last executing test programs: 2.853043135s ago: executing program 4 (id=241): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$isdn(0x22, 0x2, 0x10) r1 = socket$isdn(0x22, 0x2, 0x2) r2 = dup3(r1, r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x3, 0x6, 0x1, 0xf8b}, 0xc) 2.689731166s ago: executing program 4 (id=244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x972}, &(0x7f0000000400)=0x8) 2.534077286s ago: executing program 4 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) 2.217276486s ago: executing program 0 (id=249): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094) 2.026671079s ago: executing program 4 (id=252): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.804475069s ago: executing program 0 (id=254): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181c82, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.333189958s ago: executing program 1 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001b00)={0x0, [{0x2, 0x8, 0x5, &(0x7f00000001c0)='c'}, {0x2, 0x8, 0x2b, &(0x7f00000002c0)="ad"}, {0x2, 0x0, 0x44a, 0x0}, {0x2, 0x0, 0x6021d376, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xe872, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x616a, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x5, 0x0, 0x3d, 0x0}, {0x0, 0x0, 0xffffffff, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x3660, 0x0}, {0x1, 0x0, 0x5, 0x0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.058311522s ago: executing program 0 (id=264): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 999.08562ms ago: executing program 0 (id=266): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)="bd", 0x1, 0x100, 0x1}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="84", 0x1e) 959.006801ms ago: executing program 4 (id=267): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000001200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x40010040, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 951.884744ms ago: executing program 1 (id=268): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1}, 0x40044) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 902.928621ms ago: executing program 3 (id=269): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x452d, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) 899.149661ms ago: executing program 2 (id=270): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x29}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 836.449371ms ago: executing program 0 (id=271): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000004"], &(0x7f0000000340)=""/81, 0x27, 0x51, 0x1, 0x5}, 0x28) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x27) 769.157171ms ago: executing program 3 (id=272): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 750.044691ms ago: executing program 2 (id=273): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x82002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1004000}) 733.610838ms ago: executing program 1 (id=274): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) 707.912291ms ago: executing program 4 (id=275): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x0, &(0x7f0000000580)=""/207, 0xcf, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 618.701405ms ago: executing program 0 (id=276): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xbf7ffffb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x2, [{}, {}]}, 0x48) 538.796509ms ago: executing program 3 (id=277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x82, 0x5, 0x6, 0x0, 0x0, 0x7, 0x0, 0x4b, 0xf7, 0x4, 0x6, 0x0, 0x0, 0x1, 0xb, 0x0, 0xf, 0x8, 0xfd, '\x00', 0x2, 0xb4}) 502.516326ms ago: executing program 2 (id=278): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) close(r1) 469.897638ms ago: executing program 1 (id=279): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_restrict_self(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23}, 0x3) 389.066847ms ago: executing program 2 (id=280): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 373.92239ms ago: executing program 1 (id=281): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(r0) 308.761303ms ago: executing program 2 (id=282): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 240.622278ms ago: executing program 3 (id=283): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) 199.373639ms ago: executing program 2 (id=284): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) read$FUSE(r1, 0x0, 0x600) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) 121.893876ms ago: executing program 1 (id=285): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x4, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 56.947493ms ago: executing program 3 (id=286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) write$nci(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 0s ago: executing program 3 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f00000016c0)={{}, {0x1, 0x3}, [{0x2, 0x4}], {0x4, 0x5}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x2c, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 56.840546][ T29] audit: type=1400 audit(1771351265.466:62): avc: denied { mounton } for pid=5793 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.864203][ T29] audit: type=1400 audit(1771351265.486:63): avc: denied { mount } for pid=5793 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.866719][ T5793] cgroup: Unknown subsys name 'net' [ 56.893043][ T29] audit: type=1400 audit(1771351265.516:64): avc: denied { unmount } for pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.037920][ T5793] cgroup: Unknown subsys name 'cpuset' [ 57.045940][ T5793] cgroup: Unknown subsys name 'rlimit' [ 57.194625][ T29] audit: type=1400 audit(1771351265.816:65): avc: denied { setattr } for pid=5793 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.229212][ T29] audit: type=1400 audit(1771351265.816:66): avc: denied { create } for pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.275352][ T29] audit: type=1400 audit(1771351265.816:67): avc: denied { write } for pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.291507][ T5795] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.296600][ T29] audit: type=1400 audit(1771351265.816:68): avc: denied { read } for pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.325368][ T29] audit: type=1400 audit(1771351265.816:69): avc: denied { mounton } for pid=5793 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.350713][ T29] audit: type=1400 audit(1771351265.816:70): avc: denied { mount } for pid=5793 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.374259][ T29] audit: type=1400 audit(1771351265.926:71): avc: denied { relabelto } for pid=5795 