last executing test programs: 4.226321779s ago: executing program 1 (id=331): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @remote, 0x0, 0x2, 'lblcr\x00', 0x1}, 0x2c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00'}, 0x2c) 4.045859304s ago: executing program 1 (id=335): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) 3.863015953s ago: executing program 1 (id=339): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.837520804s ago: executing program 2 (id=340): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 3.754780022s ago: executing program 3 (id=342): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000080)='sysfs\x00', 0x210057, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.706797194s ago: executing program 1 (id=344): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40080c0) 3.632037445s ago: executing program 2 (id=345): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xfff, 0x0, 0x0, 0xa, 0x91, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000b40)={0x2, &(0x7f0000000c40)=[{}, {@fixed}]}) 3.511184108s ago: executing program 3 (id=347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x8b92, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.459275928s ago: executing program 0 (id=348): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 3.174674432s ago: executing program 2 (id=350): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0xfa4a, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) 3.034678999s ago: executing program 3 (id=351): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x0) 2.983087201s ago: executing program 2 (id=352): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 2.809722878s ago: executing program 3 (id=353): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0xc34, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0xbe0, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xba4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xb94, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_INFO={0x71, 0x3, "43662772c27930862d4ed57e5a2c49adc0a993d4ee91631ac8bdcf01f96194c3feba496316ee00e42021aa02d1c631c975fd0951291d51fd3062b6c82e6afde7cb985b8e2b6b662b9b50097ce47721488c4ad06011d65dde74c87bbbfaa983166f1df7409dabe6a6875768b234"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0xafc, 0x3, "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"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 2.599257714s ago: executing program 0 (id=354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000808500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r2, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) 2.48894093s ago: executing program 0 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)=@arm64) 2.219716942s ago: executing program 0 (id=357): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.003085464s ago: executing program 0 (id=358): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(0x0) 1.880924148s ago: executing program 3 (id=359): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="080c01"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000380)={0x0, 0x17, 0x2, "f59e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.45431785s ago: executing program 0 (id=360): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.206857952s ago: executing program 1 (id=363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="0300000000000000140000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 1.137673058s ago: executing program 4 (id=364): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x36df}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xfffffffa, 0x0, 0x100, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0xffff4a23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x7fc, 0x6f, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78a2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.085356066s ago: executing program 1 (id=365): epoll_create1(0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41180400, 0x0, 0x0, 0x0, 0x0, 0x0) 961.623826ms ago: executing program 4 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 647.690535ms ago: executing program 4 (id=367): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0xffffff80, 0x8}, &(0x7f0000000100)=0x10) 578.460193ms ago: executing program 4 (id=368): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) readv(r0, &(0x7f0000003540)=[{&(0x7f0000000180)=""/188, 0xbc}], 0x1) 338.671659ms ago: executing program 4 (id=369): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 224.808422ms ago: executing program 2 (id=370): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c00028005"], 0x3c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000140)=0xffffffffffffff7a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 114.355639ms ago: executing program 4 (id=371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) 65.965012ms ago: executing program 2 (id=372): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x100000001, 0x0) 0s ago: executing program 3 (id=373): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) sync() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 56.369941][ T30] audit: type=1400 audit(1746035463.506:88): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.373292][ T5796] cgroup: Unknown subsys name 'net' [ 56.392740][ T30] audit: type=1400 audit(1746035463.506:89): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.420634][ T30] audit: type=1400 audit(1746035463.536:90): avc: denied { unmount } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.546434][ T5796] cgroup: Unknown subsys name 'cpuset' [ 56.554406][ T5796] cgroup: Unknown subsys name 'rlimit' [ 56.697928][ T30] audit: type=1400 audit(1746035463.836:91): avc: denied { setattr } for pid=5796 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.722402][ T30] audit: type=1400 audit(1746035463.836:92): avc: denied { create } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.755361][ T30] audit: type=1400 audit(1746035463.836:93): avc: denied { write } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.775972][ T30] audit: type=1400 audit(1746035463.836:94): avc: denied { read } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.796706][ T30] audit: type=1400 audit(1746035463.866:95): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.824008][ T30] audit: type=1400 audit(1746035463.866:96): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.840359][ T5798] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.847443][ T30] audit: type=1400 audit(1746035463.886:97): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.782415][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.674669][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.680988][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.690179][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.697436][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.697844][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.705384][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.712070][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.720727][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.726303][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.740766][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.748486][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.756110][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.763582][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.766918][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.771155][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.779049][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.793158][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.793348][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.800219][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.808471][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.815362][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.830436][ T5124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.837959][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.854242][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.861936][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.235351][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 60.358204][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 60.378305][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 60.460336][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 60.479502][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.486692][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.495186][ T5807] bridge_slave_0: entered allmulticast mode [ 60.501820][ T5807] bridge_slave_0: entered promiscuous mode [ 60.509480][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 60.540554][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.547911][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.555240][ T5807] bridge_slave_1: entered allmulticast mode [ 60.562080][ T5807] bridge_slave_1: entered promiscuous mode [ 60.639638][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.647640][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.655151][ T5812] bridge_slave_0: entered allmulticast mode [ 60.661757][ T5812] bridge_slave_0: entered promiscuous mode [ 60.671292][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.681384][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.689018][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.696218][ T5815] bridge_slave_0: entered allmulticast mode [ 60.702816][ T5815] bridge_slave_0: entered promiscuous mode [ 60.719673][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.727569][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.736256][ T5812] bridge_slave_1: entered allmulticast mode [ 60.742863][ T5812] bridge_slave_1: entered promiscuous mode [ 60.751460][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.768355][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.775633][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.782909][ T5815] bridge_slave_1: entered allmulticast mode [ 60.789730][ T5815] bridge_slave_1: entered promiscuous mode [ 60.851710][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.859122][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.866793][ T5806] bridge_slave_0: entered allmulticast mode [ 60.873818][ T5806] bridge_slave_0: entered promiscuous mode [ 60.890809][ T5807] team0: Port device team_slave_0 added [ 60.912167][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.919369][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.926735][ T5806] bridge_slave_1: entered allmulticast mode [ 60.933634][ T5806] bridge_slave_1: entered promiscuous mode [ 60.941466][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.953432][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.965592][ T5807] team0: Port device