last executing test programs: 4.389152435s ago: executing program 0 (id=720): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 4.325387589s ago: executing program 0 (id=723): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.026428236s ago: executing program 0 (id=736): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) fadvise64(0xffffffffffffffff, 0x807f, 0x1000000, 0x4) 2.908561713s ago: executing program 0 (id=739): prctl$PR_GET_DUMPABLE(0x3) socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 1.920773847s ago: executing program 0 (id=748): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="e52684b38c7d56297a1560dc2302d8361feeffb45459d57ad406d84bf888079585770a02652b", 0x26}], 0x1}, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.543995767s ago: executing program 2 (id=751): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.469037735s ago: executing program 2 (id=753): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000027c0)='O', 0x1}], 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x10, 0xa}, {0xe, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40d1}, 0x40dc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.286060023s ago: executing program 2 (id=756): syz_emit_ethernet(0x37, &(0x7f0000000340)={@random="be73ddf0c198", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@generic={0x88f7, "bf414ac988aee9f91a3fb836b7278a280c88edcf6bde056b4acf21fbe10c082ed18c51667cd5ca8f5d"}}}, 0x0) 1.209081935s ago: executing program 2 (id=758): prctl$PR_GET_DUMPABLE(0x3) socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 1.208915255s ago: executing program 4 (id=759): syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cb2, 0x40, 0x5, 0xd6}, &(0x7f0000000100), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.176015047s ago: executing program 4 (id=760): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.130012072s ago: executing program 4 (id=761): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x4000, 0x6, 0x4d, 0xffffffff, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ['\x00', "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) 1.054025782s ago: executing program 4 (id=762): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}}], 0x2, 0x4004040) 1.017591543s ago: executing program 4 (id=764): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 753.285726ms ago: executing program 3 (id=771): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x64, r1, 0x11, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "274c0e23009d84ced1c2e48db6"}]}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x64}}, 0x4) 708.195849ms ago: executing program 1 (id=772): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x791b}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 707.931864ms ago: executing program 4 (id=773): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x40, 0x12, 0x2, "946b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x20, 0x5, 0x2, "9c83"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 688.2099ms ago: executing program 3 (id=774): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}}], 0x2, 0x4004040) 627.776679ms ago: executing program 3 (id=775): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x1, 0x401, 0x1, 0x6dc2, 0xfff, 0x2005, 0x5, 0x3df, 0x100, 0x3ff, 0x4, 0xfffff350, 0x9, 0x9, 0x4, 0x4, 0x2, 0x9, 0x80000089, 0xfffffffe, 0x6, 0xfffffff5, 0x8000, 0x0, 0x3a2, 0x0, 0x1e9f, 0xc6, 0xdffffffa]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 572.484411ms ago: executing program 3 (id=776): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}], 0x2) 571.614884ms ago: executing program 1 (id=777): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = epoll_create1(0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') 488.621165ms ago: executing program 3 (id=778): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x20050800) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 488.446838ms ago: executing program 1 (id=779): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 441.852281ms ago: executing program 3 (id=780): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 440.184639ms ago: executing program 1 (id=781): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000"], 0x48}}, 0x40884) 389.122353ms ago: executing program 1 (id=782): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 360.154098ms ago: executing program 2 (id=783): write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 294.52291ms ago: executing program 0 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 283.223681ms ago: executing program 1 (id=785): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}}], 0x2, 0x4004040) 0s ago: executing program 2 (id=786): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_SETWSUBD(r0, 0x6411) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 66.476763][ T30] audit: type=1400 audit(1761909466.949:62): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.500438][ T30] audit: type=1400 audit(1761909466.969:63): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.503832][ T5797] cgroup: Unknown subsys name 'net' [ 66.529556][ T30] audit: type=1400 audit(1761909466.999:64): avc: denied { unmount } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.674160][ T5797] cgroup: Unknown subsys name 'cpuset' [ 66.682202][ T5797] cgroup: Unknown subsys name 'rlimit' [ 66.809716][ T30] audit: type=1400 audit(1761909467.279:65): avc: denied { setattr } for pid=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.834819][ T30] audit: type=1400 audit(1761909467.279:66): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.855940][ T30] audit: type=1400 audit(1761909467.279:67): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.876391][ T30] audit: type=1400 audit(1761909467.279:68): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.901012][ T30] audit: type=1400 audit(1761909467.279:69): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.926236][ T30] audit: type=1400 audit(1761909467.279:70): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.937766][ T5799] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.949668][ T30] audit: type=1400 audit(1761909467.359:71): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.917147][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.187733][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.195722][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.203230][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.210594][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.216726][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.219172][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.225370][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.239473][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.240309][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.247537][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.254297][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.261064][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.268046][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.275357][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.289644][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.297974][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.305643][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.310979][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.320811][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.321854][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.337172][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.348111][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.356587][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.358090][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.378828][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.871034][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 71.014295][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 71.028645][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 71.118931][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 71.130869][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.137348][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.189733][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 71.243221][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.250281][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.257929][ T5807] bridge_slave_0: entered allmulticast mode [ 71.265218][ T5807] bridge_slave_0: entered promiscuous mode [ 71.276921][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.284021][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.291081][ T5824] bridge_slave_0: entered allmulticast mode [ 71.297952][ T5824] bridge_slave_0: entered promiscuous mode [ 71.330190][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.337430][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.344661][ T5807] bridge_slave_1: entered allmulticast mode [ 71.351702][ T5807] bridge_slave_1: entered promiscuous mode [ 71.362326][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.369415][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.376767][ T5824] bridge_slave_1: entered allmulticast mode [ 71.383762][ T5824] bridge_slave_1: entered promiscuous mode [ 71.402392][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.409460][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.416605][ T5808] bridge_slave_0: entered allmulticast mode [ 71.423332][ T5808] bridge_slave_0: entered promiscuous mode [ 71.462949][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.470414][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.477903][ T5808] bridge_slave_1: entered allmulticast mode [ 71.484723][ T5808] bridge_slave_1: entered promiscuous mode [ 71.515368][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.548098][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.568492][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.597358][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.606872][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.614122][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.621346][ T5811] bridge_slave_0: entered allmulticast mode [ 71.628184][ T5811] bridge_slave_0: entered promiscuous mode [ 71.644218][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.651461][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.658671][ T5810] bridge_slave_0: entered allmulticast mode [ 71.665738][ T5810] bridge_slave_0: entered promiscuous mode [ 71.674928][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.704554][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.712013][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.719126][ T5811] bridge_slave_1: entered allmulticast mode [ 71.726082][ T5811] bridge_slave_1: entered promiscuous mode [ 71.741319][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.748415][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.755842][ T5810] bridge_slave_1: entered allmulticast mode [ 71.762655][ T5810] bridge_slave_1: entered promiscuous mode [ 71.771054][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.799832][ T5807] team0: Port device team_slave_0 added [ 71.816424][ T5824] team0: Port device team_slave_0 added [ 71.834651][ T5808] team0: Port device team_slave_0 added [ 71.850536][ T5807] team0: Port device team_slave_1 added [ 71.866920][ T5824] team0: Port device team_slave_1 added [ 71.874335][ T5808] team0: Port device team_slave_1 added [ 71.882715][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.902591][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.930081][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.950750][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.987359][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.995063][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.021443][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.041945][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.048873][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.075148][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.086737][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.093707][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.119898][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.140101][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.147122][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.173939][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.195025][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.202236][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.228324][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.239923][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.247196][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.273119][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.285354][ T5810] team0: Port device team_slave_0 added [ 72.303526][ T5811] team0: Port device team_slave_0 added [ 72.327170][ T5810] team0: Port device team_slave_1 added [ 72.346408][ T5811] team0: Port device team_slave_1 added [ 72.387241][ T5824] hsr_slave_0: entered promiscuous mode [ 72.393226][ T5820] Bluetooth: hci1: command tx timeout [ 72.399694][ T5824] hsr_slave_1: entered promiscuous mode [ 72.405876][ T52] Bluetooth: hci4: command tx timeout [ 72.411619][ T5820] Bluetooth: hci0: command tx timeout [ 72.455694][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.463056][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.489263][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.499903][ T52] Bluetooth: hci2: command tx timeout [ 72.501595][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.505909][ T5820] Bluetooth: hci3: command tx timeout [ 72.512354][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.543981][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.555554][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.562729][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.588782][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.603438][ T5808] hsr_slave_0: entered promiscuous mode [ 72.609502][ T5808] hsr_slave_1: entered promiscuous mode [ 72.615650][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 72.621451][ T5808] Cannot create hsr debugfs directory [ 72.644699][ T5807] hsr_slave_0: entered promiscuous mode [ 72.650720][ T5807] hsr_slave_1: entered promiscuous mode [ 72.657035][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 72.662854][ T5807] Cannot create hsr debugfs directory [ 72.675066][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.682076][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.708372][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.792107][ T5810] hsr_slave_0: entered promiscuous mode [ 72.798458][ T5810] hsr_slave_1: entered promiscuous mode [ 72.805139][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 72.810847][ T5810] Cannot create hsr debugfs directory [ 72.937048][ T5811] hsr_slave_0: entered promiscuous mode [ 72.943523][ T5811] hsr_slave_1: entered promiscuous mode [ 72.949413][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 72.955152][ T5811] Cannot create hsr debugfs directory [ 73.273974][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.286989][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.297745][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.314312][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.360961][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.372895][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.387085][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.404909][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.480021][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.496606][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.506999][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.516446][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.575233][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.627888][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.635165][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.647293][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.658380][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.667841][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.697890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.705109][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.733414][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.740473][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.818576][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.840001][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.849885][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.864502][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.884280][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.895858][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.929031][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.936150][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.968092][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.995376][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.002524][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.006340][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 74.006353][ T30] audit: type=1400 audit(1761909474.479:86): avc: denied { sys_module } for pid=5824 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.109733][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.148877][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.156101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.167965][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.175100][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.212828][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.290348][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.326350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.333500][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.350347][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.357484][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.376167][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.395042][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.477087][ T5820] Bluetooth: hci0: command tx timeout [ 74.482791][ T52] Bluetooth: hci4: command tx timeout [ 74.482801][ T5135] Bluetooth: hci1: command tx timeout [ 74.514744][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.527953][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.535092][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.549679][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.553802][ T52] Bluetooth: hci3: command tx timeout [ 74.565993][ T5820] Bluetooth: hci2: command tx timeout [ 74.608841][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.621154][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.628305][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.646886][ T5824] veth0_vlan: entered promiscuous mode [ 74.703207][ T5824] veth1_vlan: entered promiscuous mode [ 74.719895][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.818152][ T5824] veth0_macvtap: entered promiscuous mode [ 74.860957][ T5824] veth1_macvtap: entered promiscuous mode [ 74.920870][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.948239][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.968585][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.983159][ T5808] veth0_vlan: entered promiscuous mode [ 74.996933][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.028433][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.055025][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.078851][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.108927][ T5808] veth1_vlan: entered promiscuous mode [ 75.196623][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.208293][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.245790][ T5810] veth0_vlan: entered promiscuous mode [ 75.253649][ T5808] veth0_macvtap: entered promiscuous mode [ 75.264602][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.293233][ T5808] veth1_macvtap: entered promiscuous mode [ 75.302765][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.306045][ T5807] veth0_vlan: entered promiscuous mode [ 75.316478][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.320978][ T5810] veth1_vlan: entered promiscuous mode [ 75.346209][ T30] audit: type=1400 audit(1761909475.819:87): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.62k0c7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.377581][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.386149][ T30] audit: type=1400 audit(1761909475.819:88): avc: denied { mount } for pid=5824 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.413633][ T30] audit: type=1400 audit(1761909475.819:89): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.62k0c7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.442448][ T30] audit: type=1400 audit(1761909475.819:90): avc: denied { mount } for pid=5824 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.450129][ T5811] veth0_vlan: entered promiscuous mode [ 75.464656][ T30] audit: type=1400 audit(1761909475.819:91): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.62k0c7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.496874][ T30] audit: type=1400 audit(1761909475.819:92): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.62k0c7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.532903][ T5807] veth1_vlan: entered promiscuous mode [ 75.534326][ T30] audit: type=1400 audit(1761909475.819:93): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.557628][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.567050][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.568354][ T30] audit: type=1400 audit(1761909475.859:94): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.599181][ T5811] veth1_vlan: entered promiscuous mode [ 75.611332][ T30] audit: type=1400 audit(1761909475.859:95): avc: denied { mount } for pid=5824 comm="syz-executor" name="/" dev="gadgetfs" ino=8221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.643838][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.664201][ T5810] veth0_macvtap: entered promiscuous mode [ 75.692343][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.702047][ T5807] veth0_macvtap: entered promiscuous mode [ 75.738172][ T5810] veth1_macvtap: entered promiscuous mode [ 75.747511][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.762574][ T5807] veth1_macvtap: entered promiscuous mode [ 75.775421][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.125898][ T5811] veth0_macvtap: entered promiscuous mode [ 76.194773][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.211120][ T5811] veth1_macvtap: entered promiscuous mode [ 76.228359][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.275391][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.293188][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.318598][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.333771][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.349308][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.358604][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.426468][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.436430][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.449689][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.463690][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.468516][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.525077][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.547084][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.555247][ T52] Bluetooth: hci4: command tx timeout [ 76.560642][ T5820] Bluetooth: hci0: command tx timeout [ 76.561786][ T52] Bluetooth: hci1: command tx timeout [ 76.590211][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.611021][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.631970][ T52] Bluetooth: hci3: command tx timeout [ 76.631978][ T5135] Bluetooth: hci2: command tx timeout [ 76.668532][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.691491][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.700703][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.715870][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.741774][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.757514][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.816465][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.841138][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.861828][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.972691][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.980514][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.071527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.080341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.124245][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.138441][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.312808][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.320646][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.368227][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.378459][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.513498][ T5947] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 77.711968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 77.814335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.851139][ T5947] bridge0: entered promiscuous mode [ 77.856627][ T5947] macvlan2: entered promiscuous mode [ 78.281595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.641379][ T5820] Bluetooth: hci1: command tx timeout [ 78.647219][ T52] Bluetooth: hci4: command tx timeout [ 78.711360][ T5820] Bluetooth: hci3: command tx timeout [ 78.716985][ T52] Bluetooth: hci2: command tx timeout [ 78.722493][ T5135] Bluetooth: hci0: command tx timeout [ 79.003099][ T5957] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 79.031917][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 79.031933][ T30] audit: type=1400 audit(1761909479.459:128): avc: denied { read } for pid=5939 comm="syz.1.7" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.350121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.476120][ T30] audit: type=1400 audit(1761909479.459:129): avc: denied { open } for pid=5939 comm="syz.1.7" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.554649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.662748][ T30] audit: type=1400 audit(1761909479.459:130): avc: denied { ioctl } for pid=5939 comm="syz.1.7" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.693173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.718919][ T30] audit: type=1400 audit(1761909479.469:131): avc: denied { append } for pid=5939 comm="syz.1.7" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.810969][ T30] audit: type=1400 audit(1761909479.649:132): avc: denied { create } for pid=5950 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.897347][ T30] audit: type=1400 audit(1761909479.659:133): avc: denied { write } for pid=5950 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.007832][ T30] audit: type=1400 audit(1761909479.729:134): avc: denied { create } for pid=5950 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.160313][ T30] audit: type=1400 audit(1761909479.739:135): avc: denied { create } for pid=5950 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.192009][ T30] audit: type=1400 audit(1761909479.789:136): avc: denied { create } for pid=5950 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.214906][ T30] audit: type=1400 audit(1761909479.799:137): avc: denied { read } for pid=5950 comm="syz.3.4" path="socket:[8886]" dev="sockfs" ino=8886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.403378][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 80.471684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.481588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 82.179491][ T24] cfg80211: failed to load regulatory.db [ 82.411972][ T5990] overlayfs: failed