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.261060][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.021107][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.034010][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.042270][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.049754][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.057467][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.065488][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.066653][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.073205][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.081064][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.089104][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.097378][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.104034][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.115792][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.117474][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.123696][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.138589][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.146183][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.154944][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.162685][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.162961][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.170827][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.177901][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.184505][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.200978][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.231712][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.514663][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 60.610859][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 60.731514][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.739872][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.747346][ T5805] bridge_slave_0: entered allmulticast mode [ 60.754159][ T5805] bridge_slave_0: entered promiscuous mode [ 60.770074][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 60.804543][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.812316][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.820254][ T5805] bridge_slave_1: entered allmulticast mode [ 60.827016][ T5805] bridge_slave_1: entered promiscuous mode [ 60.851783][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.860241][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.867431][ T5807] bridge_slave_0: entered allmulticast mode [ 60.874104][ T5807] bridge_slave_0: entered promiscuous mode [ 60.900614][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 60.910259][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.917516][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.924611][ T5807] bridge_slave_1: entered allmulticast mode [ 60.931594][ T5807] bridge_slave_1: entered promiscuous mode [ 60.938217][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 60.949893][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.978528][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.030265][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.065517][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.079623][ T5805] team0: Port device team_slave_0 added [ 61.085702][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.093345][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.100690][ T5818] bridge_slave_0: entered allmulticast mode [ 61.107460][ T5818] bridge_slave_0: entered promiscuous mode [ 61.129779][ T5805] team0: Port device team_slave_1 added [ 61.136046][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.143316][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.150476][ T5818] bridge_slave_1: entered allmulticast mode [ 61.157383][ T5818] bridge_slave_1: entered promiscuous mode [ 61.214940][ T5807] team0: Port device team_slave_0 added [ 61.239765][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.246929][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.272997][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.286381][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.297388][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.307839][ T5807] team0: Port device team_slave_1 added [ 61.313527][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.320869][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.328215][ T5806] bridge_slave_0: entered allmulticast mode [ 61.334804][ T5806] bridge_slave_0: entered promiscuous mode [ 61.341663][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.348801][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.356043][ T5808] bridge_slave_0: entered allmulticast mode [ 61.362709][ T5808] bridge_slave_0: entered promiscuous mode [ 61.369941][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.377009][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.406433][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.438833][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.446044][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.453282][ T5806] bridge_slave_1: entered allmulticast mode [ 61.460222][ T5806] bridge_slave_1: entered promiscuous mode [ 61.466939][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.474039][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.481825][ T5808] bridge_slave_1: entered allmulticast mode [ 61.488580][ T5808] bridge_slave_1: entered promiscuous mode [ 61.516842][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.539208][ T5818] team0: Port device team_slave_0 added [ 61.560995][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.576638][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.583825][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.610183][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.622189][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.629283][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.655223][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.672198][ T5818] team0: Port device team_slave_1 added [ 61.696972][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.713911][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.721074][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.747172][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.765980][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.776252][ T5808] team0: Port device team_slave_0 added [ 61.782784][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.790073][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.816254][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.831104][ T5805] hsr_slave_0: entered promiscuous mode [ 61.837299][ T5805] hsr_slave_1: entered promiscuous mode [ 61.858216][ T5808] team0: Port device team_slave_1 added [ 61.905766][ T5807] hsr_slave_0: entered promiscuous mode [ 61.911794][ T5807] hsr_slave_1: entered promiscuous mode [ 61.917971][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 61.923728][ T5807] Cannot create hsr debugfs directory [ 61.952722][ T5818] hsr_slave_0: entered promiscuous mode [ 61.958855][ T5818] hsr_slave_1: entered promiscuous mode [ 61.964690][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 61.970558][ T5818] Cannot create hsr debugfs directory [ 61.977375][ T5806] team0: Port device team_slave_0 added [ 62.001456][ T5806] team0: Port device team_slave_1 added [ 62.008237][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.015156][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.041043][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.052957][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.059913][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.086468][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.144971][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.152050][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.165977][ T51] Bluetooth: hci0: command tx timeout [ 62.178443][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.195773][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.202698][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.229304][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.245404][ T51] Bluetooth: hci4: command tx timeout [ 62.245414][ T5820] Bluetooth: hci3: command tx timeout [ 62.245630][ T5820] Bluetooth: hci1: command tx timeout [ 62.320994][ T5808] hsr_slave_0: entered promiscuous mode [ 62.327236][ T5820] Bluetooth: hci2: command tx timeout [ 62.329096][ T5808] hsr_slave_1: entered promiscuous mode [ 62.339118][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 62.344827][ T5808] Cannot create hsr debugfs directory [ 62.406000][ T5806] hsr_slave_0: entered promiscuous mode [ 62.412062][ T5806] hsr_slave_1: entered promiscuous mode [ 62.418336][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 62.424043][ T5806] Cannot create hsr debugfs directory [ 62.664618][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.675213][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.685591][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.707300][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.742359][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.751724][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.774611][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.784450][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.840428][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.849951][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.860395][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.871545][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.963739][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.978462][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.988925][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.998896][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.029085][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.064661][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.093122][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.133198][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.140394][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.149475][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.156552][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.171977][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.184261][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.198161][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.207269][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.226310][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.236390][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.247639][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.254781][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.274810][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.312597][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 63.312607][ T29] audit: type=1400 audit(1771351271.936:84): avc: denied { sys_module } for pid=5805 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.356610][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.363767][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.372402][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.379496][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.412709][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.419861][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.553601][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.573222][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.622474][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.647873][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.673983][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.719909][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.727064][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.737031][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.744119][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.759171][ T5805] veth0_vlan: entered promiscuous mode [ 63.812794][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.819919][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.829941][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.837093][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.867513][ T5805] veth1_vlan: entered promiscuous mode [ 63.879233][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.957336][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.971014][ T5805] veth0_macvtap: entered promiscuous mode [ 63.998843][ T5805] veth1_macvtap: entered promiscuous mode [ 64.026479][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.047263][ T5807] veth0_vlan: entered promiscuous mode [ 64.058579][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.092393][ T5807] veth1_vlan: entered promiscuous mode [ 64.111604][ T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.135969][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.144702][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.167587][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.238307][ T5807] veth0_macvtap: entered promiscuous mode [ 64.251795][ T5820] Bluetooth: hci0: command tx timeout [ 64.256603][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.294736][ T5807] veth1_macvtap: entered promiscuous mode [ 64.326148][ T5820] Bluetooth: hci1: command tx timeout [ 64.327062][ T5817] Bluetooth: hci4: command tx timeout [ 64.331548][ T5820] Bluetooth: hci3: command tx timeout [ 64.337999][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.407299][ T5820] Bluetooth: hci2: command tx timeout [ 64.422318][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.442150][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.442864][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.450148][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.496236][ T192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.505060][ T5806] veth0_vlan: entered promiscuous mode [ 64.511588][ T1107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.544657][ T1107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.553874][ T1107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.564187][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.576375][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.600104][ T5808] veth0_vlan: entered promiscuous mode [ 64.610163][ T5818] veth0_vlan: entered promiscuous mode [ 64.627928][ T29] audit: type=1400 audit(1771351273.246:85): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.Glf3eV/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.676029][ T5808] veth1_vlan: entered promiscuous mode [ 64.683042][ T5806] veth1_vlan: entered promiscuous mode [ 64.706501][ T29] audit: type=1400 audit(1771351273.246:86): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.719581][ T5806] veth0_macvtap: entered promiscuous mode [ 64.734748][ T29] audit: type=1400 audit(1771351273.286:87): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.Glf3eV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.760092][ T29] audit: type=1400 audit(1771351273.286:88): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.782616][ T5818] veth1_vlan: entered promiscuous mode [ 64.803642][ T5805] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.816038][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.828219][ T5806] veth1_macvtap: entered promiscuous mode [ 64.845420][ T29] audit: type=1400 