team_slave_1 added [ 60.972986][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.021273][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.030771][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.038625][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.045966][ T5811] bridge_slave_0: entered allmulticast mode [ 61.052541][ T5811] bridge_slave_0: entered promiscuous mode [ 61.069427][ T5812] team0: Port device team_slave_0 added [ 61.089887][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.097094][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.104612][ T5811] bridge_slave_1: entered allmulticast mode [ 61.111225][ T5811] bridge_slave_1: entered promiscuous mode [ 61.120511][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.132405][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.142949][ T5812] team0: Port device team_slave_1 added [ 61.149526][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.156597][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.182749][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.252608][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.259908][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.285807][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.298599][ T5815] team0: Port device team_slave_0 added [ 61.306399][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.318415][ T5806] team0: Port device team_slave_0 added [ 61.324763][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.331702][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.357889][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.375279][ T5815] team0: Port device team_slave_1 added [ 61.382398][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.392837][ T5806] team0: Port device team_slave_1 added [ 61.407985][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.415335][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.442285][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.521685][ T5807] hsr_slave_0: entered promiscuous mode [ 61.529199][ T5807] hsr_slave_1: entered promiscuous mode [ 61.544987][ T5811] team0: Port device team_slave_0 added [ 61.551188][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.558510][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.584593][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.599125][ T5812] hsr_slave_0: entered promiscuous mode [ 61.605381][ T5812] hsr_slave_1: entered promiscuous mode [ 61.611236][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.619174][ T5812] Cannot create hsr debugfs directory [ 61.635564][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.642528][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.668570][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.680780][ T5811] team0: Port device team_slave_1 added [ 61.696221][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.703456][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.729680][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.769540][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.776548][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.802708][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.827169][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.834430][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.860458][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.862472][ T5821] Bluetooth: hci0: command tx timeout [ 61.871157][ T5814] Bluetooth: hci1: command tx timeout [ 61.885311][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.892251][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.918210][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.933193][ T5814] Bluetooth: hci4: command tx timeout [ 61.933198][ T5821] Bluetooth: hci2: command tx timeout [ 61.933466][ T5821] Bluetooth: hci3: command tx timeout [ 62.017807][ T5806] hsr_slave_0: entered promiscuous mode [ 62.024136][ T5806] hsr_slave_1: entered promiscuous mode [ 62.029964][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.038100][ T5806] Cannot create hsr debugfs directory [ 62.076526][ T5811] hsr_slave_0: entered promiscuous mode [ 62.082521][ T5811] hsr_slave_1: entered promiscuous mode [ 62.088804][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.096392][ T5811] Cannot create hsr debugfs directory [ 62.105641][ T5815] hsr_slave_0: entered promiscuous mode [ 62.111770][ T5815] hsr_slave_1: entered promiscuous mode [ 62.118304][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.126054][ T5815] Cannot create hsr debugfs directory [ 62.385594][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.408088][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.421870][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.447698][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.491429][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.507003][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.516142][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.528917][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.590755][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.599456][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.610958][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.624340][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.715264][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.730766][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.742044][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.753488][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.768807][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.821544][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.861213][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.875574][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.886371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.893585][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.902602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.909736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.924070][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.941776][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.952547][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.994320][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.028045][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.035182][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.059189][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.081398][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.088532][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.136842][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 63.136858][ T30] audit: type=1400 audit(1746035470.276:111): avc: denied { sys_module } for pid=5807 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.170295][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.188346][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.250366][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.262254][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.272751][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.309243][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.316422][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.329266][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.336434][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.356743][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.363846][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.389388][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.399141][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.406305][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.441353][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.458945][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.466047][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.492725][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.499852][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.542729][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.631210][ T5806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.650678][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.699894][ T5807] veth0_vlan: entered promiscuous mode [ 63.758696][ T5812] veth0_vlan: entered promiscuous mode [ 63.782198][ T5807] veth1_vlan: entered promiscuous mode [ 63.822210][ T5812] veth1_vlan: entered promiscuous mode [ 63.855747][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.888932][ T5812] veth0_macvtap: entered promiscuous mode [ 63.900753][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.933876][ T5807] veth0_macvtap: entered promiscuous mode [ 63.935273][ T5821] Bluetooth: hci1: command tx timeout [ 63.939624][ T5823] Bluetooth: hci0: command tx timeout [ 63.956871][ T5812] veth1_macvtap: entered promiscuous mode [ 63.990490][ T5811] veth0_vlan: entered promiscuous mode [ 63.997639][ T5807] veth1_macvtap: entered promiscuous mode [ 64.012452][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.020005][ T5823] Bluetooth: hci3: command tx timeout [ 64.023230][ T5823] Bluetooth: hci4: command tx timeout [ 64.026176][ T5821] Bluetooth: hci2: command tx timeout [ 64.048581][ T5811] veth1_vlan: entered promiscuous mode [ 64.067875][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.084940][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.096403][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.111184][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.124410][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.139641][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.150422][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.162334][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.190711][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.199839][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.209014][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.218791][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.230500][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.240973][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.249913][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.259379][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.270662][ T5811] veth0_macvtap: entered promiscuous mode [ 64.307736][ T5811] veth1_macvtap: entered promiscuous mode [ 64.375945][ T5815] veth0_vlan: entered promiscuous mode [ 64.408626][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.421423][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.433150][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.444339][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.455136][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.483662][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.491610][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.503022][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.514670][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.519661][ T5806] veth0_vlan: entered promiscuous mode [ 64.533659][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.544994][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.555140][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.565677][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.577697][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.589556][ T5806] veth1_vlan: entered promiscuous mode [ 64.605607][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.618200][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.628147][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.637105][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.648276][ T5815] veth1_vlan: entered promiscuous mode [ 64.728365][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.728974][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.736828][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.744664][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.758624][ T5806] veth0_macvtap: entered promiscuous mode [ 64.769900][ T5806] veth1_macvtap: entered promiscuous mode [ 64.792439][ T30] audit: type=1400 audit(1746035471.926:112): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.ki85ru/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.838210][ T30] audit: type=1400 audit(1746035471.926:113): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.861270][ T30] audit: type=1400 audit(1746035471.926:114): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.ki85ru/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.891957][ T30] audit: type=1400 audit(1746035471.926:115): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.915008][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.923022][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.943809][ T5815] veth0_macvtap: entered promiscuous mode [ 64.947164][ T30] audit: type=1400 audit(1746035471.926:116): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.ki85ru/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.987077][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.993274][ T30] audit: type=1400 audit(1746035471.926:117): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.ki85ru/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.001914][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.029916][ T30] audit: type=1400 audit(1746035471.926:118): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.050833][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.067481][ T30] audit: type=1400 audit(1746035471.966:119): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.070918][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.104417][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.114505][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.125488][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.137613][ T30] audit: type=1400 audit(1746035471.966:120): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="gadgetfs" ino=6117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.137859][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.178377][ T5815] veth1_macvtap: entered promiscuous mode [ 65.189859][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.200772][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.211255][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.236286][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.247733][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.258724][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.272313][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.289017][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.298260][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.335200][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.356085][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.357879][ T5891] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.389316][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.397178][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.397198][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.397206][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.397217][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.397225][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.397234][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.397243][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.397253][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.398139][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.430716][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.519865][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.540923][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.553386][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.564663][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.574967][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.585788][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.596665][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.607656][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.619529][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.651280][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.661365][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.671809][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.680857][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.841117][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.849368][ T5856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.864045][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.896633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.919563][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.967564][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.988373][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.006032][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.015664][ T5821] Bluetooth: hci1: command tx timeout [ 66.021089][ T5821] Bluetooth: hci0: command tx timeout [ 66.024866][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.026992][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 66.055120][ T5856] usb 2-1: config 252 has an invalid interface number: 59 but max is 0 [ 66.080829][ T5856] usb 2-1: config 252 has no interface number 0 [ 66.092920][ T5856] usb 2-1: config 252 interface 59 has no altsetting 0 [ 66.100348][ T5821] Bluetooth: hci2: command tx timeout [ 66.103315][ T5823] Bluetooth: hci4: command tx timeout [ 66.106336][ T5821] Bluetooth: hci3: command tx timeout [ 66.132119][ T5856] usb 2-1: New USB device found, idVendor=0df6, idProduct=0075, bcdDevice=ae.37 [ 66.152582][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.161457][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 66.182221][ T5856] usb 2-1: Product: syz [ 66.190300][ T5856] usb 2-1: Manufacturer: syz [ 66.195373][ T5856] usb 2-1: SerialNumber: syz [ 66.447852][ T5856] usb 2-1: USB disconnect, device number 2 [ 67.043256][ T5857] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 67.247188][ T5857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.274615][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 67.321274][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.341450][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.393491][ T5857] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 67.427809][ T5857] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 67.436669][ T5857] usb 3-1: Manufacturer: syz [ 67.448041][ T5857] usb 3-1: config 0 descriptor?? [ 67.813204][ T5857] rc_core: IR keymap rc-hauppauge not found [ 67.831728][ T5857] Registered IR keymap rc-empty [ 67.853014][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 67.893591][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 67.927214][ T5857] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 67.991736][ T5857] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 68.049516][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.090252][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.098694][ T5821] Bluetooth: hci0: command tx timeout [ 68.103127][ T5823] Bluetooth: hci1: command tx timeout [ 68.143264][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.164879][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 68.164894][ T30] audit: type=1400 audit(1746035475.306:180): avc: denied { setopt } for pid=5984 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.183165][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.193110][ T5823] Bluetooth: hci3: command tx timeout [ 68.197697][ T5821] Bluetooth: hci4: command tx timeout [ 68.202868][ T5823] Bluetooth: hci2: command tx timeout [ 68.219396][ T30] audit: type=1400 audit(1746035475.356:181): avc: denied { read } for pid=5984 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.275976][ T30] audit: type=1400 audit(1746035475.416:182): avc: denied { write } for pid=5984 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.286246][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.367109][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.413483][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.454759][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.470644][ T5990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.487309][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.523196][ T5857] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 68.565236][ T5857] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 68.586586][ T5857] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 68.612515][ T5857] usb 3-1: USB disconnect, device number 2 [ 68.657296][ T5990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.851746][ T5990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.989237][ T5990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.184376][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 69.190148][ T30] audit: type=1400 audit(1746035476.326:183): avc: denied { ioctl } for pid=5998 comm="syz.2.32" path="socket:[7051]" dev="sockfs" ino=7051 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.462701][ T5999] team0 (unregistering): Port device team_slave_0 removed [ 69.478465][ T5999] team0 (unregistering): Port device team_slave_1 removed [ 69.512453][ T5990] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.595711][ T5990] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.695158][ T5990] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.755588][ T30] audit: type=1400 audit(1746035476.896:184): avc: denied { write } for pid=6006 comm="syz.3.36" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.760720][ T5990] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.963193][ T5945] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.125536][ T5945] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 