to resolve './bus': -2 [ 83.066253][ T6002] bridge0: entered promiscuous mode [ 83.071938][ T6002] macvlan2: entered promiscuous mode [ 84.123906][ T6006] bridge0: entered promiscuous mode [ 84.129289][ T6006] macvlan2: entered promiscuous mode [ 84.829133][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 84.829149][ T30] audit: type=1400 audit(1761909485.299:148): avc: denied { write } for pid=6018 comm="syz.4.26" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.204967][ T6028] macvlan3: entered promiscuous mode [ 85.539824][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.570900][ T6031] overlayfs: failed to resolve './bus': -2 [ 85.961348][ T5879] usb 5-1: device descriptor read/64, error -71 [ 86.431312][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.065770][ T30] audit: type=1400 audit(1761909490.509:149): avc: denied { read write } for pid=6049 comm="syz.2.34" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.321638][ T30] audit: type=1400 audit(1761909490.509:150): avc: denied { open } for pid=6049 comm="syz.2.34" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.543781][ T30] audit: type=1400 audit(1761909490.509:151): avc: denied { setopt } for pid=6049 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.597823][ T30] audit: type=1400 audit(1761909490.509:152): avc: denied { bind } for pid=6049 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.343706][ T6074] exFAT-fs (nullb0): invalid boot record signature [ 91.350341][ T6074] exFAT-fs (nullb0): failed to read boot sector [ 91.356699][ T6074] exFAT-fs (nullb0): failed to recognize exfat type [ 91.927684][ T30] audit: type=1400 audit(1761909491.809:153): avc: denied { mounton } for pid=6066 comm="syz.1.38" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 92.351564][ T6082] bridge0: entered promiscuous mode [ 92.358930][ T6082] macvlan2: entered promiscuous mode [ 92.775867][ T6085] overlayfs: failed to resolve './bus': -2 [ 94.501491][ T30] audit: type=1400 audit(1761909494.909:154): avc: denied { map_read map_write } for pid=6097 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.786281][ T30] audit: type=1400 audit(1761909494.919:155): avc: denied { name_bind } for pid=6097 comm="syz.4.46" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 94.892332][ T30] audit: type=1400 audit(1761909494.919:156): avc: denied { node_bind } for pid=6097 comm="syz.4.46" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 95.738047][ T6129] overlayfs: failed to resolve './bus': -2 [ 96.741503][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.947916][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 97.009949][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 97.122927][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 97.148591][ T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 97.161243][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.170743][ T24] usb 1-1: Product: syz [ 97.175041][ T24] usb 1-1: Manufacturer: syz [ 97.179684][ T24] usb 1-1: SerialNumber: syz [ 97.332592][ T24] usb 1-1: config 0 descriptor?? [ 97.340283][ T6142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.350372][ T30] audit: type=1400 audit(1761909497.809:157): avc: denied { read write } for pid=6150 comm="syz.1.64" name="mouse0" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 97.350446][ T6142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.402732][ T30] audit: type=1400 audit(1761909497.809:158): avc: denied { open } for pid=6150 comm="syz.1.64" path="/dev/input/mouse0" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 97.430203][ T24] usb 1-1: ucan: probing device on interface #0 [ 97.439372][ T30] audit: type=1400 audit(1761909497.829:159): avc: denied { map } for pid=6150 comm="syz.1.64" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.464158][ T30] audit: type=1400 audit(1761909497.829:160): avc: denied { read write } for pid=6150 comm="syz.1.64" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.458651][ T1057] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.628813][ T24] ucan 1-1:0.0 can0: registered device [ 98.891821][ T1057] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 98.901876][ T1057] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 98.948178][ T1057] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 98.951914][ T24] ucan 1-1:0.0 can0: firmware string: [ 98.968861][ T6175] overlayfs: failed to resolve './bus': -2 [ 99.159787][ T1057] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 99.313205][ T24] usb 1-1: USB disconnect, device number 2 [ 99.336538][ T1057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.371246][ T1057] usb 5-1: Product: syz [ 99.375435][ T1057] usb 5-1: Manufacturer: syz [ 99.414131][ T1057] usb 5-1: SerialNumber: syz [ 99.452114][ T1057] usb 5-1: config 0 descriptor?? [ 99.475956][ T6167] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 99.501114][ T6167] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 99.563098][ T1057] usb 5-1: ucan: probing device on interface #0 [ 100.208542][ T1057] ucan 5-1:0.0 can0: registered device [ 100.259693][ T30] audit: type=1400 audit(1761909500.729:161): avc: denied { write } for pid=6203 comm="syz.3.79" name="mcfilter6" dev="proc" ino=4026533443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 100.446412][ T1057] ucan 5-1:0.0 can0: firmware string: [ 100.717414][ T24] usb 5-1: USB disconnect, device number 4 [ 101.348249][ T6221] overlayfs: failed to resolve './bus': -2 [ 102.001783][ T6237] overlayfs: missing 'lowerdir' [ 102.330879][ T6243] macvlan4: entered promiscuous mode [ 103.707381][ T6260] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.94'. [ 105.798750][ T6279] overlayfs: failed to resolve './bus': -2 [ 106.943323][ T6301] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.104'. [ 111.241664][ T6359] macvlan3: entered promiscuous mode [ 111.645464][ T6362] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.118'. [ 114.026419][ T6395] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.127'. [ 115.143212][ T6414] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.131'. [ 115.810440][ T6418] overlayfs: failed to resolve './bus': -2 [ 116.664255][ T6424] Zero length message leads to an empty skb [ 117.547109][ T6438] syz.1.139 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.729832][ T30] audit: type=1400 audit(1761909518.189:162): avc: denied { read } for pid=6445 comm="syz.2.141" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.836748][ T30] audit: type=1400 audit(1761909518.189:163): avc: denied { open } for pid=6445 comm="syz.2.141" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.924134][ T30] audit: type=1400 audit(1761909518.199:164): avc: denied { ioctl } for pid=6445 comm="syz.2.141" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.007253][ T30] audit: type=1400 audit(1761909518.199:165): avc: denied { set_context_mgr } for pid=6445 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 118.031305][ T30] audit: type=1400 audit(1761909518.239:166): avc: denied { map } for pid=6445 comm="syz.2.141" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.074232][ T30] audit: type=1400 audit(1761909518.239:167): avc: denied { call } for pid=6445 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 120.163955][ T30] audit: type=1400 audit(1761909520.639:168): avc: denied { unlink } for pid=6495 comm="syz.4.158" name="#1" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.331696][ T30] audit: type=1400 audit(1761909520.799:169): avc: denied { mount } for pid=6495 comm="syz.4.158" name="/" dev="overlay" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.495899][ T30] audit: type=1400 audit(1761909524.969:170): avc: denied { ioctl } for pid=6543 comm="syz.3.172" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13941 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.821164][ T6571] overlayfs: failed to resolve './bus': -2 [ 127.742047][ T1057] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.063519][ T1057] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.098031][ T1057] usb 2-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 128.201367][ T1057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.670293][ T1057] usb 2-1: Product: syz [ 130.572701][ T1057] usb 2-1: Manufacturer: syz [ 130.577390][ T1057] usb 2-1: SerialNumber: syz [ 131.863967][ T1057] usb 2-1: can't set config #8, error -71 [ 132.216056][ T1057] usb 2-1: USB disconnect, device number 2 [ 132.555395][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.584925][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.339597][ T6631] overlayfs: failed to resolve './bus': -2 [ 133.808363][ T30] audit: type=1400 audit(1761909534.269:171): avc: denied { create } for pid=6641 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 134.311298][ T6646] mmap: syz.0.200 (6646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.386306][ T6646] tipc: Started in network mode [ 134.391426][ T6646] tipc: Node identity , cluster identity 4711 [ 134.397581][ T6646] tipc: Failed to set node id, please configure manually [ 134.405236][ T6646] tipc: Enabling of bearer rejected, failed to enable media [ 134.413701][ T30] audit: type=1400 audit(1761909534.839:172): avc: denied { create } for pid=6641 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 134.500873][ T6655] macvlan3: entered promiscuous mode [ 134.509025][ T30] audit: type=1400 audit(1761909534.849:173): avc: denied { write } for pid=6641 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 134.572160][ T6656] macvlan4: entered promiscuous mode [ 135.061418][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.231720][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 135.285835][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 135.395622][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 135.497156][ T5902] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 135.571297][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.630402][ T5902] usb 3-1: Product: syz [ 135.645309][ T5902] usb 3-1: Manufacturer: syz [ 135.650663][ T5902] usb 3-1: SerialNumber: syz [ 135.676284][ T5902] usb 3-1: config 0 descriptor?? [ 135.693357][ T6660] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.706494][ T6660] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.723526][ T5902] usb 3-1: ucan: probing device on interface #0 [ 136.912540][ T5902] ucan 3-1:0.0 can0: registered device [ 136.920281][ T5902] ucan 3-1:0.0 can0: firmware string: unknown [ 137.147703][ T30] audit: type=1400 audit(1761909537.619:174): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.199296][ T30] audit: type=1400 audit(1761909537.619:175): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.259709][ T30] audit: type=1400 audit(1761909537.619:176): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.694690][ T30] audit: type=1400 audit(1761909538.139:177): avc: denied { read open } for pid=6707 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.919142][ T30] audit: type=1400 audit(1761909538.139:178): avc: denied { getattr } for pid=6707 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.071003][ T5902] usb 3-1: USB disconnect, device number 2 [ 139.076806][ T30] audit: type=1400 audit(1761909538.169:179): avc: denied { getattr } for pid=6707 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.810385][ T30] audit: type=1400 audit(1761909540.269:180): avc: denied { read } for pid=6714 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.895351][ T30] audit: type=1400 audit(1761909540.279:181): avc: denied { open } for pid=6714 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.440828][ T30] audit: type=1400 audit(1761909541.909:182): avc: denied { add_name } for pid=6700 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.528371][ T30] audit: type=1400 audit(1761909541.909:183): avc: denied { create } for pid=6700 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.551315][ T30] audit: type=1400 audit(1761909541.909:184): avc: denied { write } for pid=6700 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2818 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.582391][ T30] audit: type=1400 audit(1761909541.909:185): avc: denied { append } for pid=6700 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2818 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.690328][ T30] audit: type=1400 audit(1761909542.159:186): avc: denied { remove_name } for pid=6755 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2818 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.757673][ T30] audit: type=1400 audit(1761909542.159:187): avc: denied { unlink } for pid=6755 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2818 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.909320][ T6814] macvlan5: entered promiscuous mode [ 144.313659][ T6825] warning: `syz.1.246' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.454435][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 144.454484][ T30] audit: type=1400 audit(1761909544.879:191): avc: denied { create } for pid=6821 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 145.502903][ T30] audit: type=1400 audit(1761909544.969:192): avc: denied { sys_admin } for pid=6821 comm="syz.1.246" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 145.611300][ T30] audit: type=1400 audit(1761909546.079:193): avc: denied { ioctl } for pid=6821 comm="syz.1.246" path="/newroot/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 145.724590][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 147.418712][ T6844] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.247'. [ 147.621082][ T6848] bridge0: entered promiscuous mode [ 147.626789][ T6848] macvlan2: entered promiscuous mode [ 148.445159][ T30] audit: type=1400 audit(1761909548.919:194): avc: denied { block_suspend } for pid=6855 comm="syz.0.255" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.736823][ T6858] macvlan3: entered promiscuous mode [ 149.498484][ T6860] fuse: Bad value for 'fd' [ 149.869869][ T30] audit: type=1400 audit(1761909550.139:195): avc: denied { create } for pid=6855 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.534936][ T6873] overlayfs: failed to resolve './bus': -2 [ 151.627306][ T6890] macvlan4: entered promiscuous mode [ 153.827350][ T6916] overlayfs: failed to resolve './bus': -2 [ 154.574869][ T6914] macvlan5: entered promiscuous mode [ 155.157288][ T6931] macvlan3: entered promiscuous mode [ 155.417546][ T6933] syz.2.275 uses obsolete (PF_INET,SOCK_PACKET) [ 155.424532][ T30] audit: type=1400 audit(1761909555.899:196): avc: denied { create } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.498067][ T6936] fuse: Bad value for 'fd' [ 155.633350][ T30] audit: type=1400 audit(1761909555.989:197): avc: denied { create } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.837428][ T30] audit: type=1400 audit(1761909555.999:198): avc: denied { create } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.062106][ T30] audit: type=1400 audit(1761909556.069:199): avc: denied { create } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.287317][ T30] audit: type=1400 audit(1761909556.079:200): avc: denied { setopt } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.461454][ T30] audit: type=1400 audit(1761909556.079:201): avc: denied { write } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.481450][ T30] audit: type=1400 audit(1761909556.079:202): avc: denied { nlmsg_write } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.501923][ T30] audit: type=1400 audit(1761909556.089:203): avc: denied { write } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.521318][ T30] audit: type=1400 audit(1761909556.089:204): avc: denied { connect } for pid=6932 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.540847][ T30] audit: type=1400 audit(1761909556.089:205): avc: denied { name_connect } for pid=6932 comm="syz.2.275" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 156.692320][ T6941] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 157.286117][ T6951] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 157.901491][ T6965] exFAT-fs (nullb0): invalid boot record signature [ 157.908049][ T6965] exFAT-fs (nullb0): failed to read boot sector [ 157.914394][ T6965] exFAT-fs (nullb0): failed to recognize exfat type [ 159.940964][ T6986] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.292'. [ 160.629947][ T7007] FAULT_INJECTION: forcing a failure. [ 160.629947][ T7007] name failslab, interval 1, probability 0, space 0, times 1 [ 160.752906][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.1.297 Not tainted syzkaller #0 PREEMPT(full) [ 160.752932][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.752946][ T7007] Call Trace: [ 160.752952][ T7007] [ 160.752960][ T7007] dump_stack_lvl+0x16c/0x1f0 [ 160.752994][ T7007] should_fail_ex+0x512/0x640 [ 160.753014][ T7007] ? fs_reclaim_acquire+0xae/0x150 [ 160.753035][ T7007] should_failslab+0xc2/0x120 [ 160.753055][ T7007] __kmalloc_noprof+0xdd/0x880 [ 160.753077][ T7007] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 160.753100][ T7007] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 160.753117][ T7007] tomoyo_realpath_from_path+0xc2/0x6e0 [ 160.753138][ T7007] ? tomoyo_profile+0x47/0x60 [ 160.753160][ T7007] tomoyo_path_number_perm+0x245/0x580 [ 160.753184][ T7007] ? tomoyo_path_number_perm+0x237/0x580 [ 160.753210][ T7007] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.753236][ T7007] ? find_held_lock+0x2b/0x80 [ 160.753277][ T7007] ? find_held_lock+0x2b/0x80 [ 160.753296][ T7007] ? hook_file_ioctl_common+0x145/0x410 [ 160.753322][ T7007] ? __fget_files+0x20e/0x3c0 [ 160.753342][ T7007] security_file_ioctl+0x9b/0x240 [ 160.753362][ T7007] __x64_sys_ioctl+0xb7/0x210 [ 160.753386][ T7007] do_syscall_64+0xcd/0xfa0 [ 160.753412][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.753428][ T7007] RIP: 0033:0x7fe7c178efc9 [ 160.753444][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.753458][ T7007] RSP: 002b:00007fe7c258c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.753474][ T7007] RAX: ffffffffffffffda RBX: 00007fe7c19e5fa0 RCX: 00007fe7c178efc9 [ 160.753485][ T7007] RDX: 0000200000000140 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 160.753494][ T7007] RBP: 00007fe7c258c090 R08: 0000000000000000 R09: 0000000000000000 [ 160.753504][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.753513][ T7007] R13: 00007fe7c19e6038 R14: 00007fe7c19e5fa0 R15: 00007ffdc83f91c8 [ 160.753537][ T7007] [ 160.753643][ T7007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.186187][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 161.186201][ T30] audit: type=1400 audit(1761909561.659:209): avc: denied { ioctl } for pid=7002 comm="syz.1.297" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.291399][ T5902] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 162.306438][ T7030] fuse: Bad value for 'fd' [ 162.642839][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 162.654768][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 162.667105][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 162.685215][ T5902] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 162.697903][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.724140][ T5902] usb 1-1: Product: syz [ 162.728347][ T5902] usb 1-1: Manufacturer: syz [ 162.758416][ T5902] usb 1-1: SerialNumber: syz [ 162.791130][ T5902] usb 1-1: config 0 descriptor?? [ 162.802238][ T7025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.810549][ T7025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.839987][ T5902] usb 1-1: ucan: probing device on interface #0 [ 163.041429][ T7047] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.310'. [ 163.921801][ T5902] usb 1-1: ucan: could not read protocol version, ret=-110 [ 163.929048][ T5902] usb 1-1: ucan: probe failed; try to update the device firmware [ 164.540099][ T7056] macvlan4: entered promiscuous mode [ 164.864220][ T30] audit: type=1400 audit(1761909564.949:210): avc: denied { execute } for pid=7051 comm="syz.3.313" name="file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.926604][ T30] audit: type=1400 audit(1761909564.959:211): avc: denied { execute_no_trans } for pid=7051 comm="syz.3.313" path="/59/file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.205281][ T30] audit: type=1400 audit(1761909565.679:212): avc: denied { write } for pid=7067 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 165.225083][ T7068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.318'. [ 165.947713][ T5812] usb 1-1: USB disconnect, device number 3 [ 166.552413][ T5812] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.905396][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.944474][ T5812] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 167.061064][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.166493][ T5812] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 167.175601][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.185756][ T5812] usb 1-1: Product: syz [ 167.198837][ T5812] usb 1-1: Manufacturer: syz [ 167.203503][ T5812] usb 1-1: SerialNumber: syz [ 167.222295][ T5812] usb 1-1: config 0 descriptor?? [ 167.233889][ T7094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.309809][ T5812] usb 1-1: ucan: probing device on interface #0 [ 167.335709][ T5812] usb 1-1: ucan: invalid EP count (1) [ 167.341177][ T5812] usb 1-1: ucan: probe failed; try to update the device firmware [ 168.663353][ T30] audit: type=1400 audit(1761909568.699:213): avc: denied { create } for pid=7125 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.723885][ T30] audit: type=1400 audit(1761909569.189:214): avc: denied { mounton } for pid=7121 comm="syz.1.333" path="/68/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.931308][ T5902] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.081268][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 169.090230][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.123818][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 169.147099][ T5902] usb 5-1: can't read configurations, error -61 [ 169.154160][ T5812] usb 1-1: USB disconnect, device number 4 [ 169.572388][ T5902] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.949293][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 170.100927][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.150950][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 170.185887][ T5902] usb 5-1: can't read configurations, error -61 [ 170.221976][ T5902] usb usb5-port1: attempt power cycle [ 170.362456][ T30] audit: type=1400 audit(1761909570.829:215): avc: denied { read } for pid=7159 comm="syz.2.342" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.401908][ T30] audit: type=1400 audit(1761909570.829:216): avc: denied { open } for pid=7159 comm="syz.2.342" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.525952][ T30] audit: type=1400 audit(1761909570.839:217): avc: denied { ioctl } for pid=7159 comm="syz.2.342" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.563810][ T30] audit: type=1400 audit(1761909570.869:218): avc: denied { setopt } for pid=7159 comm="syz.2.342" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.815109][ T7168] macvlan4: entered promiscuous mode [ 171.134479][ T5902] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.345838][ T7172] fuse: Bad value for 'fd' [ 171.459055][ T30] audit: type=1400 audit(1761909571.829:219): avc: denied { create } for pid=7170 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.516443][ T5902] usb 5-1: device not accepting address 7, error -71 [ 171.781178][ T30] audit: type=1400 audit(1761909571.889:220): avc: denied { bind } for pid=7170 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.108423][ T30] audit: type=1400 audit(1761909571.899:221): avc: denied { write } for pid=7170 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.628823][ T7177] macvlan5: entered promiscuous mode [ 172.654588][ T7189] exFAT-fs (nullb0): invalid boot record signature [ 172.661163][ T7189] exFAT-fs (nullb0): failed to read boot sector [ 172.667526][ T7189] exFAT-fs (nullb0): failed to recognize exfat type [ 173.287647][ T30] audit: type=1400 audit(1761909573.759:222): avc: denied { ioctl } for pid=7193 comm="syz.3.352" path="socket:[19094]" dev="sockfs" ino=19094 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.691529][ T7207] FAULT_INJECTION: forcing a failure. [ 173.691529][ T7207] name failslab, interval 1, probability 0, space 0, times 0 [ 173.721721][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.4.355 Not tainted syzkaller #0 PREEMPT(full) [ 173.721748][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.721758][ T7207] Call Trace: [ 173.721765][ T7207] [ 173.721772][ T7207] dump_stack_lvl+0x16c/0x1f0 [ 173.721804][ T7207] should_fail_ex+0x512/0x640 [ 173.721827][ T7207] ? fs_reclaim_acquire+0xae/0x150 [ 173.721851][ T7207] should_failslab+0xc2/0x120 [ 173.721874][ T7207] __kmalloc_noprof+0xdd/0x880 [ 173.721900][ T7207] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 173.721928][ T7207] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 173.721948][ T7207] tomoyo_realpath_from_path+0xc2/0x6e0 [ 173.721973][ T7207] ? tomoyo_profile+0x47/0x60 [ 173.721999][ T7207] tomoyo_path_number_perm+0x245/0x580 [ 173.722027][ T7207] ? tomoyo_path_number_perm+0x237/0x580 [ 173.722047][ T7207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.722064][ T7207] ? find_held_lock+0x2b/0x80 [ 173.722091][ T7207] ? find_held_lock+0x2b/0x80 [ 173.722103][ T7207] ? hook_file_ioctl_common+0x145/0x410 [ 173.722121][ T7207] ? __fget_files+0x20e/0x3c0 [ 173.722134][ T7207] security_file_ioctl+0x9b/0x240 [ 173.722147][ T7207] __x64_sys_ioctl+0xb7/0x210 [ 173.722164][ T7207] do_syscall_64+0xcd/0xfa0 [ 173.722181][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.722192][ T7207] RIP: 0033:0x7f5ab1f8efc9 [ 173.722202][ T7207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.722212][ T7207] RSP: 002b:00007f5ab2dcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.722222][ T7207] RAX: ffffffffffffffda RBX: 00007f5ab21e5fa0 RCX: 00007f5ab1f8efc9 [ 173.722229][ T7207] RDX: 0000000000000000 RSI: 000000000000641f RDI: 0000000000000003 [ 173.722235][ T7207] RBP: 00007f5ab2dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 173.722241][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.722247][ T7207] R13: 00007f5ab21e6038 R14: 00007f5ab21e5fa0 R15: 00007ffcae0ccad8 [ 173.722262][ T7207] [ 173.722952][ T7207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.964203][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 173.964213][ T30] audit: type=1400 audit(1761909574.439:225): avc: denied { ioctl } for pid=7206 comm="syz.4.355" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x641f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 175.110848][ T7233] exFAT-fs (nullb0): invalid boot record signature [ 175.117488][ T7233] exFAT-fs (nullb0): failed to read boot sector [ 175.123908][ T7233] exFAT-fs (nullb0): failed to recognize exfat type [ 175.989611][ T7246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.364'. [ 177.986964][ T7274] FAULT_INJECTION: forcing a failure. [ 177.986964][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 178.000353][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.3.374 Not tainted syzkaller #0 PREEMPT(full) [ 178.000377][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.000387][ T7274] Call Trace: [ 178.000393][ T7274] [ 178.000400][ T7274] dump_stack_lvl+0x16c/0x1f0 [ 178.000434][ T7274] should_fail_ex+0x512/0x640 [ 178.000455][ T7274] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 178.000486][ T7274] should_failslab+0xc2/0x120 [ 178.000508][ T7274] kmem_cache_alloc_noprof+0x75/0x6e0 [ 178.000535][ T7274] ? audit_log_start+0x29b/0x950 [ 178.000560][ T7274] ? audit_log_start+0x29b/0x950 [ 178.000578][ T7274] audit_log_start+0x29b/0x950 [ 178.000600][ T7274] ? __pfx_audit_log_start+0x10/0x10 [ 178.000624][ T7274] ? find_held_lock+0x2b/0x80 [ 178.000647][ T7274] ? ksys_write+0x190/0x250 [ 178.000666][ T7274] audit_seccomp+0x60/0x290 [ 178.000687][ T7274] __seccomp_filter+0xa74/0x11c0 [ 178.000710][ T7274] ? __pfx___seccomp_filter+0x10/0x10 [ 178.000732][ T7274] ? fput+0x9b/0xd0 [ 178.000754][ T7274] ? ksys_write+0x1ac/0x250 [ 178.000775][ T7274] __secure_computing+0x287/0x3b0 [ 178.000795][ T7274] syscall_trace_enter+0x89/0x240 [ 178.000817][ T7274] do_syscall_64+0x3cd/0xfa0 [ 178.000847][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.000866][ T7274] RIP: 0033:0x7fb11718efc9 [ 178.000881][ T7274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.000897][ T7274] RSP: 002b:00007fb118074038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 178.000915][ T7274] RAX: ffffffffffffffda RBX: 00007fb1173e5fa0 RCX: 00007fb11718efc9 [ 178.000927][ T7274] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 178.000938][ T7274] RBP: 00007fb118074090 R08: 0000000000000000 R09: 0000000000000000 [ 178.000949][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.000960][ T7274] R13: 00007fb1173e6038 R14: 00007fb1173e5fa0 R15: 00007ffc16a354a8 [ 178.000987][ T7274] [ 178.000996][ T7274] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 178.002752][ T30] audit: type=1326 audit(1761909578.459:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11718efc9 code=0x7ffc0000 [ 178.013214][ T7274] audit: out of memory in audit_log_start [ 178.028204][ T30] audit: type=1326 audit(1761909578.459:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11718efc9 code=0x7ffc0000 [ 178.259887][ T30] audit: type=1326 audit(1761909578.459:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb11718efc9 code=0x7ffc0000 [ 178.341262][ T30] audit: type=1326 audit(1761909578.459:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11718efc9 code=0x7ffc0000 [ 178.381277][ T30] audit: type=1326 audit(1761909578.459:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb11718efc9 code=0x7ffc0000 [ 178.702041][ T30] audit: type=1326 audit(1761909578.459:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11718efc9 code=0x7ffc0000 [ 178.757344][ T30] audit: type=1326 audit(1761909578.459:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb11718d810 code=0x7ffc0000 [ 179.244140][ T7294] macvlan6: entered promiscuous mode [ 180.395646][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 180.395717][ T30] audit: type=1400 audit(1761909580.869:239): avc: denied { create } for pid=7313 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.209342][ T7317] Mount JFS Failure: -5 [ 181.213785][ T7317] jfs_mount failed w/return code = -5 [ 181.270045][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 181.390476][ T30] audit: type=1400 audit(1761909580.949:240): avc: denied { bind } for pid=7313 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.557384][ T30] audit: type=1400 audit(1761909581.399:241): avc: denied { create } for pid=7313 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.578673][ T30] audit: type=1400 audit(1761909581.549:242): avc: denied { setopt } for pid=7313 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.696214][ T30] audit: type=1400 audit(1761909582.169:243): avc: denied { write } for pid=7321 comm="syz.4.388" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.010791][ T30] audit: type=1400 audit(1761909582.189:244): avc: denied { map } for pid=7321 comm="syz.4.388" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.622696][ T30] audit: type=1400 audit(1761909583.089:245): avc: denied { sys_module } for pid=7327 comm="syz.0.391" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 182.859708][ T7338] fuse: Bad value for 'fd' [ 184.989186][ T7363] macvlan6: entered promiscuous mode [ 185.441372][ T7366] overlayfs: failed to resolve './bus': -2 [ 187.062117][ T7393] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.407'. [ 187.881285][ T30] audit: type=1400 audit(1761909588.349:246): avc: denied { ioctl } for pid=7404 comm="syz.1.411" path="socket:[21617]" dev="sockfs" ino=21617 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.029305][ T7407] Mount JFS Failure: -5 [ 188.029365][ T7407] jfs_mount failed w/return code = -5 [ 188.322600][ T30] audit: type=1400 audit(1761909588.799:247): avc: denied { watch } for pid=7403 comm="syz.0.410" path="/76/bus" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.322655][ T30] audit: type=1400 audit(1761909588.799:248): avc: denied { watch_sb watch_reads } for pid=7403 comm="syz.0.410" path="/76/bus" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.617190][ T7413] overlayfs: failed to resolve './bus': -2 [ 190.978532][ T7443] macvlan6: entered promiscuous mode [ 191.527103][ T7448] fuse: Bad value for 'fd' [ 193.167754][ T5902] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 193.394332][ T7465] macvlan5: entered promiscuous mode [ 193.795374][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 193.841257][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.921966][ T5902] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 193.937420][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.963853][ T5902] usb 4-1: Product: syz [ 193.973918][ T5902] usb 4-1: Manufacturer: syz [ 193.984799][ T5902] usb 4-1: SerialNumber: syz [ 194.001053][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.017259][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.045649][ T5902] usb 4-1: config 0 descriptor?? [ 194.089414][ T7457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.116314][ T5902] usb 4-1: ucan: probing device on interface #0 [ 194.217643][ T5902] usb 4-1: ucan: invalid EP count (1) [ 194.262652][ T5902] usb 4-1: ucan: probe failed; try to update the device firmware [ 194.561785][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 194.775079][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.807626][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 194.817984][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.853457][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 194.868295][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.880732][ T24] usb 2-1: Product: syz [ 194.902186][ T24] usb 2-1: Manufacturer: syz [ 194.906822][ T24] usb 2-1: SerialNumber: syz [ 194.929906][ T24] usb 2-1: config 0 descriptor?? [ 194.937322][ T7474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.965767][ T24] usb 2-1: ucan: probing device on interface #0 [ 194.982297][ T24] usb 2-1: ucan: invalid EP count (1) [ 195.012675][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 195.542372][ T7498] fuse: Bad value for 'fd' [ 196.073991][ T5135] Bluetooth: hci4: command 0x0406 tx timeout [ 196.080014][ T5135] Bluetooth: hci1: command 0x0406 tx timeout [ 196.088403][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 196.096879][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 196.104867][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 196.526587][ T5902] usb 4-1: USB disconnect, device number 2 [ 197.295501][ T24] usb 2-1: USB disconnect, device number 3 [ 198.895906][ T7509] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.445'. [ 199.870891][ T7536] overlayfs: failed to resolve './bus': -2 [ 200.893009][ T7551] macvlan5: entered promiscuous mode [ 203.920823][ T7592] overlayfs: failed to resolve './bus': -2 [ 204.996653][ T7601] macvlan7: entered promiscuous mode [ 205.529033][ T7607] Mount JFS Failure: -5 [ 205.533338][ T7607] jfs_mount failed w/return code = -5 [ 205.632186][ T7608] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.467'. [ 206.373329][ T7609] macvlan6: entered promiscuous mode [ 206.829673][ T7619] macvlan7: entered promiscuous mode [ 207.211398][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 208.466612][ T7632] macvlan8: entered promiscuous mode [ 210.849188][ T7651] macvlan7: entered promiscuous mode [ 211.367537][ T7652] Mount JFS Failure: -5 [ 211.371880][ T7652] jfs_mount failed w/return code = -5 [ 211.698175][ T7655] Mount JFS Failure: -5 [ 211.711540][ T7655] jfs_mount failed w/return code = -5 [ 212.687912][ T7678] fuse: Bad value for 'fd' [ 214.687532][ T7689] macvlan9: entered promiscuous mode [ 214.777469][ T7693] overlayfs: failed to resolve './bus': -2 [ 216.811350][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 217.118191][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 217.138647][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 217.160419][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 217.211640][ T5902] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 217.230980][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.242606][ T5902] usb 2-1: Product: syz [ 217.247599][ T5902] usb 2-1: Manufacturer: syz [ 217.281880][ T5902] usb 2-1: SerialNumber: syz [ 217.326553][ T5902] usb 2-1: config 0 descriptor?? [ 217.344363][ T7718] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.352103][ T7718] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.538829][ T7734] macvlan6: entered promiscuous mode [ 217.810801][ T5902] usb 2-1: ucan: probing device on interface #0 [ 217.908534][ T7737] FAULT_INJECTION: forcing a failure. [ 217.908534][ T7737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.922579][ T7737] CPU: 1 UID: 0 PID: 7737 Comm: syz.4.506 Not tainted syzkaller #0 PREEMPT(full) [ 217.922604][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.922615][ T7737] Call Trace: [ 217.922622][ T7737] [ 217.922630][ T7737] dump_stack_lvl+0x16c/0x1f0 [ 217.922667][ T7737] should_fail_ex+0x512/0x640 [ 217.922694][ T7737] should_fail_alloc_page+0xe7/0x130 [ 217.922720][ T7737] prepare_alloc_pages+0x3c2/0x610 [ 217.922748][ T7737] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 217.922784][ T7737] ? __cgroup_account_cputime+0xcc/0x120 [ 217.922814][ T7737] ? update_se+0x43f/0x710 [ 217.922847][ T7737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.922874][ T7737] ? find_held_lock+0x2b/0x80 [ 217.922911][ T7737] ? __lock_acquire+0x622/0x1c90 [ 217.922944][ T7737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.922971][ T7737] ? policy_nodemask+0xea/0x4e0 [ 217.922996][ T7737] alloc_pages_mpol+0x1fb/0x550 [ 217.923020][ T7737] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.923049][ T7737] alloc_pages_noprof+0x131/0x390 [ 217.923071][ T7737] pte_alloc_one+0x1e/0x350 [ 217.923095][ T7737] __pte_alloc+0x6d/0x380 [ 217.923115][ T7737] ? __pfx___pte_alloc+0x10/0x10 [ 217.923132][ T7737] ? __lock_acquire+0x622/0x1c90 [ 217.923167][ T7737] do_pte_missing+0x282c/0x3ba0 [ 217.923195][ T7737] ? mtree_range_walk+0x718/0xc00 [ 217.923224][ T7737] ? find_held_lock+0x2b/0x80 [ 217.923250][ T7737] __handle_mm_fault+0x1556/0x2aa0 [ 217.923285][ T7737] ? __pfx___handle_mm_fault+0x10/0x10 [ 217.923338][ T7737] handle_mm_fault+0x589/0xd10 [ 217.923378][ T7737] __get_user_pages+0x54e/0x3530 [ 217.923412][ T7737] ? down_read_killable+0x220/0x4b0 [ 217.923435][ T7737] ? __pfx___get_user_pages+0x10/0x10 [ 217.923458][ T7737] ? __gup_longterm_locked+0x1171/0x17e0 [ 217.923488][ T7737] __gup_longterm_locked+0xa92/0x17e0 [ 217.923520][ T7737] ? __pfx___gup_longterm_locked+0x10/0x10 [ 217.923552][ T7737] ? sanity_check_pinned_pages+0x23/0x11d0 [ 217.923580][ T7737] gup_fast_fallback+0xee2/0x22a0 [ 217.923627][ T7737] ? __pfx_gup_fast_fallback+0x10/0x10 [ 217.923651][ T7737] ? rcu_is_watching+0x12/0xc0 [ 217.923676][ T7737] ? trace_sched_exit_tp+0xd1/0x120 [ 217.923698][ T7737] ? __schedule+0x11a3/0x5de0 [ 217.923731][ T7737] pin_user_pages_fast+0xa7/0xf0 [ 217.923754][ T7737] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 217.923787][ T7737] iov_iter_extract_pages+0x3a2/0x1ed0 [ 217.923816][ T7737] ? __pfx_nhpoly1305_units+0x10/0x10 [ 217.923845][ T7737] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 217.923877][ T7737] ? __local_bh_enable_ip+0xa4/0x120 [ 217.923897][ T7737] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.923921][ T7737] ? kernel_fpu_end+0x59/0x70 [ 217.923939][ T7737] ? __local_bh_enable_ip+0xa4/0x120 [ 217.923959][ T7737] ? kernel_fpu_end+0x5e/0x70 [ 217.923975][ T7737] ? nhpoly1305_avx2_update+0x8d/0xc0 [ 217.923998][ T7737] extract_iter_to_sg+0xf6e/0x20c0 [ 217.924019][ T7737] ? crypto_hash_walk_done+0x63/0x400 [ 217.924046][ T7737] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 217.924067][ T7737] ? __pfx_unpin_user_page+0x10/0x10 [ 217.924099][ T7737] hash_sendmsg+0x435/0xfa0 [ 217.924128][ T7737] __sys_sendto+0x4a3/0x520 [ 217.924150][ T7737] ? __pfx___sys_sendto+0x10/0x10 [ 217.924193][ T7737] ? ksys_write+0x1ac/0x250 [ 217.924209][ T7737] ? __pfx_ksys_write+0x10/0x10 [ 217.924228][ T7737] __x64_sys_sendto+0xe0/0x1c0 [ 217.924246][ T7737] ? do_syscall_64+0x91/0xfa0 [ 217.924271][ T7737] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.924294][ T7737] do_syscall_64+0xcd/0xfa0 [ 217.924320][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.924337][ T7737] RIP: 0033:0x7f5ab1f8efc9 [ 217.924351][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.924366][ T7737] RSP: 002b:00007f5ab2d89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 217.924391][ T7737] RAX: ffffffffffffffda RBX: 00007f5ab21e6180 RCX: 00007f5ab1f8efc9 [ 217.924402][ T7737] RDX: 00000000ffffffe3 RSI: 0000200000000100 RDI: 0000000000000006 [ 217.924412][ T7737] RBP: 00007f5ab2d89090 R08: 0000000000000000 R09: fffffffffffffe1b [ 217.924423][ T7737] R10: 0000000004004840 R11: 0000000000000246 R12: 0000000000000001 [ 217.924432][ T7737] R13: 00007f5ab21e6218 R14: 00007f5ab21e6180 R15: 00007ffcae0ccad8 [ 217.924458][ T7737] [ 218.589408][ T5902] ucan 2-1:0.0 can0: registered device [ 218.787507][ T5902] ucan 2-1:0.0 can0: firmware string: unknown [ 220.379563][ T5812] usb 2-1: USB disconnect, device number 4 [ 220.464610][ T7762] macvlan10: entered promiscuous mode [ 221.882810][ T7788] fuse: Bad value for 'fd' [ 226.010125][ T7839] fuse: Bad value for 'fd' [ 227.395262][ T7853] fuse: Bad value for 'fd' [ 228.348560][ T7864] Mount JFS Failure: -5 [ 228.356124][ T7864] jfs_mount failed w/return code = -5 [ 228.589670][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 231.393925][ T7907] exFAT-fs (nullb0): invalid