 [ 71.591956][ T43] usb 3-1: USB disconnect, device number 3 [ 71.605635][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 71.640397][ T9] usb 5-1: USB disconnect, device number 3 [ 71.713429][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 71.728993][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.740929][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.751051][ T5857] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.765794][ T5857] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 71.775296][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.786536][ T5857] usb 4-1: config 0 descriptor?? [ 72.016911][ T5811] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 72.025711][ T5811] Bluetooth: hci3: Injecting HCI hardware error event [ 72.033252][ T5809] Bluetooth: hci3: hardware error 0x00 [ 72.203771][ T5857] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 72.265625][ T5857] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input8 [ 72.310663][ T9] usb 2-1: USB disconnect, device number 3 [ 72.380403][ T5857] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 72.413134][ T6005] kvm: Disabled LAPIC found during irq injection [ 72.439125][ T5857] usb 4-1: USB disconnect, device number 4 [ 72.596262][ T6011] fido_id[6011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 72.918596][ T9] kernel read not supported for file /input/event3 (pid: 9 comm: kworker/0:0) [ 73.122231][ T6041] netlink: 92 bytes leftover after parsing attributes in process `syz.3.47'. [ 73.452604][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 73.492787][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 73.591802][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 73.604261][ T6066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.687190][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.776453][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 73.838428][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.871330][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.904969][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.926154][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.927019][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 73.953384][ T43] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 73.962911][ T43] usb 4-1: config 0 has no interface number 0 [ 73.964853][ T6058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.982835][ T43] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.000503][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.037071][ T43] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 74.066184][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.094527][ T43] usb 4-1: Product: syz [ 74.098886][ T5809] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 74.114431][ T43] usb 4-1: Manufacturer: syz [ 74.120944][ T43] usb 4-1: SerialNumber: syz [ 74.135521][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 74.138080][ T43] usb 4-1: config 0 descriptor?? [ 74.154585][ T43] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 74.174180][ C0] Unknown status report in ack skb [ 74.196470][ T43] em28xx 4-1:0.132: Video interface 132 found: [ 74.280582][ T6080] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 74.322271][ T5890] Process accounting resumed [ 74.418427][ T6089] wireguard0: entered promiscuous mode [ 74.429587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.444390][ T6089] wireguard0: entered allmulticast mode [ 74.553880][ T9] usb 2-1: USB disconnect, device number 4 [ 74.561592][ T43] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 74.836973][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 74.836986][ T30] audit: type=1400 audit(1748364462.899:209): avc: denied { bind } for pid=6094 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.881297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.966133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.996270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 75.004779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.026096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.035005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.056768][ T30] audit: type=1400 audit(1748364462.969:210): avc: denied { name_bind } for pid=6096 comm="syz.4.70" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 75.078558][ T30] audit: type=1400 audit(1748364462.969:211): avc: denied { node_bind } for pid=6096 comm="syz.4.70" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 75.286402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.430408][ T30] audit: type=1400 audit(1748364463.489:212): avc: denied { ioctl } for pid=6103 comm="syz.1.74" path="socket:[9293]" dev="sockfs" ino=9293 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.454865][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.471458][ T30] audit: type=1400 audit(1748364463.519:213): avc: denied { ioctl } for pid=6102 comm="syz.2.73" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.503274][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 75.549690][ T6108] hsr_slave_1 (unregistering): left promiscuous mode [ 75.703188][ T43] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 75.719494][ T30] audit: type=1400 audit(1748364463.759:214): avc: denied { read write } for pid=6111 comm="syz.1.76" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.754487][ T43] em28xx 4-1:0.132: board has no eeprom [ 75.765714][ T6063] em28xx 4-1:0.132: failed to trigger write to i2c address 0x28 (error=-5) [ 75.782796][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 75.806665][ T30] audit: type=1400 audit(1748364463.759:215): avc: denied { open } for pid=6111 comm="syz.1.76" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.832737][ T30] audit: type=1400 audit(1748364463.759:216): avc: denied { ioctl } for pid=6111 comm="syz.1.76" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.857299][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.869947][ T43] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 75.880604][ T43] em28xx 4-1:0.132: analog set to bulk mode. [ 75.889146][ T5857] em28xx 4-1:0.132: Registering V4L2 extension [ 75.903410][ T43] usb 4-1: USB disconnect, device number 5 [ 75.912252][ T43] em28xx 4-1:0.132: Disconnecting em28xx [ 76.108460][ T975] cfg80211: failed to load regulatory.db [ 76.128726][ T5857] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 76.152784][ T5857] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 76.160130][ T5857] em28xx 4-1:0.132: No AC97 audio processor [ 76.172052][ T5857] usb 4-1: Decoder not found [ 76.176759][ T5857] em28xx 4-1:0.132: failed to create media graph [ 76.183321][ T5857] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 76.193024][ T5857] em28xx 4-1:0.132: Remote control support is not available for this card. [ 76.202866][ T43] em28xx 4-1:0.132: Closing input extension [ 76.217942][ T43] em28xx 4-1:0.132: Freeing device [ 76.336454][ T5811] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 76.337379][ T5809] Bluetooth: hci0: command 0x0c03 tx timeout [ 76.343169][ T6083] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.359283][ T6083] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.379756][ T6083] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.473493][ T6083] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.514115][ T6083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.539519][ T6083] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.561913][ T6083] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.578631][ T6083] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.585956][ T6083] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.601203][ T6083] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.696926][ T30] audit: type=1400 audit(1748364464.749:217): avc: denied { mount } for pid=6136 comm="syz.4.84" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.718583][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.769409][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 76.779604][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 76.789017][ T30] audit: type=1400 audit(1748364464.839:218): avc: denied { bind } for pid=6139 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.854457][ T6142] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.863503][ T6142] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.872279][ T6142] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.882124][ T6142] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.891859][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 76.923737][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 76.935237][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 76.947005][ T6142] Zero length message leads to an empty skb [ 77.047818][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 77.078707][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.113760][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.142770][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 77.169905][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.180303][ T43] usb 2-1: config 0 descriptor?? [ 77.286206][ T975] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.323726][ T5890] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.456442][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 77.465282][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.476352][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 77.489017][ T5890] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 77.506387][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.516332][ T5890] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 77.527956][ T5890] usb 1-1: config 0 has no interface number 0 [ 77.534068][ T5890] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.555078][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.568218][ T5890] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 77.579680][ T975] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 77.588847][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.597980][ T5890] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.613298][ T5890] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 77.619486][ T43] apple 0003:05AC:0245.0003: unknown global tag 0xe [ 77.624353][ T5890] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 77.640354][ T975] usb 3-1: config 0 descriptor?? [ 77.651052][ T5890] usb 1-1: Product: syz [ 77.655232][ T5890] usb 1-1: Manufacturer: syz [ 77.661493][ T43] apple 0003:05AC:0245.0003: item 0 0 1 14 parsing failed [ 77.672349][ T43] apple 0003:05AC:0245.0003: parse failed [ 77.676833][ T5890] usb 1-1: config 0 descriptor?? [ 77.680033][ T43] apple 0003:05AC:0245.0003: probe with driver apple failed with error -22 [ 77.686730][ T6155] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 77.870945][ T43] usb 2-1: USB disconnect, device number 5 [ 78.072525][ T975] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0004/input/input10 [ 