70.134384][ T5945] usb 3-1: config 0 has no interface number 0 [ 70.144148][ T5945] usb 3-1: config 0 interface 255 has no altsetting 0 [ 70.162791][ T5945] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 70.184942][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.205955][ T5945] usb 3-1: config 0 descriptor?? [ 70.217593][ T5945] cp210x 3-1:0.255: cp210x converter detected [ 70.273329][ T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.281293][ T5903] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.425328][ T6021] can0: slcan on ttyS3. [ 70.453205][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 70.458777][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 70.476815][ T52] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 70.489569][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.502050][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.511541][ T5903] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 70.528423][ T52] usb 5-1: config 0 descriptor?? [ 70.534274][ T6021] can0 (unregistered): slcan off ttyS3. [ 70.551916][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.593090][ T5903] usb 2-1: config 0 descriptor?? [ 70.634786][ T5945] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 70.691129][ T5945] usb 3-1: cp210x converter now attached to ttyUSB0 [ 70.763982][ T5945] usb 3-1: USB disconnect, device number 3 [ 70.781881][ T52] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 70.803789][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 70.840590][ T5945] cp210x 3-1:0.255: device disconnected [ 70.844513][ T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.906153][ T52] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 70.933371][ T52] usb 5-1: media controller created [ 70.989230][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.999027][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.049335][ T5903] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 71.066295][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.084680][ T5903] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 71.092133][ T5903] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 71.145156][ T5903] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 71.152617][ T5903] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 71.161909][ T52] az6027: usb out operation failed. (-71) [ 71.171283][ T52] az6027: usb out operation failed. (-71) [ 71.181045][ T5903] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 71.192280][ T52] stb0899_attach: Driver disabled by Kconfig [ 71.220442][ T52] az6027: no front-end attached [ 71.220442][ T52] [ 71.245945][ C1] usb 2-1: input irq status -75 received [ 71.252805][ T52] az6027: usb out operation failed. (-71) [ 71.259017][ T52] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 71.296153][ T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 71.348921][ T52] dvb-usb: schedule remote query interval to 400 msecs. [ 71.366733][ T30] audit: type=1400 audit(1746035478.486:185): avc: denied { create } for pid=6041 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.397367][ T52] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 71.427280][ T52] usb 5-1: USB disconnect, device number 2 [ 71.445662][ T30] audit: type=1400 audit(1746035478.496:186): avc: denied { shutdown } for pid=6041 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.532675][ T30] audit: type=1400 audit(1746035478.516:187): avc: denied { getopt } for pid=6041 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.570919][ T5903] usb 2-1: USB disconnect, device number 3 [ 71.664633][ T30] audit: type=1400 audit(1746035478.516:188): avc: denied { connect } for pid=6041 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.699669][ T52] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 71.774930][ T30] audit: type=1400 audit(1746035478.516:189): avc: denied { name_connect } for pid=6041 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 71.816705][ T5850] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.013161][ T5850] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.036985][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.057881][ T5850] usb 3-1: Product: syz [ 72.062136][ T5850] usb 3-1: Manufacturer: syz [ 72.077017][ T5850] usb 3-1: SerialNumber: syz [ 72.101237][ T5850] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.131453][ T5857] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.563123][ T5903] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 72.682265][ T6074] netlink: 256 bytes leftover after parsing attributes in process `syz.0.53'. [ 72.735126][ T5903] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 72.755097][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.789859][ T5903] usb 2-1: config 0 descriptor?? [ 72.952772][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.997375][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.213537][ T5857] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 73.238499][ T5903] ath6kl: Failed to submit usb control message: -71 [ 73.239594][ T5857] ath9k_htc: Failed to initialize the device [ 73.255488][ T5903] ath6kl: unable to send the bmi data to the device: -71 [ 73.269688][ T5903] ath6kl: Unable to send get target info: -71 [ 73.297748][ T5903] ath6kl: Failed to init ath6kl core: -71 [ 73.320756][ T5903] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 73.322067][ T5857] usb 3-1: ath9k_htc: USB layer deinitialized [ 73.339519][ T5850] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.367140][ T5903] usb 2-1: USB disconnect, device number 4 [ 73.397046][ T5856] usb 3-1: USB disconnect, device number 4 [ 73.410894][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 73.410909][ T30] audit: type=1400 audit(1746035480.546:198): avc: denied { create } for pid=6088 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.446715][ T30] audit: type=1400 audit(1746035480.586:199): avc: denied { block_suspend } for pid=6088 comm="syz.0.59" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.513907][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 73.528962][ T5850] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 73.573325][ T5850] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 73.582905][ T5850] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 73.598992][ T5850] usb 4-1: config 1 has no interface number 0 [ 73.605720][ T30] audit: type=1400 audit(1746035480.736:200): avc: denied { mounton } for pid=6092 comm="syz.0.61" path="/21/file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.605891][ T6094] syz.0.61: attempt to access beyond end of device [ 73.605891][ T6094] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 73.630343][ T5850] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.656008][ T6094] syz.0.61: attempt to access beyond end of device [ 73.656008][ T6094] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 73.672490][ T5850] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 73.687888][ T6094] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 73.699590][ T5850] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 73.714077][ T6094] syz.0.61: attempt to access beyond end of device [ 73.714077][ T6094] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 73.729428][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.730830][ T6094] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 73.750504][ T6094] syz.0.61: attempt to access beyond end of device [ 73.750504][ T6094] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 73.751655][ T5850] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 73.766617][ T6094] syz.0.61: attempt to access beyond end of device [ 73.766617][ T6094] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 73.818332][ T6094] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 73.840533][ T6094] syz.0.61: attempt to access beyond end of device [ 73.840533][ T6094] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 73.900969][ T6094] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 73.937915][ T6094] syz.0.61: attempt to access beyond end of device [ 73.937915][ T6094] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 73.967359][ T30] audit: type=1400 audit(1746035481.106:201): avc: denied { read write } for pid=6098 comm="syz.1.63" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.981244][ T6094] syz.0.61: attempt to access beyond end of device [ 73.981244][ T6094] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 74.038327][ T5850] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 74.044109][ T6094] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 74.082546][ T30] audit: type=1400 audit(1746035481.106:202): avc: denied { open } for pid=6098 comm="syz.1.63" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.083326][ T6094] syz.0.61: attempt to access beyond end of device [ 74.083326][ T6094] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 74.114417][ T30] audit: type=1400 audit(1746035481.136:203): avc: denied { ioctl } for pid=6098 comm="syz.1.63" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.149383][ T6094] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 74.160690][ T6094] syz.0.61: attempt to access beyond end of device [ 74.160690][ T6094] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 74.182743][ T6094] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 74.194292][ T6094] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 74.212335][ T6094] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 74.399945][ T30] audit: type=1400 audit(1746035481.536:204): avc: denied { mount } for pid=6107 comm="syz.4.66" name="/" dev="mqueue" ino=4637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.442790][ T6110] lo speed is unknown, defaulting to 1000 [ 74.463253][ T6110] lo speed is unknown, defaulting to 1000 [ 74.471966][ T6110] lo speed is unknown, defaulting to 1000 [ 74.480026][ T30] audit: type=1400 audit(1746035481.576:205): avc: denied { create } for pid=6109 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.508328][ T6110] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.552315][ T30] audit: type=1400 audit(1746035481.576:206): avc: denied { write } for pid=6109 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.552658][ T6110] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.589026][ T5856] usb 4-1: USB disconnect, device number 2 [ 74.597838][ T5856] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 74.647135][ T30] audit: type=1400 audit(1746035481.786:207): avc: denied { write } for pid=6114 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.718989][ T6110] lo speed is unknown, defaulting to 1000 [ 74.750332][ T6110] lo speed is unknown, defaulting to 1000 [ 74.769990][ T6110] lo speed is unknown, defaulting to 1000 [ 74.792640][ T6110] lo speed is unknown, defaulting to 1000 [ 74.809896][ T6110] lo speed is unknown, defaulting to 1000 [ 74.929847][ T6120] vcan0: tx drop: invalid sa for name 0x0000000000000006 [ 75.097382][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'. [ 75.373734][ T5856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.398992][ T6144] tipc: Started in network mode [ 75.412882][ T6144] tipc: Node identity 7f000001, cluster identity 4711 [ 75.422251][ T6144] tipc: Enabled bearer , priority 10 [ 75.543212][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 75.550750][ T5856] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 75.568499][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.597681][ T5856] usb 5-1: config 0 descriptor?? [ 75.835410][ T5856] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 75.870968][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.910954][ T5856] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 75.926994][ T5856] usb 5-1: media controller created [ 75.967755][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.068058][ T5856] az6027: usb out operation failed. (-71) [ 76.083389][ T5856] az6027: usb out operation failed. (-71) [ 76.111377][ T5856] stb0899_attach: Driver disabled by Kconfig [ 76.119092][ T5123] cfg80211: failed to load regulatory.db [ 76.156845][ T5856] az6027: no front-end attached [ 76.156845][ T5856] [ 76.196329][ T5856] az6027: usb out operation failed. (-71) [ 76.202092][ T5856] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 76.250923][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 76.305298][ T5856] dvb-usb: schedule remote query interval to 400 msecs. [ 76.312435][ T5856] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 76.364103][ T5856] usb 5-1: USB disconnect, device number 3 [ 76.495863][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 76.534031][ T5123] tipc: Node number set to 2130706433 [ 76.614451][ T6175] Zero length message leads to an empty skb [ 76.903701][ T5856] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 77.580629][ T6207] warning: `syz.4.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.862850][ T6217] syz.4.112 uses obsolete (PF_INET,SOCK_PACKET) [ 78.004037][ T971] kernel write not supported for file /53/attr/exec (pid: 971 comm: kworker/1:2) [ 78.263280][ T5856] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.328489][ T6234] veth1_macvtap: left promiscuous mode [ 78.335027][ T6234] macsec0: entered promiscuous mode [ 78.340636][ T6234] macsec0: entered allmulticast mode [ 78.355968][ T6234] veth1_macvtap: entered promiscuous mode [ 78.362378][ T6234] veth1_macvtap: entered allmulticast mode [ 78.376926][ T6234] macsec0: left promiscuous mode [ 78.388465][ T6234] macsec0: left allmulticast mode [ 78.397234][ T6234] veth1_macvtap: left allmulticast mode [ 78.405774][ T6236] lo speed is unknown, defaulting to 1000 [ 78.411673][ T6236] lo speed is unknown, defaulting to 1000 [ 78.419547][ T6236] lo speed is unknown, defaulting to 1000 [ 78.425440][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 78.436637][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.453601][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.481239][ T6236] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 78.505127][ T6236] lo speed is unknown, defaulting to 1000 [ 78.514391][ T6236] lo speed is unknown, defaulting to 1000 [ 78.533266][ T5856] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 78.551187][ T6236] lo speed is unknown, defaulting to 1000 [ 78.570387][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.580083][ T6236] lo speed is unknown, defaulting to 1000 [ 78.589379][ T6236] lo speed is unknown, defaulting to 1000 [ 78.598067][ T5856] usb 1-1: config 0 descriptor?? [ 78.760097][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 78.760114][ T30] audit: type=1400 audit(1746035485.896:238): avc: denied { connect } for pid=6243 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.102743][ T5856] samsung 0003:0419:0001.0002: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 79.207776][ T30] audit: type=1400 audit(1746035486.346:239): avc: denied { write } for pid=6255 comm="syz.4.131" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.241592][ T30] audit: type=1400 audit(1746035486.346:240): avc: denied { map } for pid=6255 comm="syz.4.131" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.318968][ T5856] usb 1-1: USB disconnect, device number 2 [ 79.343679][ T30] audit: type=1400 audit(1746035486.476:241): avc: denied { name_connect } for pid=6257 comm="syz.3.132" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 79.385826][ T5903] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 79.521311][ T30] audit: type=1400 audit(1746035486.656:242): avc: denied { create } for pid=6264 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.548823][ T30] audit: type=1400 audit(1746035486.686:243): avc: denied { ioctl } for pid=6264 comm="syz.1.135" path="socket:[8562]" dev="sockfs" ino=8562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.624782][ T5903] usb 3-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 79.648477][ T5903] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.661209][ T5903] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 79.682442][ T5903] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 79.697149][ T6270] process 'syz.1.137' launched './file2' with NULL argv: empty string added [ 79.706468][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 79.713455][ T30] audit: type=1400 audit(1746035486.846:244): avc: denied { execute_no_trans } for pid=6269 comm="syz.1.137" path="/21/file2" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.737781][ T5903] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 79.749929][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.758768][ T30] audit: type=1400 audit(1746035486.846:245): avc: denied { create } for pid=6269 comm="syz.1.137" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.809268][ T5903] usb 3-1: config 0 descriptor?? [ 79.835464][ T6274] input: syz0 as /devices/virtual/input/input8 [ 79.842472][ T6253] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.865956][ T30] audit: type=1400 audit(1746035486.866:246): avc: denied { unlink } for pid=6269 comm="syz.1.137" name="file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.897649][ T30] audit: type=1400 audit(1746035486.866:247): avc: denied { create } for pid=6269 comm="syz.1.137" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.934759][ T6277] netlink: 788 bytes leftover after parsing attributes in process `syz.1.140'. [ 80.297638][ T5903] lg-g15 0003:046D:C227.0003: unknown main item tag 0x0 [ 80.330177][ T5903] lg-g15 0003:046D:C227.0003: unknown main item tag 0x0 [ 80.390613][ T5903] lg-g15 0003:046D:C227.0003: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.2-1/input0 [ 80.541177][ T5856] usb 3-1: USB disconnect, device number 5 [ 80.645954][ T6293] input: syz0 as /devices/virtual/input/input9 [ 80.700489][ T6293] input: failed to attach handler leds to device input9, error: -6 [ 81.450572][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 81.550448][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.724015][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 81.738211][ T5903] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 81.771118][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 81.801280][ T5903] usb 5-1: Product: syz [ 81.811151][ T5903] usb 5-1: Manufacturer: syz [ 81.833100][ T5903] usb 5-1: SerialNumber: syz [ 81.848999][ T5903] usb 5-1: config 0 descriptor?? [ 81.920308][ T6329] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 81.944418][ T5887] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 82.071369][ T6335] netlink: 'syz.0.165': attribute type 5 has an invalid length. [ 82.079975][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 82.127847][ T5856] usb 5-1: USB disconnect, device number 4 [ 82.148275][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 82.180223][ T5887] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 82.205100][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.237578][ T5887] usb 3-1: Product: syz [ 82.242356][ T5887] usb 3-1: Manufacturer: syz [ 82.248455][ T5887] usb 3-1: SerialNumber: syz [ 82.283603][ T5887] usb 3-1: config 0 descriptor?? [ 82.295302][ T5887] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 82.453210][ T5123] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 82.608760][ T5123] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 82.620157][ T5123] usb 4-1: config 0 has no interface number 0 [ 82.634426][ T5123] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 82.646436][ T5123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.668648][ T5123] usb 4-1: Product: syz [ 82.672847][ T5123] usb 4-1: Manufacturer: syz [ 82.683941][ T5123] usb 4-1: SerialNumber: syz [ 82.702594][ T5123] usb 4-1: config 0 descriptor?? [ 82.771234][ T6353] ======================================================= [ 82.771234][ T6353] WARNING: The mand mount option has been deprecated and [ 82.771234][ T6353] and is ignored by this kernel. Remove the mand [ 82.771234][ T6353] option from the mount to silence this warning. [ 82.771234][ T6353] ======================================================= [ 83.130905][ T5123] usb 4-1: Firmware: major: 0, minor: 22, hardware type: ATUSB (0) [ 83.271388][ T6369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.347889][ T5123] usb 4-1: failed to fetch extended address, random address set [ 83.352139][ T5887] gspca_sonixj: reg_w1 err -71 [ 83.380144][ T6369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.405152][ T6376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 83.450093][ T5123] usb 4-1: USB disconnect, device number 3 [ 83.463247][ T5887] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 83.514116][ T5887] usb 3-1: USB disconnect, device number 6 [ 83.535569][ T6369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.655117][ T6369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.755061][ T6369] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.782455][ T6369] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.806375][ T6369] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.845359][ T6369] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.238092][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 84.238108][ T30] audit: type=1400 audit(1746035491.366:268): avc: denied { create } for pid=6397 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.348166][ T30] audit: type=1400 audit(1746035491.376:269): avc: denied { create } for pid=6399 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.429451][ T30] audit: type=1400 audit(1746035491.426:270): avc: denied { connect } for pid=6399 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.451816][ T6403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.486778][ T6403] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 84.515023][ T30] audit: type=1400 audit(1746035491.446:271): avc: denied { setopt } for pid=6399 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.643103][ T30] audit: type=1400 audit(1746035491.456:272): avc: denied { bind } for pid=6399 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.724382][ T30] audit: type=1400 audit(1746035491.456:273): avc: denied { write } for pid=6399 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.832002][ T30] audit: type=1400 audit(1746035491.606:274): avc: denied { create } for pid=6401 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.907342][ T30] audit: type=1400 audit(1746035491.626:275): avc: denied { write } for pid=6401 comm="syz.1.195" path="socket:[8932]" dev="sockfs" ino=8932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.946110][ T30] audit: type=1400 audit(1746035492.076:276): avc: denied { create } for pid=6417 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.172547][ T30] audit: type=1400 audit(1746035492.306:277): avc: denied { read } for pid=6425 comm="syz.3.205" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.233255][ T5887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 86.417839][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 86.452807][ T5887] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.496214][ T5887] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.509005][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.520489][ T5887] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 86.530188][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.544609][ T5887] usb 3-1: config 0 descriptor?? [ 86.726443][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 86.942493][ T6487] team0 (unregistering): Port device team_slave_0 removed [ 86.970360][ T6487] team0 (unregistering): Port device team_slave_1 removed [ 86.970693][ T5887] saitek 0003:06A3:0621.0004: reserved main item tag 0xd [ 86.996842][ T5887] saitek 0003:06A3:0621.0004: reserved main item tag 0xe [ 87.007790][ T5887] saitek 0003:06A3:0621.0004: unknown main item tag 0x5 [ 87.015253][ T5887] saitek 0003:06A3:0621.0004: item fetching failed at offset 10/11 [ 87.027909][ T5887] saitek 0003:06A3:0621.0004: parse failed [ 87.037633][ T5887] saitek 0003:06A3:0621.0004: probe with driver saitek failed with error -22 [ 87.211598][ T6496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.242830][ T6496] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 87.275130][ T5903] usb 3-1: USB disconnect, device number 7 [ 87.352184][ T5857] kernel read not supported for file /dsp (pid: 5857 comm: kworker/0:5) [ 87.543471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.025291][ T6514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.209679][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.246'. [ 88.224604][ T52] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 88.438449][ T52] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 88.457548][ T52] usb 3-1: config 0 has no interface number 0 [ 88.480177][ T52] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 88.521652][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.549301][ T52] usb 3-1: Product: syz [ 88.554631][ T52] usb 3-1: Manufacturer: syz [ 88.559492][ T52] usb 3-1: SerialNumber: syz [ 88.576038][ T52] usb 3-1: config 0 descriptor?? [ 88.904325][ T6544] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 89.014759][ T52] usb 3-1: Firmware: major: 0, minor: 22, hardware type: ATUSB (0) [ 89.220356][ T52] usb 3-1: failed to fetch extended address, random address set [ 89.308772][ T52] usb 3-1: USB disconnect, device number 8 [ 89.603164][ T5856] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.769488][ T5856] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 89.782877][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.805735][ T5856] usb 5-1: config 0 descriptor?? [ 89.816468][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 89.828506][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 89.858775][ T6568] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.867348][ T6568] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.875638][ T6568] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.883904][ T6568] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.893229][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 89.893243][ T30] audit: type=1400 audit(1746035497.026:298): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.132302][ T6580] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 90.254132][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.421934][ T5903] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 90.453105][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.470926][ T5903] usb 4-1: Product: syz [ 90.476000][ T5903] usb 4-1: Manufacturer: syz [ 90.480869][ T5903] usb 4-1: SerialNumber: syz [ 90.514609][ T5903] usb 4-1: config 0 descriptor?? [ 90.835293][ T5856] usb 5-1: Cannot set autoneg [ 90.846061][ T5856] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 90.885676][ T5856] usb 5-1: USB disconnect, device number 5 [ 90.933824][ T5903] usb 4-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 91.143168][ T5903] usb 4-1: failed to fetch extended address, random address set [ 91.161167][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 91.344886][ T5903] usb 4-1: USB disconnect, device number 4 [ 91.499341][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 91.524055][ T30] audit: type=1400 audit(1746035498.656:299): avc: denied { read write } for pid=6609 comm="syz.4.284" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.574513][ T6605] nbd: device at index 64 is going down [ 91.607657][ T30] audit: type=1400 audit(1746035498.656:300): avc: denied { open } for pid=6609 comm="syz.4.284" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.645407][ T6615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.826045][ T30] audit: type=1400 audit(1746035498.966:301): avc: denied { bind } for pid=6620 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.244406][ T30] audit: type=1400 audit(1746035499.386:302): avc: denied { read } for pid=6633 comm="syz.1.295" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.309668][ T30] audit: type=1400 audit(1746035499.386:303): avc: denied { open } for pid=6633 comm="syz.1.295" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.410274][ T6636] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 92.509419][ T6641] mmap: syz.0.297 (6641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.512511][ T30] audit: type=1400 audit(1746035499.646:304): avc: denied { mount } for pid=6635 comm="syz.3.296" name="/" dev="overlay" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.716457][ T30] audit: type=1400 audit(1746035499.856:305): avc: denied { execute } for pid=6639 comm="syz.0.297" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 93.143122][ T5857] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 93.221130][ T30] audit: type=1400 audit(1746035500.356:306): avc: denied { write } for pid=6667 comm="syz.4.311" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 93.319293][ T5857] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.353174][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.387323][ T5857] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.410207][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.442906][ T5857] usb 3-1: Product: syz [ 93.460129][ T5857] usb 3-1: Manufacturer: syz [ 93.470042][ T5857] usb 3-1: SerialNumber: syz [ 93.596859][ T30] audit: type=1326 audit(1746035500.736:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.4.316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6900d8e969 code=0x0 [ 93.634214][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 93.655899][ T6683] bio_check_eod: 2 callbacks suppressed [ 93.655914][ T6683] syz.4.316: attempt to access beyond end of device [ 93.655914][ T6683] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 93.785952][ T6681] team0 (unregistering): Port device team_slave_0 removed [ 93.798155][ T6681] team0 (unregistering): Port device team_slave_1 removed [ 93.980654][ T6656] lo speed is unknown, defaulting to 1000 [ 94.171808][ T5857] usb 3-1: USB disconnect, device number 9 [ 94.679473][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.715355][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.198279][ T5857] IPVS: starting estimator thread 0... [ 95.306385][ T6717] IPVS: using max 46 ests per chain, 110400 per kthread [ 95.585946][ T6737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.340'. [ 95.671993][ T30] audit: type=1400 audit(1746035502.806:308): avc: denied { mount } for pid=6739 comm="syz.3.342" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.701159][ T6742] overlay: filesystem on ./file1 is read-only [ 95.741286][ T30] audit: type=1400 audit(1746035502.876:309): avc: denied { write } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.826577][ T30] audit: type=1400 audit(1746035502.876:310): avc: denied { remove_name } for pid=5166 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.895377][ T6748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 95.915071][ T30] audit: type=1400 audit(1746035502.876:311): avc: denied { rename } for pid=5166 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.994764][ T30] audit: type=1400 audit(1746035502.876:312): avc: denied { add_name } for pid=5166 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.076674][ T30] audit: type=1400 audit(1746035502.876:313): avc: denied { unlink } for pid=5166 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.103604][ T30] audit: type=1400 audit(1746035502.876:314): avc: denied { create } for pid=5166 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.106141][ T6755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.125134][ T30] audit: type=1400 audit(1746035502.956:315): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.173771][ T30] audit: type=1400 audit(1746035502.966:316): avc: denied { connect } for pid=6747 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.251263][ T6755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.352430][ T6755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.441235][ T6741] infiniband syz1: set down [ 96.448570][ T6741] infiniband syz1: added ipvlan0 [ 96.489612][ T6755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.531636][ T6741] RDS/IB: syz1: added [ 96.544645][ T6741] smc: adding ib device syz1 with port count 1 [ 96.551434][ T6741] smc: ib device syz1 port 1 has pnetid [ 96.614624][ T6755] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.635096][ T6755] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.656329][ T6755] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.679672][ T6755] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.683239][ T5857] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 96.857873][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.869370][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.887396][ T5857] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 96.897282][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.926439][ T5857] usb 3-1: config 0 descriptor?? [ 97.023806][ T30] audit: type=1326 audit(1746035504.156:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.4.