audit(1771351273.286:89): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.Glf3eV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.849448][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.876425][ T5808] veth0_macvtap: entered promiscuous mode [ 64.895724][ T29] audit: type=1400 audit(1771351273.286:90): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.Glf3eV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.923774][ T29] audit: type=1400 audit(1771351273.296:91): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.933861][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.957337][ T29] audit: type=1400 audit(1771351273.296:92): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.998407][ T5808] veth1_macvtap: entered promiscuous mode [ 65.020273][ T29] audit: type=1400 audit(1771351273.326:93): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="gadgetfs" ino=7456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.022496][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.077992][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.088419][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.114837][ T5818] veth0_macvtap: entered promiscuous mode [ 65.147938][ T149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.156926][ T149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175149][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.185625][ T149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.216477][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.232323][ T5818] veth1_macvtap: entered promiscuous mode [ 65.249010][ T149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.297574][ T149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.322809][ T149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.371125][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.390224][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.468577][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.507929][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.549657][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.568618][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.623700][ T1107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.637147][ T1107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.661389][ T1107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.672693][ T1107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.709334][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.718973][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.769172][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.781956][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.798362][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.822577][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.906216][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.984653][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.019798][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.090712][ T5811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.132155][ T5811] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.144507][ T5811] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.154791][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.163294][ T5811] usb 1-1: SerialNumber: syz [ 66.171031][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.187914][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.325771][ T5820] Bluetooth: hci0: command tx timeout [ 66.407215][ T51] Bluetooth: hci4: command tx timeout [ 66.412703][ T51] Bluetooth: hci1: command tx timeout [ 66.422293][ T5820] Bluetooth: hci3: command tx timeout [ 66.427099][ T5811] usb 1-1: 0:2 : does not exist [ 66.456421][ T5811] usb 1-1: unit 48 not found! [ 66.486474][ T5820] Bluetooth: hci2: command tx timeout [ 66.564304][ T5811] usb 1-1: USB disconnect, device number 2 [ 66.610298][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.715614][ T792] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.908411][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 66.931249][ T792] usb 4-1: config 129 has an invalid interface number: 234 but max is 0 [ 66.945340][ T792] usb 4-1: config 129 has no interface number 0 [ 66.970460][ T792] usb 4-1: New USB device found, idVendor=10d2, idProduct=62a3, bcdDevice= 3.cd [ 66.979660][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.991930][ T792] usb 4-1: Product: syz [ 66.996155][ T792] usb 4-1: Manufacturer: syz [ 67.000841][ T792] usb 4-1: SerialNumber: syz [ 67.231812][ T792] usblcd 4-1:129.234: USBLCD model not supported. [ 67.253416][ T792] usb 4-1: USB disconnect, device number 2 [ 67.259623][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.436357][ T5876] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 67.612074][ T5876] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.638442][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 67.663756][ T5876] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.691856][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 67.716627][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 67.740134][ T5876] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.749951][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 67.786202][ T5876] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.820684][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 67.847941][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 67.862513][ T5876] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.870085][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 67.886518][ T5876] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.909086][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 67.921308][ T5876] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 67.955953][ T5876] usb 5-1: string descriptor 0 read error: -22 [ 67.962410][ T5876] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 68.025595][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.112775][ T5876] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 68.340531][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 68.340547][ T29] audit: type=1400 audit(1771351276.966:141): avc: denied { write } for pid=6005 comm="syz.0.33" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.388179][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.402314][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.410335][ T5820] Bluetooth: hci0: command tx timeout [ 68.421623][ T792] usb 5-1: USB disconnect, device number 2 [ 68.487455][ T5820] Bluetooth: hci3: command tx timeout [ 68.492918][ T51] Bluetooth: hci1: command tx timeout [ 68.495528][ T5946] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 68.498368][ T51] Bluetooth: hci4: command tx timeout [ 68.542430][ T29] audit: type=1400 audit(1771351277.166:142): avc: denied { read write } for pid=6009 comm="syz.0.35" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.544691][ T6010] binder: 6009:6010 ioctl c0306201 200000000040 returned -14 [ 68.566259][ T29] audit: type=1400 audit(1771351277.166:143): avc: denied { open } for pid=6009 comm="syz.0.35" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.573516][ T51] Bluetooth: hci2: command tx timeout [ 68.608635][ T29] audit: type=1400 audit(1771351277.166:144): avc: denied { ioctl } for pid=6009 comm="syz.0.35" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.664084][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 68.678890][ T5946] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 68.723159][ T5946] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 68.751217][ T5946] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 68.781995][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.795355][ T29] audit: type=1400 audit(1771351277.406:145): avc: denied { create } for pid=6015 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.859494][ T29] audit: type=1400 audit(1771351277.406:146): avc: denied { setopt } for pid=6015 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.880400][ T29] audit: type=1400 audit(1771351277.506:147): avc: denied { read write } for pid=6019 comm="syz.3.39" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.931300][ T29] audit: type=1400 audit(1771351277.506:148): avc: denied { open } for pid=6019 comm="syz.3.39" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.959390][ T29] audit: type=1400 audit(1771351277.526:149): avc: denied { map } for pid=6019 comm="syz.3.39" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.982698][ T29] audit: type=1400 audit(1771351277.526:150): avc: denied { execute } for pid=6019 comm="syz.3.39" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.017146][ T6022] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 69.375543][ T5876] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.382253][ T6034] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 69.562620][ T5876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.575299][ T5876] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 69.587698][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.597216][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 69.627466][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 69.652979][ T5876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.664249][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.672473][ T5876] usb 5-1: Product: syz [ 69.676746][ T5876] usb 5-1: Manufacturer: syz [ 69.705314][ T792] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.710854][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 69.718647][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 69.739836][ T5876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 69.755955][ T5876] cdc_wdm 5-1:1.0: Unknown control protocol [ 69.877526][ T5946] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 69.886889][ T5946] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input5 [ 69.896149][ T792] usb 1-1: Using ep0 maxpacket: 32 [ 69.903215][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 69.914569][ T792] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 69.949520][ T5946] input: failed to attach handler kbd to device input5, error: -5 [ 69.969439][ T792] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 69.994882][ T792] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 70.019556][ T792] usb 1-1: Product: syz [ 70.030039][ T792] usb 1-1: Manufacturer: syz [ 70.044319][ T792] usb 1-1: SerialNumber: syz [ 70.054721][ T5946] usb 3-1: USB disconnect, device number 2 [ 70.077652][ T792] usb 1-1: config 0 descriptor?? [ 70.110952][ T6038] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 70.121790][ T792] hub 1-1:0.0: bad descriptor, ignoring hub [ 70.132713][ T792] hub 1-1:0.0: probe with driver hub failed with error -5 [ 70.475571][ T5876] usb 1-1: USB disconnect, device number 3 [ 70.502447][ T6059] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 70.590656][ T5935] usb 5-1: USB disconnect, device number 3 [ 70.646235][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.768547][ T6069] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.807732][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.825306][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.855939][ T42] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 70.865000][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.890312][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'. [ 70.930637][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 70.942152][ T42] usb 2-1: config 0 descriptor?? [ 70.971117][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.977668][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.306235][ T6083] ptrace attach of "./syz-executor exec"[6085] was attempted by "./syz-executor exec"[6083] [ 71.364296][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 71.373803][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 71.416114][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 71.437121][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 71.456199][ T42] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 71.496062][ T42] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 71.915376][ T5876] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.014782][ T42] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 5: -71 [ 72.029247][ T42] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense calibration info: -71 [ 72.049473][ T42] playstation 0003:054C:0DF2.0001: Failed to get calibration data from DualSense [ 72.069859][ T42] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 72.079694][ T42] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71 [ 72.098982][ T42] usb 2-1: USB disconnect, device number 2 [ 72.108905][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 72.168956][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.196181][ T5876] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 72.216240][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.224495][ T5876] usb 4-1: Product: syz [ 72.229009][ T5876] usb 4-1: Manufacturer: syz [ 72.233614][ T5876] usb 4-1: SerialNumber: syz [ 72.249203][ T5876] usb 4-1: config 0 descriptor?? [ 72.666109][ T5876] gs_usb 4-1:0.0: Configuring for 242 interfaces [ 72.802531][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 72.965303][ T5935] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.125990][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 73.139876][ T5935] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 73.156831][ T5935] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.185275][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.206391][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.228727][ T5935] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.252957][ T5935] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.273121][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.285395][ T5876] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 73.410271][ T5876] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 73.454365][ T5876] usb 4-1: USB disconnect, device number 3 [ 73.522223][ T5935] usb 1-1: usb_control_msg returned -32 [ 73.549523][ T5935] usbtmc 1-1:16.0: can't read capabilities [ 73.633424][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 73.816786][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 73.816801][ T29] audit: type=1400 audit(1771351282.446:185): avc: denied { mounton } for pid=6155 comm="syz.1.97" path="/21/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.853039][ T6158] netlink: 'syz.4.98': attribute type 29 has an invalid length. [ 73.883362][ T29] audit: type=1400 audit(1771351282.496:186): avc: denied { write } for pid=6122 comm="syz.0.83" name="usbtmc0" dev="devtmpfs" ino=2824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.912142][ T6158] netlink: 'syz.4.98': attribute