last executing test programs:
2.731041259s ago: executing program 1 (id=6):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
lseek(r0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/10, 0xa)
close(r0)
2.621694243s ago: executing program 1 (id=7):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/virtio-net\x00', &(0x7f0000000000)=""/256, 0x100)
readlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/virtio_net\x00', &(0x7f0000000000)=""/256, 0x100)
readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/r8169\x00', &(0x7f0000000000)=""/256, 0x100)
readlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/8139cp\x00', &(0x7f0000000000)=""/256, 0x100)
readlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/8139too\x00', &(0x7f0000000000)=""/256, 0x100)
2.554089936s ago: executing program 1 (id=8):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='./sys\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
2.457510618s ago: executing program 1 (id=9):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
2.172848382s ago: executing program 3 (id=4):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/platform/pcspkr/uevent\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/platform/pcspkr/modalias\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/platform/pcspkr/driver\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/lgm-usb-phy/uevent\x00', 0x0, 0x0)
1.9980658s ago: executing program 3 (id=10):
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
1.93403956s ago: executing program 0 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='/dev/ram0,65536\n', 0x10)
close(r0)
r1 = syz_open_dev$mtd(&(0x7f0000000800), 0x1, 0x2)
ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000900)={0x0, 0x400000})
close(r1)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl(r2, 0x40186f40, &(0x7f0000000b00)="ffffffff0100"/24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/ubi0\x00', 0x2, 0x0)
close(r3)
1.902792837s ago: executing program 2 (id=3):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0)
1.685569932s ago: executing program 2 (id=11):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000130)='-3\n', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='1\n', 0x2)
1.48642494s ago: executing program 1 (id=12):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs\x00')
r1 = accept$inet(r0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000003000)=""/1024, 0x400, 0x0, 0x0, 0x0)
shutdown(r1, 0x2)
close(r1)
close(r0)
nanosleep(&(0x7f0000000400)={0x0, 0xbebc200}, 0x0)
1.420612714s ago: executing program 0 (id=13):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff0200000000000200000000000000000000000000640001000000"], 0x24)
1.303462999s ago: executing program 4 (id=5):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/cpufreq\x00', 0x0, 0x0)
close(r0)
1.217956352s ago: executing program 4 (id=14):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
1.108829225s ago: executing program 1 (id=15):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402a1101000001010200010902270001010080320904000003ff000000070582024000000705810240000007050102400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
1.036217895s ago: executing program 3 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/lockd/parameters/nlm_tcpport\x00', 0x0, 0x0)
949.862745ms ago: executing program 3 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/1024, 0x400)
945.240369ms ago: executing program 3 (id=18):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402a1101000001010200010902270001010080320904000003ff000000070582024000000705810240000007050102400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000400)="0080002000"/16)
syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000500)='\x00'/16)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
840.406096ms ago: executing program 0 (id=19):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r1, &(0x7f0000000800)='localhost 1 \\x00000000 2147483647 /\n\x00', 0x24)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000a00)='localhost / 2147483647 9216 0 0 0\n\x00', 0x22)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f0000000c00)='tcp 2049\n\x00', 0x9)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000e00)='1\n\x00', 0x2)
close(r4)
mount$nfs4(&(0x7f0000000f00)='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000001000), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
r5 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/lockfile\x00', 0x42, 0x1ff)
fcntl$lock(r5, 0x6, &(0x7f0000001300)={0x1, 0x0, 0x0, 0x100})
0s ago: executing program 2 (id=20):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/virtual/net/br0/bridge/no_linklocal_learn\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
kernel console output (not intermixed with test programs):
[ 47.600632][ T30] audit: type=1400 audit(1789664751.034:111): avc: denied { write } for pid=5451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 47.666171][ T30] audit: type=1400 audit(1789664751.104:112): avc: denied { write } for pid=5462 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 49.819481][ T30] kauditd_printk_skb: 10 callbacks suppressed
[ 49.819499][ T30] audit: type=1400 audit(1789664753.254:123): avc: denied { write } for pid=5535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 49.891891][ T30] audit: type=1400 audit(1789664753.324:124): avc: denied { write } for pid=5546 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 50.054553][ T30] audit: type=1400 audit(1789664753.484:125): avc: denied { write } for pid=5549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 50.115682][ T30] audit: type=1400 audit(1789664753.544:126): avc: denied { write } for pid=5560 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 50.278446][ T30] audit: type=1400 audit(1789664753.714:127): avc: denied { write } for pid=5563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 50.335375][ T30] audit: type=1400 audit(1789664753.764:128): avc: denied { write } for pid=5574 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts.