78.134426][ T975] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0004/input/input11 [ 78.197116][ T975] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 78.333568][ T5890] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input9 [ 78.358718][ T5850] usb 3-1: USB disconnect, device number 4 [ 78.417349][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.417358][ T5811] Bluetooth: hci0: command 0x0c03 tx timeout [ 78.580031][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.661769][ T5809] Bluetooth: hci4: command 0x0c1a tx timeout [ 78.725448][ T5890] usb 1-1: USB disconnect, device number 2 [ 78.731401][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 79.002126][ T6185] __nla_validate_parse: 2 callbacks suppressed [ 79.002142][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 79.217143][ T6185] hsr_slave_1 (unregistering): left promiscuous mode [ 79.466198][ T5904] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.509780][ T6198] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 79.549506][ T6198] netlink: 172 bytes leftover after parsing attributes in process `syz.3.108'. [ 79.666520][ T5904] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.675153][ T5904] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.718621][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.733469][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 79.746377][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 79.779550][ T5904] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.794692][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.803027][ T5904] usb 3-1: Product: syz [ 79.807406][ T5904] usb 3-1: Manufacturer: syz [ 79.844653][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 79.875911][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 79.903030][ T5904] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 79.923404][ T5904] cdc_wdm 3-1:1.0: Unknown control protocol [ 80.054282][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 80.054299][ T30] audit: type=1326 audit(1748364468.109:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.123167][ T30] audit: type=1326 audit(1748364468.109:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.161014][ T30] audit: type=1326 audit(1748364468.109:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.202079][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.233106][ T30] audit: type=1326 audit(1748364468.109:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.298440][ T30] audit: type=1326 audit(1748364468.109:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.324162][ T30] audit: type=1326 audit(1748364468.109:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.374662][ T30] audit: type=1326 audit(1748364468.109:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.403347][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.409960][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.416731][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.423339][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.425285][ T30] audit: type=1326 audit(1748364468.109:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.430390][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.452727][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.459288][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.469875][ T30] audit: type=1326 audit(1748364468.129:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.476767][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.501034][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.511627][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.518224][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.525723][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.532317][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.538775][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.538806][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.545349][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.557971][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.564562][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.571486][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.578074][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.584312][ T30] audit: type=1326 audit(1748364468.129:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4fd8e969 code=0x7ffc0000 [ 80.588602][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.641637][ T5904] usb 3-1: USB disconnect, device number 5 [ 80.647509][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 80.706106][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.736172][ T5809] Bluetooth: hci4: command 0x0c1a tx timeout [ 80.869458][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 81.069952][ T6235] hsr_slave_1 (unregistering): left promiscuous mode [ 81.274671][ T6243] warning: `syz.0.