type 29 has an invalid length. [ 73.960423][ T29] audit: type=1400 audit(1771351282.586:187): avc: denied { create } for pid=6157 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.979281][ T6159] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 73.998885][ T6158] netlink: 500 bytes leftover after parsing attributes in process `syz.4.98'. [ 74.027753][ T29] audit: type=1400 audit(1771351282.626:188): avc: denied { write } for pid=6157 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.056817][ T792] usb 1-1: USB disconnect, device number 4 [ 74.068598][ T6158] unsupported nla_type 58 [ 74.069726][ T29] audit: type=1400 audit(1771351282.626:189): avc: denied { nlmsg_write } for pid=6157 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.130268][ T29] audit: type=1400 audit(1771351282.626:190): avc: denied { create } for pid=6162 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.245315][ T29] audit: type=1400 audit(1771351282.626:191): avc: denied { bind } for pid=6162 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.286274][ T6151] netlink: 'syz.2.96': attribute type 2 has an invalid length. [ 74.296129][ T29] audit: type=1400 audit(1771351282.636:192): avc: denied { write } for pid=6162 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.355335][ T29] audit: type=1400 audit(1771351282.636:193): avc: denied { setopt } for pid=6162 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.425372][ T29] audit: type=1400 audit(1771351282.726:194): avc: denied { read append } for pid=6164 comm="syz.3.100" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.621923][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 74.893036][ T6195] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 75.091895][ T6197] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 75.197641][ T6210] syz.3.116 uses obsolete (PF_INET,SOCK_PACKET) [ 76.096434][ T976] cfg80211: failed to load regulatory.db [ 76.685304][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.867137][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 76.887641][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 76.905298][ T9] usb 1-1: config 0 has no interface number 0 [ 76.921401][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 76.938566][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.957905][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.979771][ T9] usb 1-1: Product: syz [ 76.983975][ T9] usb 1-1: Manufacturer: syz [ 76.989024][ T9] usb 1-1: SerialNumber: syz [ 76.995993][ T9] usb 1-1: config 0 descriptor?? [ 77.004709][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 77.223213][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 77.249840][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 77.633091][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 77.641997][ T9] usb 1-1: USB disconnect, device number 5 [ 77.668464][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 77.698414][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 77.735937][ T9] quatech2 1-1:0.51: device disconnected [ 78.370150][ T6324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.395379][ T976] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.577550][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 78.583284][ T6334] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.598309][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.609930][ T976] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.620090][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.679981][ T976] usb 2-1: config 0 descriptor?? [ 78.910116][ T976] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.965822][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 78.970517][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 79.218325][ T6353] capability: warning: `syz.3.180' uses 32-bit capabilities (legacy support in use) [ 79.246449][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 79.246463][ T29] audit: type=1400 audit(1771351287.866:229): avc: denied { bind } for pid=6352 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.333894][ T29] audit: type=1400 audit(1771351287.876:230): avc: denied { write } for pid=6352 comm="syz.3.180" path="socket:[10002]" dev="sockfs" ino=10002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.366054][ T976] usb 2-1: USB disconnect, device number 3 [ 79.767148][ T5946] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.870096][ T6370] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 79.936572][ T6370] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.188'. [ 79.968735][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.985390][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.026814][ T5946] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 80.045305][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.056035][ T5946] usb 4-1: config 0 descriptor?? [ 80.398077][ T29] audit: type=1400 audit(1771351289.026:231): avc: denied { setopt } for pid=6386 comm="syz.2.196" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.456573][ T29] audit: type=1400 audit(1771351289.026:232): avc: denied { write } for pid=6386 comm="syz.2.196" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.506248][ T29] audit: type=1400 audit(1771351289.046:233): avc: denied { read } for pid=6386 comm="syz.2.196" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.507270][ T5946] konepure 0003:1E7D:2DB4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 80.809372][ T29] audit: type=1400 audit(1771351289.436:234): avc: denied { wake_alarm } for pid=6397 comm="syz.4.200" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.828029][ T5946] usb 4-1: USB disconnect, device number 4 [ 81.925599][ T29] audit: type=1400 audit(1771351290.536:235): avc: denied { mounton } for pid=6422 comm="syz.3.210" path="/proc/61/task" dev="proc" ino=11042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 82.008019][ T29] audit: type=1400 audit(1771351290.636:236): avc: denied { setopt } for pid=6427 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.036540][ T5946] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.093787][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 82.202706][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 82.222651][ T5946] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 82.247283][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.266025][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.277069][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.295810][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.304744][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.326068][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.336306][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.372646][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.415986][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.427277][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.445300][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.466330][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.484923][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.485377][ T29] audit: type=1400 audit(1771351291.106:237): avc: denied { create } for pid=6446 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.494917][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.580705][ T29] audit: type=1400 audit(1771351291.186:238): avc: denied { bind } for pid=6446 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.590556][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.637129][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.647880][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.678703][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.689309][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.698404][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.715561][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.723346][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.756474][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.772994][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.807129][ T5946] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 82.820452][ T5946] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 82.847409][ T5946] usb 5-1: Product: syz [ 82.863063][ T5946] usb 5-1: Manufacturer: syz [ 82.869274][ T5946] usb 5-1: SerialNumber: syz [ 82.884607][ T5946] usb 5-1: config 0 descriptor?? [ 82.900623][ T5946] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 83.239304][ T5946] usb 5-1: USB disconnect, device number 4 [ 83.255711][ T5946] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 83.365342][ T976] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.537297][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 83.549453][ T976] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 83.575827][ T976] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 83.601436][ T976] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.637560][ T976] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 83.674020][ T976] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 83.684165][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.696000][ T976] usb 3-1: Product: syz [ 83.700178][ T976] usb 3-1: Manufacturer: syz [ 83.720506][ T976] usb 3-1: SerialNumber: syz [ 83.740416][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 83.752406][ T976] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input6 [ 83.996172][ T976] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 84.004477][ T976] (id 0x00) [ 84.009590][ T6497] delete_channel: no stack [ 84.136816][ T976] rc_core: IR keymap rc-imon-pad not found [ 84.142660][ T976] Registered IR keymap rc-empty [ 84.178843][ T976] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 84.213276][ T976] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 84.261638][ T976] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 84.292639][ T976] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input7 [ 84.321583][ T976] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:3> initialized [ 84.333736][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 84.333754][ T29] audit: type=1400 audit(1771351292.966:257): avc: denied { read write } for pid=6510 comm="syz.3.247" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.358913][ T6513] syzkaller1: entered promiscuous mode [ 84.370344][ T29] audit: type=1400 audit(1771351292.966:258): avc: denied { open } for pid=6510 comm="syz.3.247" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.397987][ T6513] syzkaller1: entered allmulticast mode [ 84.435326][ T29] audit: type=1400 audit(1771351292.976:259): avc: denied { create } for pid=6512 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.502407][ T29] audit: type=1400 audit(1771351292.976:260): avc: denied { ioctl } for pid=6512 comm="syz.4.248" path="socket:[11463]" dev="sockfs" ino=11463 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.553430][ T6466] imon:display_open: display port is already open [ 84.575346][ T29] audit: type=1400 audit(1771351292.996:261): avc: denied { ioctl } for pid=6510 comm="syz.3.247" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.609228][ T976] usb 3-1: USB disconnect, device number 3 [ 84.726681][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.735725][ T6518] netlink: 44 bytes leftover after parsing attributes in process `syz.0.249'. [ 84.779720][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.788033][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.842843][ T6522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.249'. [ 84.943895][ T29] audit: type=1400 audit(1771351293.556:262): avc: denied { mounton } for pid=6521 comm="syz.4.252" path="/48/file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.127029][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.232906][ T29] audit: type=1400 audit(1771351293.856:263): avc: denied { read write } for pid=6534 comm="syz.2.256" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.345315][ T29] audit: type=1400 audit(1771351293.856:264): avc: denied { open } for pid=6534 comm="syz.2.256" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.399309][ T29] audit: type=1400 audit(1771351293.896:265): avc: denied { append } for pid=6534 comm="syz.2.256" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.434035][ T29] audit: type=1400 audit(1771351293.896:266): avc: denied { ioctl } for pid=6534 comm="syz.2.256" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.120794][ T6571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.129446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.168010][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.178369][ T6573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.224674][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 86.749035][ T6599] ------------[ cut here ]------------ [ 86.754722][ T6599] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 86.766520][ T6599] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2693 at mac80211_hwsim_sta_rc_update+0x5db/0x840, CPU#1: syz.1.285/6599 [ 86.779996][ T6599] Modules linked in: [ 86.784153][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.1.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.795778][ T6599] Tainted: [L]=SOFTLOCKUP [ 86.800453][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.811072][ T6599] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 86.818075][ T6599] Code: 00 48 8d 3d 35 31 c1 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 32 ed e3 fa e8 7d 32 6a 04 [ 86.837947][ T6599] RSP: 0018:ffffc900100e7120 EFLAGS: 00010246 [ 86.844067][ T6599] RAX: ffff888056352a90 RBX: 0000000000000000 RCX: ffff8880213f4ec0 [ 86.852857][ T6599] RDX: 0000000000000000 RSI: ffff888056353002 RDI: ffffffff90e5ddf0 [ 86.862673][ T6599] RBP: 0000000000000007 R08: 0000000000000014 R09: 0000000000000000 [ 86.870818][ T6599] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 86.878878][ T6599] R13: ffff8880213f5090 R14: ffff88807b0bb100 R15: 000000000000000a [ 86.886917][ T6599] FS: 00007f58305026c0(0000) GS:ffff88812444d000(0000) knlGS:0000000000000000 [ 86.896000][ T6599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.902645][ T6599] CR2: 0000200000001080 CR3: 0000000074ec2000 CR4: 00000000003526f0 [ 86.910721][ T6599] Call Trace: [ 86.914012][ T6599] [ 86.917028][ T6599] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 86.922978][ T6599] mac80211_hwsim_sta_add+0xc9/0x290 [ 86.928354][ T6599] drv_sta_state+0x887/0x1960 [ 86.933229][ T6599] sta_info_insert_rcu+0x170b/0x2fa0 [ 86.938621][ T6599] sta_info_insert+0x16/0xd0 [ 86.943233][ T6599] ieee80211_add_station+0x471/0x6d0 [ 86.948614][ T6599] nl80211_new_station+0x145b/0x1dd0 [ 86.954540][ T6599] ? __pfx_nl80211_new_station+0x10/0x10 [ 86.960745][ T6599] ? nl80211_pre_doit+0x19a/0xae0 [ 86.965940][ T6599] genl_family_rcv_msg_doit+0x214/0x300 [ 86.971506][ T6599] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 86.977652][ T6599] ? bpf_lsm_capable+0x9/0x10 [ 86.982435][ T6599] ? security_capable+0x80/0x260 [ 86.987626][ T6599] ? ns_capable+0xd2/0xf0 [ 86.991993][ T6599] genl_rcv_msg+0x560/0x800 [ 86.996605][ T6599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.001643][ T6599] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 87.007129][ T6599] ? __pfx_nl80211_new_station+0x10/0x10 [ 87.012777][ T6599] ? __pfx_nl80211_post_doit+0x10/0x10 [ 87.018309][ T6599] netlink_rcv_skb+0x159/0x420 [ 87.023119][ T6599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.028261][ T6599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.033584][ T6599] ? netlink_deliver_tap+0x1ae/0xcc0 [ 87.038961][ T6599] genl_rcv+0x28/0x40 [ 87.042961][ T6599] netlink_unicast+0x5aa/0x870 [ 87.047835][ T6599] ? __pfx_netlink_unicast+0x10/0x10 [ 87.053156][ T6599] netlink_sendmsg+0x8b0/0xda0 [ 87.058635][ T6599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.063945][ T6599] ? __might_fault+0xc0/0x140 [ 87.069183][ T6599] ____sys_sendmsg+0xa54/0xc30 [ 87.074040][ T6599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.079419][ T6599] ? try_to_wake_up+0x644/0x1a80 [ 87.084373][ T6599] ___sys_sendmsg+0x190/0x1e0 [ 87.089155][ T6599] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.094367][ T6599] ? futex_private_hash_put+0x107/0x1c0 [ 87.100016][ T6599] __sys_sendmsg+0x170/0x220 [ 87.104635][ T6599] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.109853][ T6599] ? __x64_sys_futex+0x34f/0x4d0 [ 87.114827][ T6599] do_syscall_64+0x106/0xf80 [ 87.119490][ T6599] ? clear_bhb_loop+0x40/0x90 [ 87.124199][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.130378][ T6599] RIP: 0033:0x7f582f59c629 [ 87.134812][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.154536][ T6599] RSP: 002b:00007f5830502028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.163607][ T6599] RAX: ffffffffffffffda RBX: 00007f582f815fa0 RCX: 00007f582f59c629 [ 87.172126][ T6599] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 87.180132][ T6599] RBP: 00007f582f632b39 R08: 0000000000000000 R09: 0000000000000000 [ 87.188113][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.196151][ T6599] R13: 00007f582f816038 R14: 00007f582f815fa0 R15: 00007ffcbce11ce8 [ 87.204112][ T6599] [ 87.207563][ T6599] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.214857][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.1.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.225606][ T6599] Tainted: [L]=SOFTLOCKUP [ 87.229911][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.239958][ T6599] Call Trace: [ 87.243219][ T6599] [ 87.246125][ T6599] dump_stack_lvl+0x100/0x190 [ 87.250806][ T6599] vpanic+0x552/0x970 [ 87.254764][ T6599] ? __pfx_vpanic+0x10/0x10 [ 87.259259][ T6599] panic+0xd1/0xe0 [ 87.262973][ T6599] ? __pfx_panic+0x10/0x10 [ 87.267410][ T6599] check_panic_on_warn.cold+0x19/0x34 [ 87.272781][ T6599] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 87.278834][ T6599] __warn.cold+0x191/0x348 [ 87.283250][ T6599] __report_bug+0x296/0x3d0 [ 87.287757][ T6599] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 87.293835][ T6599] ? __pfx___report_bug+0x10/0x10 [ 87.298866][ T6599] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.304679][ T6599] ? __bfs+0x150/0x2a0 [ 87.308748][ T6599] report_bug_entry+0xe1/0x290 [ 87.313491][ T6599] ? mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 87.319545][ T6599] handle_bug+0x1c9/0x2a0 [ 87.323871][ T6599] exc_invalid_op+0x17/0x50 [ 87.328358][ T6599] asm_exc_invalid_op+0x1a/0x20 [ 87.333190][ T6599] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 87.339856][ T6599] Code: 00 48 8d 3d 35 31 c1 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 32 ed e3 fa e8 7d 32 6a 04 [ 87.359470][ T6599] RSP: 0018:ffffc900100e7120 EFLAGS: 00010246 [ 87.365560][ T6599] RAX: ffff888056352a90 RBX: 0000000000000000 RCX: ffff8880213f4ec0 [ 87.373526][ T6599] RDX: 0000000000000000 RSI: ffff888056353002 RDI: ffffffff90e5ddf0 [ 87.381485][ T6599] RBP: 0000000000000007 R08: 0000000000000014 R09: 0000000000000000 [ 87.389615][ T6599] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 87.397564][ T6599] R13: ffff8880213f5090 R14: ffff88807b0bb100 R15: 000000000000000a [ 87.405532][ T6599] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 87.411419][ T6599] mac80211_hwsim_sta_add+0xc9/0x290 [ 87.416692][ T6599] drv_sta_state+0x887/0x1960 [ 87.421362][ T6599] sta_info_insert_rcu+0x170b/0x2fa0 [ 87.426642][ T6599] sta_info_insert+0x16/0xd0 [ 87.431219][ T6599] ieee80211_add_station+0x471/0x6d0 [ 87.436502][ T6599] nl80211_new_station+0x145b/0x1dd0 [ 87.441780][ T6599] ? __pfx_nl80211_new_station+0x10/0x10 [ 87.447418][ T6599] ? nl80211_pre_doit+0x19a/0xae0 [ 87.452432][ T6599] genl_family_rcv_msg_doit+0x214/0x300 [ 87.457964][ T6599] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 87.464017][ T6599] ? bpf_lsm_capable+0x9/0x10 [ 87.468689][ T6599] ? security_capable+0x80/0x260 [ 87.473619][ T6599] ? ns_capable+0xd2/0xf0 [ 87.478024][ T6599] genl_rcv_msg+0x560/0x800 [ 87.482523][ T6599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.487526][ T6599] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 87.492881][ T6599] ? __pfx_nl80211_new_station+0x10/0x10 [ 87.498504][ T6599] ? __pfx_nl80211_post_doit+0x10/0x10 [ 87.503951][ T6599] netlink_rcv_skb+0x159/0x420 [ 87.508704][ T6599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.513707][ T6599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.518986][ T6599] ? netlink_deliver_tap+0x1ae/0xcc0 [ 87.524260][ T6599] genl_rcv+0x28/0x40 [ 87.528228][ T6599] netlink_unicast+0x5aa/0x870 [ 87.533010][ T6599] ? __pfx_netlink_unicast+0x10/0x10 [ 87.538314][ T6599] netlink_sendmsg+0x8b0/0xda0 [ 87.543082][ T6599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.548364][ T6599] ? __might_fault+0xc0/0x140 [ 87.553053][ T6599] ____sys_sendmsg+0xa54/0xc30 [ 87.557812][ T6599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.563091][ T6599] ? try_to_wake_up+0x644/0x1a80 [ 87.568021][ T6599] ___sys_sendmsg+0x190/0x1e0 [ 87.572683][ T6599] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.577861][ T6599] ? futex_private_hash_put+0x107/0x1c0 [ 87.583417][ T6599] __sys_sendmsg+0x170/0x220 [ 87.587993][ T6599] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.593089][ T6599] ? __x64_sys_futex+0x34f/0x4d0 [ 87.598066][ T6599] do_syscall_64+0x106/0xf80 [ 87.602666][ T6599] ? clear_bhb_loop+0x40/0x90 [ 87.607357][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.613236][ T6599] RIP: 0033:0x7f582f59c629 [ 87.617634][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.637244][ T6599] RSP: 002b:00007f5830502028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.645645][ T6599] RAX: ffffffffffffffda RBX: 00007f582f815fa0 RCX: 00007f582f59c629 [ 87.653598][ T6599] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 87.661548][ T6599] RBP: 00007f582f632b39 R08: 0000000000000000 R09: 0000000000000000 [ 87.669516][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.677468][ T6599] R13: 00007f582f816038 R14: 00007f582f815fa0 R15: 00007ffcbce11ce8 [ 87.685434][ T6599] [ 87.688705][ T6599] Kernel Offset: disabled [ 87.693003][ T6599] Rebooting in 86400 seconds..