boot record signature [ 231.400450][ T7907] exFAT-fs (nullb0): failed to read boot sector [ 231.407692][ T7907] exFAT-fs (nullb0): failed to recognize exfat type [ 231.508906][ T7910] fuse: Bad value for 'fd' [ 232.472641][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 235.559722][ T7958] exFAT-fs (nullb0): invalid boot record signature [ 235.566484][ T7958] exFAT-fs (nullb0): failed to read boot sector [ 235.572804][ T7958] exFAT-fs (nullb0): failed to recognize exfat type [ 237.431402][ T30] audit: type=1400 audit(1761909637.859:249): avc: denied { listen } for pid=7973 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.500142][ T30] audit: type=1400 audit(1761909637.859:250): avc: denied { name_connect } for pid=7973 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 237.578764][ T30] audit: type=1400 audit(1761909638.049:251): avc: denied { append } for pid=7975 comm="syz.3.567" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.607118][ T7976] loop6: detected capacity change from 0 to 7 [ 237.639679][ T7976] Dev loop6: unable to read RDB block 7 [ 237.664297][ T7976] loop6: unable to read partition table [ 237.701539][ T30] audit: type=1400 audit(1761909638.149:252): avc: denied { setattr } for pid=7977 comm="syz.4.566" name="[io_uring]" dev="anon_inodefs" ino=24441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.716759][ T7984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.743777][ T7976] loop6: partition table beyond EOD, truncated [ 237.755704][ T7976] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 237.830745][ T30] audit: type=1400 audit(1761909638.299:253): avc: denied { getopt } for pid=7979 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.563157][ T30] audit: type=1400 audit(1761909639.029:254): avc: denied { mount } for pid=8002 comm="syz.3.574" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.639715][ T30] audit: type=1400 audit(1761909639.089:255): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.706684][ T8010] netlink: 'syz.0.578': attribute type 13 has an invalid length. [ 238.717041][ T30] audit: type=1400 audit(1761909639.149:256): avc: denied { setopt } for pid=8007 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.787552][ T8010] gretap0: refused to change device tx_queue_len [ 238.795234][ T8010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 239.245363][ T30] audit: type=1400 audit(1761909639.559:257): avc: denied { bind } for pid=8027 comm="syz.1.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 239.269640][ T30] audit: type=1400 audit(1761909639.559:258): avc: denied { setopt } for pid=8027 comm="syz.1.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 239.271385][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 239.396025][ T8034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.517092][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 239.539950][ T24] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 239.585441][ T24] usb 3-1: config 0 has no interface number 0 [ 239.610619][ T24] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 239.626552][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.635473][ T5812] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 239.648630][ T24] usb 3-1: config 0 descriptor?? [ 239.666843][ T24] usb-storage 3-1:0.208: USB Mass Storage device detected [ 239.678028][ T24] usb-storage 3-1:0.208: device ignored [ 239.771278][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 239.822743][ T5812] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 239.832945][ T5812] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 239.843277][ T5812] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 239.854686][ T5812] usb 2-1: config 220 has no interface number 2 [ 239.869962][ T5812] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 239.894265][ T5812] usb 2-1: config 220 interface 0 has no altsetting 0 [ 239.901098][ T5812] usb 2-1: config 220 interface 76 has no altsetting 0 [ 239.923208][ T5812] usb 2-1: config 220 interface 1 has no altsetting 0 [ 239.932820][ T5879] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.942616][ T5812] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 239.950028][ T5879] usb 1-1: config 0 has no interface number 0 [ 239.952074][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.970094][ T24] usb 3-1: USB disconnect, device number 3 [ 239.971106][ T5879] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 239.980383][ T5812] usb 2-1: Product: syz [ 239.997653][ T5812] usb 2-1: Manufacturer: syz [ 240.002651][ T5812] usb 2-1: SerialNumber: syz [ 240.006542][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.015514][ T5879] usb 1-1: Product: syz [ 240.019772][ T5879] usb 1-1: Manufacturer: syz [ 240.025131][ T5879] usb 1-1: SerialNumber: syz [ 240.035995][ T5879] usb 1-1: config 0 descriptor?? [ 240.230409][ T5812] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 240.238200][ T5812] uvcvideo 2-1:220.0: No valid video chain found. [ 240.244901][ T5812] usb 2-1: selecting invalid altsetting 0 [ 240.251729][ T5879] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 240.258254][ T5812] usb 2-1: selecting invalid altsetting 0 [ 240.271297][ T5812] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 240.284238][ T5879] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.307105][ T5812] usb 2-1: USB disconnect, device number 5 [ 240.313356][ T5879] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 240.313415][ T5879] usb 1-1: media controller created [ 240.362453][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.660604][ T8066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 241.433102][ T5879] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 241.482171][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 241.536659][ T5879] usb 1-1: USB disconnect, device number 5 [ 241.652461][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 241.665242][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 241.680665][ T9] usb 5-1: config 0 has no interface number 0 [ 241.711829][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 241.729789][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 241.739726][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.750601][ T9] usb 5-1: Product: syz [ 241.755646][ T9] usb 5-1: Manufacturer: syz [ 241.760405][ T9] usb 5-1: SerialNumber: syz [ 241.778848][ T9] usb 5-1: config 0 descriptor?? [ 241.789794][ T9] smsc75xx v1.0.0 [ 241.812028][ T8074] syz.1.605 (8074): drop_caches: 2 [ 241.827107][ T8089] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 241.881425][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 241.908282][ T8093] loop8: detected capacity change from 0 to 7 [ 241.917147][ T8093] Dev loop8: unable to read RDB block 7 [ 241.923573][ T8093] loop8: unable to read partition table [ 241.929421][ T8093] loop8: partition table beyond EOD, truncated [ 241.935659][ T8093] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 242.051291][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 242.060725][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.081433][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 242.101182][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.121512][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 242.141068][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.144343][ T8100] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 242.162618][ T5882] usb 4-1: config 0 descriptor?? [ 242.176784][ T8085] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.177071][ T8100] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 242.191310][ T8100] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 242.203474][ T8100] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 242.209925][ T8100] comedi comedi3: 8255: I/O port conflict (0x3df,4) [ 242.217687][ T5882] hub 4-1:0.0: USB hub found [ 242.228306][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 242.231716][ T8100] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 242.244727][ T8100] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 242.251241][ T8100] comedi comedi3: 8255: I/O port conflict (0xfffffffffffff350,4) [ 242.259019][ T8100] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 242.265957][ T8100] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 242.272674][ T8100] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 242.279145][ T8100] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 242.285625][ T8100] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 242.292105][ T8100] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 242.298630][ T8100] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 242.306408][ T8100] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 242.314905][ T8100] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 242.321380][ T8100] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 242.385055][ T8108] Bluetooth: MGMT ver 1.23 [ 242.407607][ T5882] hub 4-1:0.0: 4 ports detected [ 242.412681][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 242.423974][ T5882] hub 4-1:0.0: insufficient power available to use all downstream ports [ 242.432381][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 242.633051][ T5882] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 242.639715][ T5882] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 242.653914][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 242.659904][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 242.671377][ T5902] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 242.684995][ T5882] usb 4-1: USB disconnect, device number 3 [ 242.811451][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 242.811468][ T30] audit: type=1400 audit(1761909643.279:280): avc: denied { append } for pid=8113 comm="syz.1.623" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.842838][ T30] audit: type=1400 audit(1761909643.289:281): avc: denied { execute } for pid=8113 comm="syz.1.623" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.865932][ T5902] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.865960][ T5902] usb 1-1: config 0 has no interface number 0 [ 242.865995][ T5902] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.866020][ T5902] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.866041][ T5902] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.866076][ T5902] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 242.866097][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.869224][ T5902] usb 1-1: config 0 descriptor?? [ 243.615270][ T5902] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0001/input/input5 [ 243.646994][ T30] audit: type=1400 audit(1761909644.119:282): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=2832 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.679708][ T30] audit: type=1400 audit(1761909644.119:283): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2832 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.731901][ T5902] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0001/input/input6 [ 243.770347][ T5902] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 243.833822][ T5902] usb 1-1: USB disconnect, device number 6 [ 243.846618][ T30] audit: type=1400 audit(1761909644.319:284): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2837 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.929084][ T8148] fido_id[8148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 244.179558][ T30] audit: type=1400 audit(1761909644.649:285): avc: denied { write } for pid=8154 comm="syz.1.639" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 244.204245][ T8155] sg_read: process 429 (syz.1.639) changed security contexts after opening file descriptor, this is not allowed. [ 244.276856][ T8159] loop6: detected capacity change from 0 to 7 [ 244.287151][ T8159] Dev loop6: unable to read RDB block 7 [ 244.295164][ T8159] loop6: unable to read partition table [ 244.301123][ T8159] loop6: partition table beyond EOD, truncated [ 244.308279][ T8159] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 244.326681][ T30] audit: type=1400 audit(1761909644.799:286): avc: denied { create } for pid=8158 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.508087][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 244.547912][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 244.605046][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 244.639736][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 244.667203][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 244.704467][ T9] usb 5-1: USB disconnect, device number 9 [ 244.726612][ T30] audit: type=1400 audit(1761909645.199:287): avc: denied { bind } for pid=8179 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.790568][ T30] audit: type=1400 audit(1761909645.199:288): avc: denied { name_bind } for pid=8179 comm="syz.2.647" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 244.824090][ T30] audit: type=1400 audit(1761909645.199:289): avc: denied { node_bind } for pid=8179 comm="syz.2.647" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 245.503459][ T8216] Bluetooth: hci0: invalid length 0, exp 2 for type 26 [ 246.054548][ T5902] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 246.095723][ T5812] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 246.256343][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 246.426147][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 246.442741][ T5902] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 246.452027][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.460110][ T5902] usb 5-1: Product: syz [ 246.467093][ T5902] usb 5-1: Manufacturer: syz [ 246.473752][ T5902] usb 5-1: SerialNumber: syz [ 246.482026][ T5902] usb 5-1: config 0 descriptor?? [ 246.499578][ T5902] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 246.509080][ T5902] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 247.245540][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 