[ 54.863147][ T30] audit: type=1400 audit(1789664758.294:129): avc: denied { mounton } for pid=5586 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 54.864646][ T30] audit: type=1400 audit(1789664758.294:130): avc: denied { mount } for pid=5586 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 54.869447][ T5586] cgroup: Unknown subsys name 'net'
[ 54.871479][ T30] audit: type=1400 audit(1789664758.304:131): avc: denied { unmount } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 55.038472][ T5586] cgroup: Unknown subsys name 'cpuset'
[ 55.040790][ T5586] cgroup: Unknown subsys name 'rlimit'
[ 55.184838][ T30] audit: type=1400 audit(1789664758.614:132): avc: denied { setattr } for pid=5586 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 55.185275][ T30] audit: type=1400 audit(1789664758.614:133): avc: denied { create } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 55.187985][ T30] audit: type=1400 audit(1789664758.614:134): avc: denied { write } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 55.189303][ T30] audit: type=1400 audit(1789664758.624:135): avc: denied { read } for pid=5586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 55.201025][ T30] audit: type=1400 audit(1789664758.634:136): avc: denied { mounton } for pid=5586 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 55.207750][ T30] audit: type=1400 audit(1789664758.644:137): avc: denied { mount } for pid=5586 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 55.327177][ T5588] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 55.327741][ T30] audit: type=1400 audit(1789664758.764:138): avc: denied { relabelto } for pid=5588 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 56.284749][ T5586] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 60.846828][ T30] kauditd_printk_skb: 4 callbacks suppressed
[ 60.846846][ T30] audit: type=1400 audit(1789664764.274:143): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 60.846886][ T30] audit: type=1400 audit(1789664764.274:144): avc: denied { read write } for pid=5596 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 60.850102][ T30] audit: type=1400 audit(1789664764.274:145): avc: denied { open } for pid=5596 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 60.930812][ T30] audit: type=1400 audit(1789664764.364:146): avc: denied { ioctl } for pid=5598 comm="syz-executor" path="socket:[5487]" dev="sockfs" ino=5487 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 60.951670][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 60.952472][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 60.961634][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 60.962238][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 60.962686][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 60.963471][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 60.963701][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 60.964133][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 60.964787][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 60.966708][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 60.966917][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 60.968362][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 60.968661][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 60.969556][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 60.970309][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 60.970666][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 60.979964][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 60.985872][ T4918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 60.985939][ T30] audit: type=1400 audit(1789664764.414:147): avc: denied { read } for pid=5596 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 60.985971][ T30] audit: type=1400 audit(1789664764.414:148): avc: denied { open } for pid=5596 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 61.007158][ T30] audit: type=1400 audit(1789664764.434:149): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 61.007644][ T4918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 61.008342][ T4918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 61.009500][ T4918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 61.010090][ T4918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 61.010757][ T4918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 61.012225][ T4918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 61.022644][ T4918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 61.058169][ T30] audit: type=1400 audit(1789664764.484:150): avc: denied { module_request } for pid=5596 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 61.164727][ T30] audit: type=1400 audit(1789664764.594:151): avc: denied { sys_module } for pid=5600 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 62.385046][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.385183][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.385316][ T5600] bridge_slave_0: entered allmulticast mode
[ 62.397072][ T5600] bridge_slave_0: entered promiscuous mode
[ 62.430799][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.430890][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.431038][ T5600] bridge_slave_1: entered allmulticast mode
[ 62.431731][ T5600] bridge_slave_1: entered promiscuous mode
[ 62.517652][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.517766][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.517919][ T5596] bridge_slave_0: entered allmulticast mode
[ 62.518639][ T5596] bridge_slave_0: entered promiscuous mode
[ 62.520984][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.521073][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.521166][ T5596] bridge_slave_1: entered allmulticast mode
[ 62.522286][ T5596] bridge_slave_1: entered promiscuous mode
[ 62.554738][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.554808][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.554893][ T5597] bridge_slave_0: entered allmulticast mode
[ 62.558100][ T5597] bridge_slave_0: entered promiscuous mode
[ 62.559994][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.560060][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.560345][ T5597] bridge_slave_1: entered allmulticast mode
[ 62.561607][ T5597] bridge_slave_1: entered promiscuous mode
[ 62.565971][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.568704][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.601281][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.602179][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.602265][ T5598] bridge_slave_0: entered allmulticast mode
[ 62.603458][ T5598] bridge_slave_0: entered promiscuous mode
[ 62.624978][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.625046][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.625125][ T5612] bridge_slave_0: entered allmulticast mode
[ 62.627407][ T5612] bridge_slave_0: entered promiscuous mode
[ 62.632052][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.634808][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.634934][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.635058][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.635141][ T5598] bridge_slave_1: entered allmulticast mode
[ 62.636975][ T5598] bridge_slave_1: entered promiscuous mode
[ 62.661539][ T5600] team0: Port device team_slave_0 added
[ 62.661665][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.661728][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.661807][ T5612] bridge_slave_1: entered allmulticast mode
[ 62.664390][ T5612] bridge_slave_1: entered promiscuous mode
[ 62.688260][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.691002][ T5600] team0: Port device team_slave_1 added