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.615318][ T6255] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.619761][ T6256] capability: warning: `syz.0.130' uses 32-bit capabilities (legacy support in use) [ 81.641660][ T6260] ================================================================== [ 81.649741][ T6260] BUG: KASAN: use-after-free in __crypto_shash_import+0x241/0x290 [ 81.657555][ T6260] Write of size 1 at addr ffff88817d3a7347 by task syz.2.133/6260 [ 81.665357][ T6260] [ 81.667683][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.2.133 Not tainted 6.15.0-syzkaller-02148-g44ed0f35df34 #0 PREEMPT(full) [ 81.667709][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.667720][ T6260] Call Trace: [ 81.667727][ T6260] [ 81.667734][ T6260] dump_stack_lvl+0x116/0x1f0 [ 81.667764][ T6260] print_report+0xcd/0x680 [ 81.667783][ T6260] ? __virt_addr_valid+0x81/0x610 [ 81.667802][ T6260] ? __phys_addr+0xe8/0x180 [ 81.667820][ T6260] ? __crypto_shash_import+0x241/0x290 [ 81.667844][ T6260] kasan_report+0xe0/0x110 [ 81.667863][ T6260] ? __crypto_shash_import+0x241/0x290 [ 81.667886][ T6260] __crypto_shash_import+0x241/0x290 [ 81.667910][ T6260] crypto_shash_import+0x88/0x260 [ 81.667933][ T6260] crypto_ahash_import+0xcd/0x2a0 [ 81.667951][ T6260] hash_accept+0x33c/0x3d0 [ 81.667969][ T6260] do_accept+0x33e/0x530 [ 81.667998][ T6260] ? __pfx_do_accept+0x10/0x10 [ 81.668031][ T6260] __sys_accept4+0x100/0x1c0 [ 81.668057][ T6260] ? __pfx___sys_accept4+0x10/0x10 [ 81.668084][ T6260] ? xfd_validate_state+0x61/0x180 [ 81.668106][ T6260] ? __sys_setsockopt+0x1c0/0x230 [ 81.668125][ T6260] __x64_sys_accept4+0x96/0x100 [ 81.668151][ T6260] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.668175][ T6260] do_syscall_64+0xcd/0x4c0 [ 81.668207][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.668226][ T6260] RIP: 0033:0x7f7459f8e969 [ 81.668241][ T6260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.668260][ T6260] RSP: 002b:00007f745addc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 81.668277][ T6260] RAX: ffffffffffffffda RBX: 00007f745a1b5fa0 RCX: 00007f7459f8e969 [ 81.668290][ T6260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 81.668301][ T6260] RBP: 00007f745a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 81.668312][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.668322][ T6260] R13: 0000000000000000 R14: 00007f745a1b5fa0 R15: 00007ffcab932b38 [ 81.668338][ T6260] [ 81.668344][ T6260] [ 81.876000][ T6260] The buggy address belongs to the physical page: [ 81.882406][ T6260] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17d3a7 [ 81.891247][ T6260] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 81.898448][ T6260] raw: 057ff00000000000 ffffea0005f4e9c8 ffffea0005f4e9c8 0000000000000000 [ 81.907029][ T6260] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.915604][ T6260] page dumped because: kasan: bad access detected [ 81.922014][ T6260] page_owner info is not present (never set?) [ 81.928064][ T6260] [ 81.930383][ T6260] Memory state around the buggy address: [ 81.936005][ T6260] ffff88817d3a7200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.944063][ T6260] ffff88817d3a7280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.952122][ T6260] >ffff88817d3a7300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.960173][ T6260] ^ [ 81.966324][ T6260] ffff88817d3a7380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.974381][ T6260] ffff88817d3a7400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 81.982436][ T6260] ================================================================== [ 81.990558][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.999915][ T6260] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.007114][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.2.133 Not tainted 6.15.0-syzkaller-02148-g44ed0f35df34 #0 PREEMPT(full) [ 82.018635][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.028682][ T6260] Call Trace: [ 82.031945][ T6260] [ 82.034861][ T6260] dump_stack_lvl+0x3d/0x1f0 [ 82.039447][ T6260] panic+0x71c/0x800 [ 82.043339][ T6260] ? __pfx_panic+0x10/0x10 [ 82.047740][ T6260] ? rcu_is_watching+0x12/0xc0 [ 82.052488][ T6260] ? irqentry_exit+0x3b/0x90 [ 82.057065][ T6260] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.062249][ T6260] ? preempt_schedule_thunk+0x16/0x30 [ 82.067606][ T6260] ? __crypto_shash_import+0x241/0x290 [ 82.073059][ T6260] ? preempt_schedule_common+0x44/0xc0 [ 82.078514][ T6260] ? __crypto_shash_import+0x241/0x290 [ 82.083967][ T6260] check_panic_on_warn+0xab/0xb0 [ 82.088897][ T6260] end_report+0x107/0x170 [ 82.093215][ T6260] kasan_report+0xee/0x110 [ 82.097619][ T6260] ? __crypto_shash_import+0x241/0x290 [ 82.103071][ T6260] __crypto_shash_import+0x241/0x290 [ 82.108346][ T6260] crypto_shash_import+0x88/0x260 [ 82.113358][ T6260] crypto_ahash_import+0xcd/0x2a0 [ 82.118365][ T6260] hash_accept+0x33c/0x3d0 [ 82.122764][ T6260] do_accept+0x33e/0x530 [ 82.127001][ T6260] ? __pfx_do_accept+0x10/0x10 [ 82.131761][ T6260] __sys_accept4+0x100/0x1c0 [ 82.136337][ T6260] ? __pfx___sys_accept4+0x10/0x10 [ 82.141433][ T6260] ? xfd_validate_state+0x61/0x180 [ 82.146526][ T6260] ? __sys_setsockopt+0x1c0/0x230 [ 82.151531][ T6260] __x64_sys_accept4+0x96/0x100 [ 82.156366][ T6260] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.161549][ T6260] do_syscall_64+0xcd/0x4c0 [ 82.166036][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.171914][ T6260] RIP: 0033:0x7f7459f8e969 [ 82.176309][ T6260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.195896][ T6260] RSP: 002b:00007f745addc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 82.204289][ T6260] RAX: ffffffffffffffda RBX: 00007f745a1b5fa0 RCX: 00007f7459f8e969 [ 82.212244][ T6260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 82.220206][ T6260] RBP: 00007f745a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 82.228161][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.236113][ T6260] R13: 0000000000000000 R14: 00007f745a1b5fa0 R15: 00007ffcab932b38 [ 82.244070][ T6260] [ 82.247245][ T6260] Kernel Offset: disabled [ 82.251542][ T6260] Rebooting in 86400 seconds..