247.288471][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.357556][ T5902] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 247.365151][ T8280] bond0: (slave rose0): Enslaving as an active interface with an up link [ 247.461692][ T5812] usb 2-1: device descriptor read/64, error -71 [ 247.555963][ T8296] netlink: 'syz.2.685': attribute type 4 has an invalid length. [ 247.703059][ T5812] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 247.784498][ T5902] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 247.812305][ T5902] em28xx 5-1:0.0: board has no eeprom [ 247.861486][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 247.873698][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.885943][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.936327][ T5812] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.951274][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.959370][ T5812] usb 2-1: Product: syz [ 247.970432][ T5812] usb 2-1: Manufacturer: syz [ 247.975706][ T5812] usb 2-1: SerialNumber: syz [ 248.051579][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 248.166049][ T5902] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 248.186976][ T5902] em28xx 5-1:0.0: dvb set to bulk mode. [ 248.205952][ T24] em28xx 5-1:0.0: Binding DVB extension [ 248.213125][ T5812] usb 2-1: 0:2 : does not exist [ 248.223477][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.227147][ T5812] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 248.233722][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 248.261141][ T9] usb 4-1: config 9 has an invalid interface number: 238 but max is 0 [ 248.270187][ T9] usb 4-1: config 9 has no interface number 0 [ 248.292188][ T5812] usb 2-1: USB disconnect, device number 7 [ 248.293475][ T9] usb 4-1: config 9 interface 238 altsetting 242 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 248.359044][ T9] usb 4-1: config 9 interface 238 has no altsetting 0 [ 248.378540][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=fd.f6 [ 248.388218][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.411170][ T9] usb 4-1: Product: syz [ 248.439440][ T9] usb 4-1: Manufacturer: syz [ 248.449553][ T9] usb 4-1: SerialNumber: syz [ 248.683157][ T9] radio-si470x 4-1:9.238: could not find interrupt in endpoint [ 248.691559][ T9] radio-si470x 4-1:9.238: probe with driver radio-si470x failed with error -5 [ 248.700808][ T9] usbhid 4-1:9.238: couldn't find an input interrupt endpoint [ 248.711343][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 248.715029][ T9] usb 4-1: USB disconnect, device number 4 [ 248.882900][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.904609][ T5817] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.921451][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.944331][ T5817] usb 3-1: config 0 descriptor?? [ 248.962028][ T5817] pwc: Askey VC010 type 2 USB webcam detected. [ 249.149037][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 249.149052][ T30] audit: type=1400 audit(1761909649.619:310): avc: denied { name_bind } for pid=8363 comm="syz.0.699" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 249.177688][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 249.276808][ T30] audit: type=1400 audit(1761909649.749:311): avc: denied { create } for pid=8367 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 249.331311][ T30] audit: type=1400 audit(1761909649.769:312): avc: denied { bind } for pid=8367 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 249.350962][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.355519][ T8236] em28xx 5-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 249.357380][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 249.388907][ T5817] pwc: recv_control_msg error -32 req 02 val 2b00 [ 249.390736][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 249.411123][ T5882] usb 5-1: USB disconnect, device number 10 [ 249.423170][ T5882] em28xx 5-1:0.0: Disconnecting em28xx [ 249.441663][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.460336][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.462814][ T24] em28xx 5-1:0.0: Registering input extension [ 249.469813][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.483963][ T5882] em28xx 5-1:0.0: Closing input extension [ 249.499891][ T5882] em28xx 5-1:0.0: Freeing device [ 249.510350][ T9] usb 2-1: Product: syz [ 249.516190][ T9] usb 2-1: Manufacturer: syz [ 249.520859][ T9] usb 2-1: SerialNumber: syz [ 249.528442][ T9] usb 2-1: config 0 descriptor?? [ 249.536912][ T30] audit: type=1400 audit(1761909650.009:313): avc: denied { write } for pid=8379 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 249.557810][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 249.567460][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 249.610904][ T5817] pwc: recv_control_msg error -71 req 02 val 2c00 [ 249.618340][ T5817] pwc: recv_control_msg error -71 req 04 val 1000 [ 249.625619][ T5817] pwc: recv_control_msg error -71 req 04 val 1300 [ 249.632675][ T5817] pwc: recv_control_msg error -71 req 04 val 1400 [ 249.639490][ T5817] pwc: recv_control_msg error -71 req 02 val 2000 [ 249.646987][ T5817] pwc: recv_control_msg error -71 req 02 val 2100 [ 249.653842][ T5817] pwc: recv_control_msg error -71 req 04 val 1500 [ 249.660622][ T5817] pwc: recv_control_msg error -71 req 02 val 2500 [ 249.667532][ T5817] pwc: recv_control_msg error -71 req 02 val 2400 [ 249.675361][ T5817] pwc: recv_control_msg error -71 req 02 val 2600 [ 249.682982][ T5817] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.689745][ T5817] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.696804][ T5817] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.703641][ T5817] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.713100][ T5817] pwc: Registered as video103. [ 249.719905][ T5817] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 249.734880][ T5817] usb 3-1: USB disconnect, device number 4 [ 250.145675][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 250.161424][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 250.470063][ T5882] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 250.586261][ T30] audit: type=1400 audit(1761909651.059:314): avc: denied { ioctl } for pid=8417 comm="syz.3.722" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.661392][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 250.667870][ T5882] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.677989][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0 [ 250.685264][ T5882] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 250.694377][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.704162][ T5882] usb 3-1: config 0 descriptor?? [ 250.776319][ T9] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 250.851286][ T5817] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 250.985266][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 250.992162][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 250.998742][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 251.001280][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 251.005858][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 251.013574][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.018308][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 251.028508][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 251.045910][ T9] usb 2-1: USB disconnect, device number 8 [ 251.052015][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.063266][ T5817] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 251.072366][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.082995][ T5817] usb 1-1: config 0 descriptor?? [ 251.092170][ T8422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 251.100872][ T5817] hub 1-1:0.0: USB hub found [ 251.118383][ T5882] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 251.135098][ T5882] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 251.146205][ T5882] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 251.214352][ T5882] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -38 [ 251.310031][ T5817] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 251.321896][ T5817] usbhid 1-1:0.0: can't add hid device: -71 [ 251.323436][ T5882] usb 3-1: USB disconnect, device number 5 [ 251.327985][ T5817] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 251.363152][ T5817] usb 1-1: USB disconnect, device number 7 [ 251.620723][ T30] audit: type=1400 audit(1761909652.089:315): avc: denied { append } for pid=8438 comm="syz.3.731" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.630534][ T8439] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 251.745557][ T8449] loop6: detected capacity change from 0 to 2560 [ 251.752657][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.760691][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.769564][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.777527][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.786346][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.794647][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.802602][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.810474][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.818401][ T8449] ldm_validate_partition_table(): Disk read failed. [ 251.825876][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.833944][ T8449] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.842134][ T8449] Dev loop6: unable to read RDB block 0 [ 251.848101][ T8449] loop6: unable to read partition table [ 251.854174][ T8449] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 251.922464][ T5882] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 251.951321][ T5817] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 252.093137][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.105102][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.117444][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.121280][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 252.132565][ T5882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.146397][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.149041][ T5817] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 252.184394][ T5882] usb 5-1: config 0 descriptor?? [ 252.191314][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.205031][ T5817] pvrusb2: Hardware description: Terratec Grabster AV400 [ 252.221284][ T5817] pvrusb2: ********** [ 252.225279][ T5817] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 252.241338][ T5817] pvrusb2: Important functionality might not be entirely working. [ 252.249146][ T5817] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 252.279471][ T5817] pvrusb2: ********** [ 252.420099][ T2337] pvrusb2: Invalid write control endpoint [ 252.526199][ T2337] pvrusb2: Invalid write control endpoint [ 252.533433][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 252.547786][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 252.557155][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 252.570854][ T2337] pvrusb2: Device being rendered inoperable [ 252.579444][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 252.588279][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 252.598958][ T2337] pvrusb2: Attached sub-driver cx25840 [ 252.604865][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 252.605415][ T5882] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xe [ 252.615505][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 252.637862][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 252.642638][ T8447] pvrusb2: Attempted to execute control transfer when device not ok [ 252.656900][ T24] usb 4-1: USB disconnect, device number 5 [ 252.672339][ T5882] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 252.831638][ T1057] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 252.922953][ T24] usb 5-1: USB disconnect, device number 11 [ 253.021261][ T1057] usb 2-1: Using ep0 maxpacket: 32 [ 253.028622][ T1057] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.041376][ T1057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 253.052525][ T1057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 253.063748][ T1057] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 253.072845][ T1057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.083602][ T1057] usb 2-1: config 0 descriptor?? [ 253.089209][ T8480] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 253.097545][ T1057] hub 2-1:0.0: USB hub found [ 253.191324][ T5812] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 253.194751][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 253.209503][ T8484] netlink: 'syz.3.749': attribute type 6 has an invalid length. [ 253.217753][ T8484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.749'. [ 253.300998][ T1057] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 253.312121][ T1057] usbhid 2-1:0.0: can't add hid device: -71 [ 253.318063][ T1057] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 253.351501][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 253.351680][ T1057] usb 2-1: USB disconnect, device number 9 [ 253.368534][ T5812] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.382418][ T5812] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 253.395316][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.412653][ T5812] usb 1-1: config 0 descriptor?? [ 253.427755][ T30] audit: type=1400 audit(1761909653.899:316): avc: denied { execute } for pid=8489 comm="syz.3.752" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 253.524143][ T30] audit: type=1400 audit(1761909653.989:317): avc: denied { create } for pid=8491 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 253.545403][ T30] audit: type=1400 audit(1761909653.999:318): avc: denied { ioctl } for pid=8491 comm="syz.2.753" path="socket:[28707]" dev="sockfs" ino=28707 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 253.587908][ T30] audit: type=1400 audit(1761909653.999:319): avc: denied { write } for pid=8491 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 253.824580][ T5812] hid (null): unknown global tag 0xe [ 253.832638][ T5812] hid (null): report_id 0 is invalid [ 254.036238][ T1057] usb 1-1: USB disconnect, device number 8 [ 254.392862][ T8549] loop6: detected capacity change from 0 to 7 [ 254.399923][ T8549] Dev loop6: unable to read RDB block 7 [ 254.408094][ T8549] loop6: unable to read partition table [ 254.414216][ T8549] loop6: partition table beyond EOD, truncated [ 254.420493][ T8549] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 254.481305][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.525422][ T8558] syz_tun: entered allmulticast mode [ 254.535678][ T8557] syz_tun: left allmulticast mode [ 254.566728][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 254.566743][ T30] audit: type=1400 audit(1761909655.039:324): avc: denied { listen } for pid=8559 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.599956][ T5825] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 254.611200][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 254.611228][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.611243][ T5825] Workqueue: hci2 hci_rx_work [ 254.611277][ T5825] Call Trace: [ 254.611284][ T5825] [ 254.611291][ T5825] dump_stack_lvl+0x16c/0x1f0 [ 254.611321][ T5825] sysfs_warn_dup+0x7f/0xa0 [ 254.611349][ T5825] sysfs_create_dir_ns+0x24b/0x2b0 [ 254.611375][ T5825] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 254.611400][ T5825] ? find_held_lock+0x2b/0x80 [ 254.611429][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 254.611461][ T5825] kobject_add_internal+0x2c4/0x9b0 [ 254.611488][ T5825] kobject_add+0x16e/0x240 [ 254.611506][ T5825] ? __pfx_kobject_add+0x10/0x10 [ 254.611528][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 254.611550][ T5825] ? kobject_put+0xab/0x5a0 [ 254.611577][ T5825] device_add+0x288/0x1aa0 [ 254.611603][ T5825] ? __pfx_dev_set_name+0x10/0x10 [ 254.611630][ T5825] ? __pfx_device_add+0x10/0x10 [ 254.611655][ T5825] ? mgmt_send_event_skb+0x2fb/0x460 [ 254.611692][ T5825] hci_conn_add_sysfs+0x17e/0x230 [ 254.611725][ T5825] le_conn_complete_evt+0x1260/0x2150 [ 254.611762][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 254.611789][ T5825] ? hci_event_packet+0x459/0x11c0 [ 254.611826][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 254.611862][ T5825] hci_le_meta_evt+0x357/0x5e0 [ 254.611891][ T5825] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 254.611924][ T5825] hci_event_packet+0x685/0x11c0 [ 254.611953][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 254.611984][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 254.612014][ T5825] ? kcov_remote_start+0x3c9/0x6d0 [ 254.612038][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.612074][ T5825] hci_rx_work+0x2c5/0x16b0 [ 254.612104][ T5825] ? rcu_is_watching+0x12/0xc0 [ 254.612135][ T5825] process_one_work+0x9cf/0x1b70 [ 254.612169][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 254.612201][ T5825] ? assign_work+0x1a0/0x250 [ 254.612223][ T5825] worker_thread+0x6c8/0xf10 [ 254.612259][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 254.612281][ T5825] kthread+0x3c5/0x780 [ 254.612301][ T5825] ? __pfx_kthread+0x10/0x10 [ 254.612323][ T5825] ? rcu_is_watching+0x12/0xc0 [ 254.612349][ T5825] ? __pfx_kthread+0x10/0x10 [ 254.612370][ T5825] ret_from_fork+0x675/0x7d0 [ 254.612387][ T5825] ? __pfx_kthread+0x10/0x10 [ 254.612415][ T5825] ret_from_fork_asm+0x1a/0x30 [ 254.612468][ T5825] [ 254.849098][ T5825] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 254.863868][ T5825] Bluetooth: hci2: failed to register connection device [ 254.881701][ T8564] netlink: 'syz.0.784': attribute type 11 has an invalid length. [ 254.914135][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 254.919742][ T5825] ================================================================== [ 254.927805][ T5825] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80 [ 254.935719][ T5825] Read of size 8 at addr ffff88805895b480 by task kworker/u9:6/5825 [ 254.943734][ T5825] [ 254.946058][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 254.946086][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.946101][ T5825] Workqueue: hci2 hci_rx_work [ 254.946135][ T5825] Call Trace: [ 254.946142][ T5825] [ 254.946151][ T5825] dump_stack_lvl+0x116/0x1f0 [ 254.946183][ T5825] print_report+0xcd/0x630 [ 254.946205][ T5825] ? __virt_addr_valid+0x81/0x610 [ 254.946234][ T5825] ? __phys_addr+0xe8/0x180 [ 254.946261][ T5825] ? l2cap_connect_cfm+0xdb9/0xf80 [ 254.946287][ T5825] kasan_report+0xe0/0x110 [ 254.946309][ T5825] ? l2cap_connect_cfm+0xdb9/0xf80 [ 254.946336][ T5825] l2cap_connect_cfm+0xdb9/0xf80 [ 254.946364][ T5825] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 254.946388][ T5825] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 254.946412][ T5825] le_conn_complete_evt+0x1ba6/0x2150 [ 254.946442][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 254.946466][ T5825] ? hci_event_packet+0x459/0x11c0 [ 254.946496][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 254.946526][ T5825] hci_le_meta_evt+0x357/0x5e0 [ 254.946554][ T5825] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 254.946583][ T5825] hci_event_packet+0x685/0x11c0 [ 254.946611][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 254.946647][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 254.946677][ T5825] ? kcov_remote_start+0x3c9/0x6d0 [ 254.946703][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.946733][ T5825] hci_rx_work+0x2c5/0x16b0 [ 254.946763][ T5825] ? rcu_is_watching+0x12/0xc0 [ 254.946791][ T5825] process_one_work+0x9cf/0x1b70 [ 254.946819][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 254.946845][ T5825] ? assign_work+0x1a0/0x250 [ 254.946866][ T5825] worker_thread+0x6c8/0xf10 [ 254.946891][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 254.946911][ T5825] kthread+0x3c5/0x780 [ 254.946930][ T5825] ? __pfx_kthread+0x10/0x10 [ 254.946948][ T5825] ? rcu_is_watching+0x12/0xc0 [ 254.946972][ T5825] ? __pfx_kthread+0x10/0x10 [ 254.946990][ T5825] ret_from_fork+0x675/0x7d0 [ 254.947006][ T5825] ? __pfx_kthread+0x10/0x10 [ 254.947024][ T5825] ret_from_fork_asm+0x1a/0x30 [ 254.947058][ T5825] [ 254.947065][ T5825] [ 255.154694][ T5825] Allocated by task 5825: [ 255.158998][ T5825] kasan_save_stack+0x33/0x60 [ 255.163659][ T5825] kasan_save_track+0x14/0x30 [ 255.168320][ T5825] __kasan_kmalloc+0xaa/0xb0 [ 255.172892][ T5825] l2cap_chan_create+0x44/0x920 [ 255.177725][ T5825] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 255.183519][ T5825] l2cap_sock_new_connection_cb+0x101/0x240 [ 255.189403][ T5825] l2cap_connect_cfm+0x4c7/0xf80 [ 255.194323][ T5825] le_conn_complete_evt+0x1ba6/0x2150 [ 255.199692][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 255.205242][ T5825] hci_le_meta_evt+0x357/0x5e0 [ 255.210009][ T5825] hci_event_packet+0x685/0x11c0 [ 255.214940][ T5825] hci_rx_work+0x2c5/0x16b0 [ 255.219437][ T5825] process_one_work+0x9cf/0x1b70 [ 255.224359][ T5825] worker_thread+0x6c8/0xf10 [ 255.228938][ T5825] kthread+0x3c5/0x780 [ 255.232990][ T5825] ret_from_fork+0x675/0x7d0 [ 255.237570][ T5825] ret_from_fork_asm+0x1a/0x30 [ 255.242320][ T5825] [ 255.244625][ T5825] Freed by task 8559: [ 255.248576][ T5825] kasan_save_stack+0x33/0x60 [ 255.253233][ T5825] kasan_save_track+0x14/0x30 [ 255.257887][ T5825] __kasan_save_free_info+0x3b/0x60 [ 255.263076][ T5825] __kasan_slab_free+0x5f/0x80 [ 255.267837][ T5825] kfree+0x2b8/0x6d0 [ 255.271726][ T5825] l2cap_chan_put+0x216/0x2c0 [ 255.276393][ T5825] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 255.281922][ T5825] l2cap_sock_release+0x69/0x250 [ 255.286839][ T5825] __sock_release+0xb3/0x270 [ 255.291413][ T5825] sock_close+0x1c/0x30 [ 255.295565][ T5825] __fput+0x402/0xb70 [ 255.299528][ T5825] task_work_run+0x150/0x240 [ 255.304101][ T5825] exit_to_user_mode_loop+0xec/0x130 [ 255.309365][ T5825] do_syscall_64+0x426/0xfa0 [ 255.313942][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.319816][ T5825] [ 255.322115][ T5825] The buggy address belongs to the object at ffff88805895b000 [ 255.322115][ T5825] which belongs to the cache kmalloc-2k of size 2048 [ 255.336152][ T5825] The buggy address is located 1152 bytes inside of [ 255.336152][ T5825] freed 2048-byte region [ffff88805895b000, ffff88805895b800) [ 255.350111][ T5825] [ 255.352416][ T5825] The buggy address belongs to the physical page: [ 255.358816][ T5825] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58958 [ 255.367553][ T5825] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 255.376030][ T5825] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 255.383996][ T5825] page_type: f5(slab) [ 255.387957][ T5825] raw: 00fff00000000040 ffff88813ffa7000 0000000000000000 dead000000000001 [ 255.396518][ T5825] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 255.405080][ T5825] head: 00fff00000000040 ffff88813ffa7000 0000000000000000 dead000000000001 [ 255.413728][ T5825] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 255.422381][ T5825] head: 00fff00000000003 ffffea0001625601 00000000ffffffff 00000000ffffffff [ 255.431029][ T5825] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 255.439671][ T5825] page dumped because: kasan: bad access detected [ 255.446098][ T5825] page_owner tracks the page as allocated [ 255.451791][ T5825] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5807, tgid 5807 (syz-executor), ts 73355532001, free_ts 17759057226 [ 255.472960][ T5825] post_alloc_hook+0x1c0/0x230 [ 255.477722][ T5825] get_page_from_freelist+0x10a3/0x3a30 [ 255.483275][ T5825] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 255.489154][ T5825] alloc_pages_mpol+0x1fb/0x550 [ 255.493984][ T5825] new_slab+0x24a/0x360 [ 255.498121][ T5825] ___slab_alloc+0xdae/0x1a60 [ 255.502782][ T5825] __slab_alloc.constprop.0+0x63/0x110 [ 255.508223][ T5825] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 255.514613][ T5825] kmalloc_reserve+0xef/0x2c0 [ 255.519275][ T5825] pskb_expand_head+0x238/0x1030 [ 255.524193][ T5825] netlink_trim+0x22d/0x310 [ 255.528677][ T5825] netlink_broadcast_filtered+0xf1/0xf90 [ 255.534295][ T5825] nlmsg_notify+0x9e/0x220 [ 255.538702][ T5825] rtmsg_ifinfo+0x174/0x1a0 [ 255.543190][ T5825] register_netdevice+0x1bd9/0x2270 [ 255.548374][ T5825] nsim_create+0xdd5/0x13f0 [ 255.552855][ T5825] page last free pid 1 tgid 1 stack trace: [ 255.558633][ T5825] __free_frozen_pages+0x7df/0x1160 [ 255.563816][ T5825] free_contig_range+0x183/0x4b0 [ 255.568745][ T5825] destroy_args+0xb69/0x12e0 [ 255.573314][ T5825] debug_vm_pgtable+0x1a32/0x3640 [ 255.578318][ T5825] do_one_initcall+0x123/0x6e0 [ 255.583068][ T5825] kernel_init_freeable+0x5c8/0x920 [ 255.588248][ T5825] kernel_init+0x1c/0x2b0 [ 255.592560][ T5825] ret_from_fork+0x675/0x7d0 [ 255.597125][ T5825] ret_from_fork_asm+0x1a/0x30 [ 255.601883][ T5825] [ 255.604183][ T5825] Memory state around the buggy address: [ 255.609786][ T5825] ffff88805895b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.617825][ T5825] ffff88805895b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.625873][ T5825] >ffff88805895b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.633907][ T5825] ^ [ 255.637960][ T5825] ffff88805895b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.645997][ T5825] ffff88805895b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.654205][ T5825] ================================================================== [ 255.669853][ T5825] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.677059][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 255.686512][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.696565][ T5825] Workqueue: hci2 hci_rx_work [ 255.701252][ T5825] Call Trace: [ 255.704511][ T5825] [ 255.707421][ T5825] dump_stack_lvl+0x3d/0x1f0 [ 255.712011][ T5825] vpanic+0x640/0x6f0 [ 255.715998][ T5825] panic+0xca/0xd0 [ 255.719721][ T5825] ? __pfx_panic+0x10/0x10 [ 255.724134][ T5825] ? l2cap_connect_cfm+0xdb9/0xf80 [ 255.729236][ T5825] ? preempt_schedule_common+0x44/0xc0 [ 255.734683][ T5825] ? preempt_schedule_thunk+0x16/0x30 [ 255.740047][ T5825] check_panic_on_warn+0xab/0xb0 [ 255.744973][ T5825] end_report+0x107/0x170 [ 255.749283][ T5825] kasan_report+0xee/0x110 [ 255.753682][ T5825] ? l2cap_connect_cfm+0xdb9/0xf80 [ 255.758781][ T5825] l2cap_connect_cfm+0xdb9/0xf80 [ 255.763708][ T5825] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 255.769155][ T5825] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 255.774603][ T5825] le_conn_complete_evt+0x1ba6/0x2150 [ 255.779967][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 255.785670][ T5825] ? hci_event_packet+0x459/0x11c0 [ 255.790770][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 255.796303][ T5825] hci_le_meta_evt+0x357/0x5e0 [ 255.801068][ T5825] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 255.807134][ T5825] hci_event_packet+0x685/0x11c0 [ 255.812058][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 255.817332][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 255.822692][ T5825] ? kcov_remote_start+0x3c9/0x6d0 [ 255.827795][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.832985][ T5825] hci_rx_work+0x2c5/0x16b0 [ 255.837479][ T5825] ? rcu_is_watching+0x12/0xc0 [ 255.842231][ T5825] process_one_work+0x9cf/0x1b70 [ 255.847167][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 255.852534][ T5825] ? assign_work+0x1a0/0x250 [ 255.857106][ T5825] worker_thread+0x6c8/0xf10 [ 255.861682][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 255.866775][ T5825] kthread+0x3c5/0x780 [ 255.870825][ T5825] ? __pfx_kthread+0x10/0x10 [ 255.875398][ T5825] ? rcu_is_watching+0x12/0xc0 [ 255.880153][ T5825] ? __pfx_kthread+0x10/0x10 [ 255.884731][ T5825] ret_from_fork+0x675/0x7d0 [ 255.889299][ T5825] ? __pfx_kthread+0x10/0x10 [ 255.893870][ T5825] ret_from_fork_asm+0x1a/0x30 [ 255.898625][ T5825] [ 255.901838][ T5825] Kernel Offset: disabled [ 255.906147][ T5825] Rebooting in 86400 seconds..