[ 62.738341][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.759974][ T5596] team0: Port device team_slave_0 added
[ 62.763369][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.785925][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.788772][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.790144][ T5596] team0: Port device team_slave_1 added
[ 62.792149][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.802684][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.802697][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 62.802715][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.838307][ T5597] team0: Port device team_slave_0 added
[ 62.841903][ T5597] team0: Port device team_slave_1 added
[ 62.842353][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.842362][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 62.842380][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.900541][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.900555][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 62.900572][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.925920][ T5612] team0: Port device team_slave_0 added
[ 62.927012][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.927022][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 62.927040][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.929583][ T5598] team0: Port device team_slave_0 added
[ 62.952464][ T5612] team0: Port device team_slave_1 added
[ 62.961113][ T5598] team0: Port device team_slave_1 added
[ 62.961757][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.961767][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 62.961784][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.994409][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.994424][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 62.994442][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 63.012980][ T5600] hsr_slave_0: entered promiscuous mode
[ 63.013771][ T5600] hsr_slave_1: entered promiscuous mode
[ 63.040340][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 63.040354][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 63.040371][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 63.041487][ T5602] Bluetooth: hci3: command tx timeout
[ 63.041597][ T5602] Bluetooth: hci1: command tx timeout
[ 63.041656][ T5602] Bluetooth: hci0: command tx timeout
[ 63.041814][ T4918] Bluetooth: hci4: command tx timeout
[ 63.115537][ T4918] Bluetooth: hci2: command tx timeout
[ 63.221192][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 63.221207][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 63.221227][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 63.264132][ T5596] hsr_slave_0: entered promiscuous mode
[ 63.264815][ T5596] hsr_slave_1: entered promiscuous mode
[ 63.265273][ T5596] debugfs: 'hsr0' already exists in 'hsr'
[ 63.265348][ T5596] Cannot create hsr debugfs directory
[ 63.277618][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 63.277631][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 63.277649][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 63.280290][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 63.280301][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 63.280320][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 63.397710][ T5597] hsr_slave_0: entered promiscuous mode
[ 63.398243][ T5597] hsr_slave_1: entered promiscuous mode
[ 63.398525][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[ 63.398540][ T5597] Cannot create hsr debugfs directory
[ 63.437567][ T5612] hsr_slave_0: entered promiscuous mode
[ 63.437986][ T5612] hsr_slave_1: entered promiscuous mode
[ 63.438267][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[ 63.438282][ T5612] Cannot create hsr debugfs directory
[ 63.474984][ T5598] hsr_slave_0: entered promiscuous mode
[ 63.475411][ T5598] hsr_slave_1: entered promiscuous mode
[ 63.487485][ T5598] debugfs: 'hsr0' already exists in 'hsr'
[ 63.487504][ T5598] Cannot create hsr debugfs directory
[ 63.785380][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 63.799503][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 63.800153][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 63.803324][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 63.828151][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 63.831342][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 63.852593][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 63.854995][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 63.907580][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 63.914374][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 63.934897][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 63.946418][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 63.947222][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 63.950315][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 63.950895][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 63.952573][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 64.031366][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 64.033997][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 64.034531][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 64.059279][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 64.059841][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 64.061506][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 64.062910][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 64.069476][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 64.124754][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.174641][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.188223][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.188391][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.217324][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 64.219474][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 64.222313][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.222362][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.230687][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 64.253094][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 64.279889][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 64.282706][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 64.305099][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 64.314772][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 64.356341][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.382563][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 64.387189][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 64.411518][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 64.414996][ T30] audit: type=1400 audit(1789664767.844:152): avc: denied { sys_module } for pid=5600 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 64.415418][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 64.447565][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 64.454544][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 64.468174][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 64.472690][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 64.495174][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.532743][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.532864][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.549090][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.549168][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.562275][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.624090][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.661929][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.662010][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.684232][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.684566][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.725074][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.787401][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.799648][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.819439][ T42] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.819532][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.856319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.856405][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.885407][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.921223][ T42] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.921310][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.975100][ T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.975208][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 65.075179][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.115897][ T5604] Bluetooth: hci0: command tx timeout