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6900d8e969 code=0x0 [ 97.362026][ T5857] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 97.457880][ T5857] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 97.496674][ T5857] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 97.693256][ T5123] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 97.863629][ T5123] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 97.908798][ T5123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.947535][ T5123] usb 4-1: config 0 descriptor?? [ 97.970259][ T6788] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.970884][ T5123] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 98.184299][ T5123] gp8psk: usb in 128 operation failed. [ 98.226556][ T5887] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.251526][ T6796] input: syz0 as /devices/virtual/input/input12 [ 98.394790][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 98.404520][ T5123] gp8psk: usb in 146 operation failed. [ 98.418693][ T5887] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 98.423173][ T5123] gp8psk: failed to get FW version [ 98.433529][ T5887] usb 1-1: config 179 has no interface number 0 [ 98.440095][ T5887] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 98.466073][ T5123] gp8psk: FPGA Version = 245 [ 98.486941][ T5887] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 98.514050][ T5887] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.526980][ T5887] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 98.538998][ T5887] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.553756][ T5887] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.563270][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.584528][ T6790] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 98.667428][ T5123] gp8psk: usb in 138 operation failed. [ 98.684447][ T5123] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 98.730535][ T5123] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 98.782342][ T5123] usb 4-1: USB disconnect, device number 5 [ 98.928927][ T6804] lo speed is unknown, defaulting to 1000 [ 98.951689][ T52] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input13 [ 99.141693][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 99.169070][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.179065][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.187993][ T6813] netlink: 'syz.2.370': attribute type 21 has an invalid length. [ 99.283315][ T5857] usb 3-1: USB disconnect, device number 10 [ 99.335536][ T5857] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 99.434928][ T5850] usb 1-1: USB disconnect, device number 3 [ 99.435012][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 99.449360][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 99.458179][ C1] ================================================================== [ 99.466248][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 [ 99.474073][ C1] Read of size 4 at addr ffff888079ccc05c by task syz.2.372/6818 [ 99.481796][ C1] [ 99.484123][ C1] CPU: 1 UID: 0 PID: 6818 Comm: syz.2.372 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 99.484148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.484158][ C1] Call Trace: [ 99.484164][ C1] [ 99.484171][ C1] dump_stack_lvl+0x116/0x1f0 [ 99.484197][ C1] print_report+0xc3/0x670 [ 99.484214][ C1] ? __virt_addr_valid+0x5e/0x590 [ 99.484238][ C1] ? __phys_addr+0xc6/0x150 [ 99.484261][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 99.484279][ C1] kasan_report+0xe0/0x110 [ 99.484296][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 99.484316][ C1] do_raw_spin_lock+0x26f/0x2b0 [ 99.484334][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.484352][ C1] ? kcov_remote_stop+0x1b0/0x5f0 [ 99.484371][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 99.484389][ C1] ? __wake_up+0x1c/0x60 [ 99.484411][ C1] __wake_up+0x1c/0x60 [ 99.484433][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 99.484461][ C1] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 99.484486][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 99.484509][ C1] dummy_timer+0x180e/0x3a20 [ 99.484538][ C1] ? find_held_lock+0x2b/0x80 [ 99.484558][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 99.484586][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 99.484612][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 99.484638][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 99.484661][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 99.484684][ C1] ? mark_held_locks+0x49/0x80 [ 99.484708][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.484728][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 99.484751][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 99.484772][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 99.484790][ C1] ? read_tsc+0x9/0x20 [ 99.484815][ C1] hrtimer_run_softirq+0x17d/0x350 [ 99.484834][ C1] handle_softirqs+0x216/0x8e0 [ 99.484857][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.484884][ C1] __irq_exit_rcu+0x109/0x170 [ 99.484903][ C1] irq_exit_rcu+0x9/0x30 [ 99.484923][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 99.484942][ C1] [ 99.484948][ C1] [ 99.484954][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.484974][ C1] RIP: 0010:kasan_check_range+0x111/0x1a0 [ 99.484995][ C1] Code: 44 89 c2 e8 61 ec ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 <74> f2 eb b2 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c 48 83 c0 [ 99.485011][ C1] RSP: 0018:ffffc9000c6e7658 EFLAGS: 00000246 [ 99.485027][ C1] RAX: ffffed1003e8b76f RBX: ffffed1003e8b770 RCX: ffffffff822c30e7 [ 99.485039][ C1] RDX: ffffed1003e8b770 RSI: 0000000000000004 RDI: ffff88801f45bb7c [ 99.485050][ C1] RBP: ffffed1003e8b76f R08: 0000000000000000 R09: ffffed1003e8b76f [ 99.485062][ C1] R10: ffff88801f45bb7f R11: 0000000000000000 R12: ffff88801f45bb30 [ 99.485073][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88801f45bb7c [ 99.485087][ C1] ? page_table_check_set+0x407/0xb50 [ 99.485107][ C1] page_table_check_set+0x407/0xb50 [ 99.485125][ C1] __page_table_check_ptes_set+0x318/0x420 [ 99.485142][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 99.485159][ C1] ? __folio_rmap_sanity_checks.constprop.0+0x90/0x3e0 [ 99.485179][ C1] ? __sanitizer_cov_trace_pc+0x56/0x70 [ 99.485197][ C1] copy_page_range+0x1bd2/0x5fe0 [ 99.485231][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 99.485257][ C1] ? __pfx___might_resched+0x10/0x10 [ 99.485278][ C1] ? __pfx_mas_store+0x10/0x10 [ 99.485300][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 99.485316][ C1] ? down_write+0x14d/0x200 [ 99.485339][ C1] ? copy_process+0x85dd/0x91a0 [ 99.485362][ C1] ? down_write+0x14d/0x200 [ 99.485400][ C1] ? up_write+0x1b2/0x520 [ 99.485418][ C1] copy_process+0x862b/0x91a0 [ 99.485447][ C1] ? __pfx_copy_process+0x10/0x10 [ 99.485469][ C1] ? find_held_lock+0x2b/0x80 [ 99.485487][ C1] ? find_held_lock+0x2b/0x80 [ 99.485509][ C1] ? do_pte_missing+0x569/0x3fb0 [ 99.485537][ C1] kernel_clone+0xfc/0x960 [ 99.485560][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 99.485586][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 99.485608][ C1] __do_sys_clone+0xce/0x120 [ 99.485629][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 99.485657][ C1] ? do_user_addr_fault+0x843/0x1370 [ 99.485678][ C1] do_syscall_64+0xcd/0x260 [ 99.485701][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.485718][ C1] RIP: 0033:0x7f3eaef8e969 [ 99.485732][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.485747][ C1] RSP: 002b:00007f3eacdf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 99.485763][ C1] RAX: ffffffffffffffda RBX: 00007f3eaf1b5fa0 RCX: 00007f3eaef8e969 [ 99.485775][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.485785][ C1] RBP: 00007f3eaf010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 99.485796][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.485806][ C1] R13: 0000000000000001 R14: 00007f3eaf1b5fa0 R15: 00007ffd3798f338 [ 99.485823][ C1] [ 99.485829][ C1] [ 99.989309][ C1] Allocated by task 5887: [ 99.993636][ C1] kasan_save_stack+0x33/0x60 [ 99.998304][ C1] kasan_save_track+0x14/0x30 [ 100.002962][ C1] __kasan_kmalloc+0xaa/0xb0 [ 100.007534][ C1] xpad_probe+0x286/0x1f30 [ 100.011935][ C1] usb_probe_interface+0x300/0x9c0 [ 100.017027][ C1] really_probe+0x23e/0xa90 [ 100.021506][ C1] __driver_probe_device+0x1de/0x440 [ 100.026776][ C1] driver_probe_device+0x4c/0x1b0 [ 100.031778][ C1] __device_attach_driver+0x1df/0x310 [ 100.037125][ C1] bus_for_each_drv+0x156/0x1e0 [ 100.041958][ C1] __device_attach+0x1e4/0x4b0 [ 100.046697][ C1] bus_probe_device+0x17f/0x1c0 [ 100.051528][ C1] device_add+0x1148/0x1a70 [ 100.056022][ C1] usb_set_configuration+0x1187/0x1e20 [ 100.061468][ C1] usb_generic_driver_probe+0xb1/0x110 [ 100.066929][ C1] usb_probe_device+0xec/0x3e0 [ 100.071691][ C1] really_probe+0x23e/0xa90 [ 100.076176][ C1] __driver_probe_device+0x1de/0x440 [ 100.081444][ C1] driver_probe_device+0x4c/0x1b0 [ 100.086626][ C1] __device_attach_driver+0x1df/0x310 [ 100.091981][ C1] bus_for_each_drv+0x156/0x1e0 [ 100.096814][ C1] __device_attach+0x1e4/0x4b0 [ 100.101556][ C1] bus_probe_device+0x17f/0x1c0 [ 100.106389][ C1] device_add+0x1148/0x1a70 [ 100.110869][ C1] usb_new_device+0xd07/0x1a20 [ 100.115616][ C1] hub_event+0x2eb7/0x4fa0 [ 100.120011][ C1] process_one_work+0x9cc/0x1b70 [ 100.124927][ C1] worker_thread+0x6c8/0xf10 [ 100.129495][ C1] kthread+0x3c2/0x780 [ 100.133550][ C1] ret_from_fork+0x45/0x80 [ 100.137949][ C1] ret_from_fork_asm+0x1a/0x30 [ 100.142701][ C1] [ 100.145007][ C1] Freed by task 5850: [ 100.148963][ C1] kasan_save_stack+0x33/0x60 [ 100.153627][ C1] kasan_save_track+0x14/0x30 [ 100.158286][ C1] kasan_save_free_info+0x3b/0x60 [ 100.163297][ C1] __kasan_slab_free+0x51/0x70 [ 100.168048][ C1] kfree+0x2b6/0x4d0 [ 100.171922][ C1] xpad_disconnect+0x1cf/0x580 [ 100.176675][ C1] usb_unbind_interface+0x1da/0x9a0 [ 100.181853][ C1] device_remove+0x122/0x170 [ 100.186428][ C1] device_release_driver_internal+0x44b/0x620 [ 100.192471][ C1] bus_remove_device+0x22f/0x420 [ 100.197391][ C1] device_del+0x396/0x9f0 [ 100.201699][ C1] usb_disable_device+0x355/0x7d0 [ 100.206704][ C1] usb_disconnect+0x2e1/0x920 [ 100.211361][ C1] hub_event+0x1c57/0x4fa0 [ 100.215761][ C1] process_one_work+0x9cc/0x1b70 [ 100.220750][ C1] worker_thread+0x6c8/0xf10 [ 100.225320][ C1] kthread+0x3c2/0x780 [ 100.229366][ C1] ret_from_fork+0x45/0x80 [ 100.233767][ C1] ret_from_fork_asm+0x1a/0x30 [ 100.238515][ C1] [ 100.240905][ C1] Last potentially related work creation: [ 100.246597][ C1] kasan_save_stack+0x33/0x60 [ 100.251256][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 100.256436][ C1] insert_work+0x36/0x230 [ 100.260741][ C1] __queue_work+0x97e/0x10f0 [ 100.265317][ C1] queue_work_on+0x15f/0x1f0 [ 100.269886][ C1] xpad_irq_in+0x1215/0x28d0 [ 100.274457][ C1] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 100.280070][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 100.285259][ C1] dummy_timer+0x180e/0x3a20 [ 100.289831][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 100.295008][ C1] hrtimer_run_softirq+0x17d/0x350 [ 100.300098][ C1] handle_softirqs+0x216/0x8e0 [ 100.304843][ C1] __irq_exit_rcu+0x109/0x170 [ 100.309511][ C1] irq_exit_rcu+0x9/0x30 [ 100.313733][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 100.319363][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.325325][ C1] [ 100.327629][ C1] Second to last potentially related work creation: [ 100.334188][ C1] kasan_save_stack+0x33/0x60 [ 100.338847][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 100.344028][ C1] insert_work+0x36/0x230 [ 100.348360][ C1] __queue_work+0x97e/0x10f0 [ 100.352945][ C1] queue_work_on+0x15f/0x1f0 [ 100.357531][ C1] xpad_irq_in+0x1215/0x28d0 [ 100.362114][ C1] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 100.367476][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 100.372667][ C1] dummy_timer+0x180e/0x3a20 [ 100.377244][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 100.382425][ C1] hrtimer_run_softirq+0x17d/0x350 [ 100.387515][ C1] handle_softirqs+0x216/0x8e0 [ 100.392267][ C1] __irq_exit_rcu+0x109/0x170 [ 100.396931][ C1] irq_exit_rcu+0x9/0x30 [ 100.401151][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 100.406767][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.412727][ C1] [ 100.415045][ C1] The buggy address belongs to the object at ffff888079ccc000 [ 100.415045][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 100.429080][ C1] The buggy address is located 92 bytes inside of [ 100.429080][ C1] freed 1024-byte region [ffff888079ccc000, ffff888079ccc400) [ 100.442853][ C1] [ 100.445158][ C1] The buggy address belongs to the physical page: [ 100.451570][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79cc8 [ 100.460307][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.468959][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 100.476932][ C1] page_type: f5(slab) [ 100.480932][ C1] raw: 00fff00000000040 ffff88801b441dc0 0000000000000000 dead000000000001 [ 100.489506][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 100.498069][ C1] head: 00fff00000000040 ffff88801b441dc0 0000000000000000 dead000000000001 [ 100.506719][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 100.515368][ C1] head: 00fff00000000003 ffffea0001e73201 00000000ffffffff 00000000ffffffff [ 100.524016][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 100.532660][ C1] page dumped because: kasan: bad access detected [ 100.539047][ C1] page_owner tracks the page as allocated [ 100.544736][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5475, tgid 5475 (start-stop-daem), ts 33569569527, free_ts 33555709125 [ 100.565554][ C1] post_alloc_hook+0x181/0x1b0 [ 100.570318][ C1] get_page_from_freelist+0x135c/0x3920 [ 100.575850][ C1] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 100.581728][ C1] alloc_pages_mpol+0x1fb/0x550 [ 100.586557][ C1] new_slab+0x244/0x340 [ 100.590694][ C1] ___slab_alloc+0xd9c/0x1940 [ 100.595357][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 100.600712][ C1] __kmalloc_noprof+0x2f2/0x510 [ 100.605550][ C1] tomoyo_init_log+0x1385/0x2140 [ 100.610469][ C1] tomoyo_supervisor+0x302/0x13b0 [ 100.615487][ C1] tomoyo_env_perm+0x191/0x200 [ 100.620238][ C1] tomoyo_find_next_domain+0xec2/0x20b0 [ 100.625761][ C1] tomoyo_bprm_check_security+0x12e/0x1d0 [ 100.631473][ C1] security_bprm_check+0x1b9/0x1e0 [ 100.636566][ C1] bprm_execve+0x810/0x1650 [ 100.641050][ C1] do_execveat_common.isra.0+0x4a5/0x610 [ 100.646664][ C1] page last free pid 5475 tgid 5475 stack trace: [ 100.652966][ C1] __free_frozen_pages+0x69d/0xff0 [ 100.658058][ C1] __put_partials+0x16d/0x1c0 [ 100.662715][ C1] qlist_free_all+0x4e/0x120 [ 100.667294][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 100.672745][ C1] __kasan_slab_alloc+0x69/0x90 [ 100.677573][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 100.683016][ C1] getname_flags.part.0+0x4c/0x550 [ 100.688128][ C1] getname_flags+0x93/0xf0 [ 100.692526][ C1] vfs_fstatat+0xe1/0xf0 [ 100.696753][ C1] __do_sys_newfstatat+0xa1/0x130 [ 100.701757][ C1] do_syscall_64+0xcd/0x260 [ 100.706244][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.712116][ C1] [ 100.714420][ C1] Memory state around the buggy address: [ 100.720027][ C1] ffff888079ccbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.728084][ C1] ffff888079ccbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.736311][ C1] >ffff888079ccc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.744347][ C1] ^ [ 100.751256][ C1] ffff888079ccc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.759296][ C1] ffff888079ccc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.767507][ C1] ================================================================== [ 100.775551][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.782728][ C1] CPU: 1 UID: 0 PID: 6818 Comm: syz.2.372 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 100.794683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.804718][ C1] Call Trace: [ 100.807982][ C1] [ 100.810808][ C1] dump_stack_lvl+0x3d/0x1f0 [ 100.815386][ C1] panic+0x71c/0x800 [ 100.819268][ C1] ? __pfx_panic+0x10/0x10 [ 100.823673][ C1] ? __pfx__printk+0x10/0x10 [ 100.828251][ C1] ? end_report+0x4c/0x170 [ 100.832651][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 100.837748][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 100.842767][ C1] check_panic_on_warn+0xab/0xb0 [ 100.847691][ C1] end_report+0x107/0x170 [ 100.852001][ C1] kasan_report+0xee/0x110 [ 100.856398][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 100.861404][ C1] do_raw_spin_lock+0x26f/0x2b0 [ 100.866236][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.871588][ C1] ? kcov_remote_stop+0x1b0/0x5f0 [ 100.876595][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 100.881776][ C1] ? __wake_up+0x1c/0x60 [ 100.886000][ C1] __wake_up+0x1c/0x60 [ 100.890051][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 100.895498][ C1] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 100.900852][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 100.906035][ C1] dummy_timer+0x180e/0x3a20 [ 100.910613][ C1] ? find_held_lock+0x2b/0x80 [ 100.915273][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 100.920891][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 100.926511][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 100.932481][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 100.937404][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 100.942327][ C1] ? mark_held_locks+0x49/0x80 [ 100.947077][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.952867][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 100.957786][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 100.962981][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 100.968680][ C1] ? read_tsc+0x9/0x20 [ 100.972738][ C1] hrtimer_run_softirq+0x17d/0x350 [ 100.977832][ C1] handle_softirqs+0x216/0x8e0 [ 100.982582][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 100.987853][ C1] __irq_exit_rcu+0x109/0x170 [ 100.992514][ C1] irq_exit_rcu+0x9/0x30 [ 100.996740][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 101.002354][ C1] [ 101.005266][ C1] [ 101.008177][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.014137][ C1] RIP: 0010:kasan_check_range+0x111/0x1a0 [ 101.019841][ C1] Code: 44 89 c2 e8 61 ec ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 <74> f2 eb b2 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c 48 83 c0 [ 101.039428][ C1] RSP: 0018:ffffc9000c6e7658 EFLAGS: 00000246 [ 101.045476][ C1] RAX: ffffed1003e8b76f RBX: ffffed1003e8b770 RCX: ffffffff822c30e7 [ 101.053443][ C1] RDX: ffffed1003e8b770 RSI: 0000000000000004 RDI: ffff88801f45bb7c [ 101.061397][ C1] RBP: ffffed1003e8b76f R08: 0000000000000000 R09: ffffed1003e8b76f [ 101.069349][ C1] R10: ffff88801f45bb7f R11: 0000000000000000 R12: ffff88801f45bb30 [ 101.077316][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88801f45bb7c [ 101.085271][ C1] ? page_table_check_set+0x407/0xb50 [ 101.090628][ C1] page_table_check_set+0x407/0xb50 [ 101.095806][ C1] __page_table_check_ptes_set+0x318/0x420 [ 101.101592][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 101.107919][ C1] ? __folio_rmap_sanity_checks.constprop.0+0x90/0x3e0 [ 101.114767][ C1] ? __sanitizer_cov_trace_pc+0x56/0x70 [ 101.120318][ C1] copy_page_range+0x1bd2/0x5fe0 [ 101.125259][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 101.130540][ C1] ? __pfx___might_resched+0x10/0x10 [ 101.135817][ C1] ? __pfx_mas_store+0x10/0x10 [ 101.140585][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 101.145771][ C1] ? down_write+0x14d/0x200 [ 101.150261][ C1] ? copy_process+0x85dd/0x91a0 [ 101.155096][ C1] ? down_write+0x14d/0x200 [ 101.159585][ C1] ? up_write+0x1b2/0x520 [ 101.163899][ C1] copy_process+0x862b/0x91a0 [ 101.168569][ C1] ? __pfx_copy_process+0x10/0x10 [ 101.173577][ C1] ? find_held_lock+0x2b/0x80 [ 101.178234][ C1] ? find_held_lock+0x2b/0x80 [ 101.182896][ C1] ? do_pte_missing+0x569/0x3fb0 [ 101.187835][ C1] kernel_clone+0xfc/0x960 [ 101.192239][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 101.197250][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 101.202521][ C1] __do_sys_clone+0xce/0x120 [ 101.207122][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 101.212311][ C1] ? do_user_addr_fault+0x843/0x1370 [ 101.217580][ C1] do_syscall_64+0xcd/0x260 [ 101.222067][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.227945][ C1] RIP: 0033:0x7f3eaef8e969 [ 101.232340][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.251941][ C1] RSP: 002b:00007f3eacdf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 101.260337][ C1] RAX: ffffffffffffffda RBX: 00007f3eaf1b5fa0 RCX: 00007f3eaef8e969 [ 101.268306][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.276260][ C1] RBP: 00007f3eaf010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 101.284212][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.292179][ C1] R13: 0000000000000001 R14: 00007f3eaf1b5fa0 R15: 00007ffd3798f338 [ 101.300137][ C1] [ 101.303338][ C1] Kernel Offset: disabled [ 101.307646][ C1] Rebooting in 86400 seconds..