[ 65.115927][ T5604] Bluetooth: hci1: command tx timeout
[ 65.115946][ T5604] Bluetooth: hci3: command tx timeout
[ 65.116070][ T4918] Bluetooth: hci4: command tx timeout
[ 65.195891][ T4918] Bluetooth: hci2: command tx timeout
[ 65.251945][ T5600] veth0_vlan: entered promiscuous mode
[ 65.290866][ T5600] veth1_vlan: entered promiscuous mode
[ 65.381636][ T5600] veth0_macvtap: entered promiscuous mode
[ 65.397089][ T5600] veth1_macvtap: entered promiscuous mode
[ 65.431240][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 65.445018][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 65.576199][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.576245][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.576275][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.576303][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.664163][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.794729][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.813476][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.813498][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.908698][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.908720][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.913944][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.925068][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 65.925124][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 65.934751][ T30] audit: type=1400 audit(1789664769.364:153): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.1jovh4/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 65.934791][ T30] audit: type=1400 audit(1789664769.364:154): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 65.941923][ T30] audit: type=1400 audit(1789664769.374:155): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.1jovh4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 65.955291][ T30] audit: type=1400 audit(1789664769.384:156): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 65.963726][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.984798][ T30] audit: type=1400 audit(1789664769.414:157): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.1jovh4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 65.984842][ T30] audit: type=1400 audit(1789664769.414:158): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.1jovh4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 65.988788][ T5596] veth0_vlan: entered promiscuous mode
[ 66.018844][ T30] audit: type=1400 audit(1789664769.454:159): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 66.029710][ T30] audit: type=1400 audit(1789664769.464:160): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 66.055183][ T30] audit: type=1400 audit(1789664769.484:161): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="gadgetfs" ino=6949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 66.072900][ T30] audit: type=1400 audit(1789664769.504:162): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 66.085317][ T5596] veth1_vlan: entered promiscuous mode
[ 66.131897][ T5597] veth0_vlan: entered promiscuous mode
[ 66.208771][ T5596] veth0_macvtap: entered promiscuous mode
[ 66.214059][ T5597] veth1_vlan: entered promiscuous mode
[ 66.256918][ T5600] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 66.269847][ T5596] veth1_macvtap: entered promiscuous mode
[ 66.280605][ T5612] veth0_vlan: entered promiscuous mode
[ 66.331531][ T5612] veth1_vlan: entered promiscuous mode
[ 66.362763][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 66.414108][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 66.418156][ T5597] veth0_macvtap: entered promiscuous mode
[ 66.450443][ T5612] veth0_macvtap: entered promiscuous mode
[ 66.464834][ T5597] veth1_macvtap: entered promiscuous mode
[ 66.481107][ T5612] veth1_macvtap: entered promiscuous mode
[ 66.529234][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 66.560218][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 66.581181][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 66.611396][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 66.771028][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.771050][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.817593][ T3267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.818696][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.819392][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.819859][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.822684][ T1191] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[ 66.847917][ T5598] veth0_vlan: entered promiscuous mode
[ 66.866042][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.866081][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.866108][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.866134][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.866161][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.933908][ T3267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.933928][ T3267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.943166][ T5598] veth1_vlan: entered promiscuous mode
[ 66.959242][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.978571][ T3267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.978590][ T3267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.027208][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.027227][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.087383][ T5770] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[ 67.090485][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.090505][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.156076][ T5598] veth0_macvtap: entered promiscuous mode
[ 67.156525][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.156540][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.183570][ T5598] veth1_macvtap: entered promiscuous mode
[ 67.196122][ T5602] Bluetooth: hci3: command tx timeout
[ 67.196148][ T5602] Bluetooth: hci1: command tx timeout
[ 67.196228][ T5602] Bluetooth: hci0: command tx timeout
[ 67.196356][ T4918] Bluetooth: hci4: command tx timeout
[ 67.217743][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.218344][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.250063][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 67.276804][ T4918] Bluetooth: hci2: command tx timeout
[ 67.297137][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 67.336512][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.379332][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.383277][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.383725][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.483019][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.483040][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.610707][ T1191] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[ 67.624695][ T5804] ftl_cs: FTL header not found.
[ 67.631299][ T5792] ceph: No mds server is up or the cluster is laggy
[ 67.710676][ T5804] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[ 67.822741][ T5816] CIFS: Attempting to mount //127.0.0.1/share
[ 67.851994][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.852014][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.889782][ T5820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 67.909381][ T5816] CIFS: VFS: cifs_mount failed w/return code = -112
[ 68.255920][ T5704] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 68.407506][ T5704] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08
[ 68.414684][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 68.414709][ T5704] usb 5-1: Product: syz
[ 68.414722][ T5704] usb 5-1: Manufacturer: syz
[ 68.414735][ T5704] usb 5-1: SerialNumber: syz
[ 68.415628][ T5703] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 68.575975][ T5704] usb 5-1: reset high-speed USB device number 2 using dummy_hcd
[ 68.586432][ T5703] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 68.587462][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 68.587484][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 68.587503][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 68.588768][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 68.588785][ T5703] usb 2-1: Product: syz
[ 68.588801][ T5703] usb 2-1: Manufacturer: syz
[ 68.608720][ T5827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 68.608832][ T5827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 68.608905][ T5827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 68.613082][ T5770] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 68.822454][ T5704] usb 5-1: driver API: 1.9.9 2016-02-15 [1-1]
[ 68.822474][ T5704] usb 5-1: firmware API: 1.9.6 2012-07-07
[ 68.837969][ T5812] NFSD: Unable to initialize client recovery tracking! (-110)
[ 68.837987][ T5812] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[ 68.837997][ T5812] NFSD: starting 90-second grace period (net f00004e9)
[ 68.862906][ T5770] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 68.865295][ T5770] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 68.865335][ T5770] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 68.865355][ T5770] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 68.908157][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 68.908181][ T5770] usb 4-1: Product: syz
[ 68.908194][ T5770] usb 4-1: Manufacturer: syz
[ 68.913354][ T5833] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 68.913467][ T5833] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 68.913541][ T5833] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 69.125373][ T5703] redrat3 2-1:1.0: Problem fetching firmware ID
[ 69.134242][ T5703] redrat3 2-1:1.0: Failed to read timeout from hardware
[ 69.185556][ T5703] rc_core: IR keymap rc-hauppauge not found
[ 69.185574][ T5703] Registered IR keymap rc-empty
[ 69.201405][ T5703] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0
[ 69.211354][ T5703] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0/input5
[ 69.230566][ T5703] redrat3 2-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 69.231645][ T5703] redrat3 2-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 69.231678][ T5703] redrat3 2-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 69.268385][ T5703] redrat3 2-1:1.0: probe with driver redrat3 failed with error -5
[ 69.281626][ T5604] Bluetooth: hci0: command tx timeout
[ 69.281657][ T5604] Bluetooth: hci1: command tx timeout
[ 69.281674][ T5604] Bluetooth: hci3: command tx timeout
[ 69.281719][ T4918] Bluetooth: hci4: command tx timeout
** replaying previous printk message **
[ 69.281719][ T4918] Bluetooth: hci4: command tx timeout
[ 69.287990][ T5703] usb 2-1: USB disconnect, device number 2
[ 69.293052][ T4968] ==================================================================
[ 69.293064][ T4968] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[ 69.293087][ T4968] Read of size 1 at addr ffff88805548f758 by task udevd/4968
[ 69.293099][ T4968]
[ 69.293107][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
[ 69.293125][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 69.293134][ T4968] Call Trace:
[ 69.293142][ T4968]
[ 69.293148][ T4968] dump_stack_lvl+0x100/0x190
[ 69.293171][ T4968] print_report+0x13d/0x4b0
[ 69.293193][ T4968] ? __virt_addr_valid+0x239/0x430
[ 69.293210][ T4968] ? string+0x471/0x4d0
[ 69.293226][ T4968] kasan_report+0xdf/0x1c0
[ 69.293246][ T4968] ? string+0x471/0x4d0
[ 69.293269][ T4968] string+0x471/0x4d0
[ 69.293286][ T4968] ? __pfx_string+0x10/0x10
[ 69.293305][ T4968] vsnprintf+0x422/0x1300
[ 69.293325][ T4968] ? __pfx_vsnprintf+0x10/0x10
[ 69.293344][ T4968] ? ksys_read+0x12a/0x250
[ 69.293359][ T4968] ? do_syscall_64+0x123/0x790
[ 69.293378][ T4968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.293395][ T4968] add_uevent_var+0x183/0x3a0
[ 69.293412][ T4968] ? __pfx_add_uevent_var+0x10/0x10
[ 69.293432][ T4968] ? __pfx_rc_dev_uevent+0x10/0x10
[ 69.293446][ T4968] rc_dev_uevent+0x17d/0x1c0
[ 69.293460][ T4968] dev_uevent+0x2f1/0x870
[ 69.293482][ T4968] ? __pfx_dev_uevent+0x10/0x10
[ 69.293501][ T4968] ? kasan_save_track+0x14/0x30
[ 69.293517][ T4968] ? __kasan_kmalloc+0xaa/0xb0
[ 69.293534][ T4968] ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 69.293557][ T4968] ? uevent_show+0x166/0x3a0
[ 69.293574][ T4968] ? __pfx_uevent_show+0x10/0x10
[ 69.293589][ T4968] uevent_show+0x1ca/0x3a0
[ 69.293604][ T4968] ? __pfx_uevent_show+0x10/0x10
[ 69.293619][ T4968] dev_attr_show+0x52/0xa0
[ 69.293638][ T4968] ? __pfx_dev_attr_show+0x10/0x10
[ 69.293657][ T4968] sysfs_kf_seq_show+0x217/0x3f0
[ 69.293677][ T4968] seq_read_iter+0x32f/0x1270
[ 69.293696][ T4968] ? cp_new_stat+0x484/0x5c0
[ 69.293717][ T4968] kernfs_fop_read_iter+0x46c/0x610
[ 69.293733][ T4968] ? rw_verify_area+0xce/0x6d0
[ 69.293755][ T4968] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 69.293772][ T4968] vfs_read+0x82e/0xb40
[ 69.293788][ T4968] ? __pfx_vfs_read+0x10/0x10
[ 69.293803][ T4968] ? __pfx___do_sys_newfstat+0x10/0x10
[ 69.293827][ T4968] ksys_read+0x12a/0x250
[ 69.293841][ T4968] ? __pfx_ksys_read+0x10/0x10
[ 69.293858][ T4968] do_syscall_64+0x123/0x790
[ 69.293879][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.293895][ T4968] RIP: 0033:0x7fa64abce407
[ 69.293907][ T4968] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 69.293921][ T4968] RSP: 002b:00007ffd97f5d260 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 69.293937][ T4968] RAX: ffffffffffffffda RBX: 00007fa64ab42880 RCX: 00007fa64abce407
[ 69.293947][ T4968] RDX: 0000000000001000 RSI: 000055b8bb597530 RDI: 000000000000000c
[ 69.293957][ T4968] RBP: 00007fa64ad16ff0 R08: 0000000000000000 R09: 0000000000000000
[ 69.293966][ T4968] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 69.293975][ T4968] R13: 00007fa64ad16ea0 R14: 0000000000000000 R15: 000055b8bb53b1f0
[ 69.293989][ T4968]
[ 69.293994][ T4968]
[ 69.293997][ T4968] Allocated by task 5703:
[ 69.294005][ T4968] kasan_save_stack+0x30/0x50
[ 69.294020][ T4968] kasan_save_track+0x14/0x30
[ 69.294035][ T4968] __kasan_kmalloc+0xaa/0xb0
[ 69.294050][ T4968] __kmalloc_cache_noprof+0x2f8/0x6d0
[ 69.294070][ T4968] redrat3_dev_probe+0x326/0x2b50
[ 69.294091][ T4968] usb_probe_interface+0x386/0x9b0
[ 69.294112][ T4968] really_probe+0x241/0xa60
[ 69.294126][ T4968] __driver_probe_device+0x210/0x460
[ 69.294142][ T4968] driver_probe_device+0x4a/0x140
[ 69.294157][ T4968] __device_attach_driver+0x1df/0x320
[ 69.294173][ T4968] bus_for_each_drv+0x159/0x1e0
[ 69.294194][ T4968] __device_attach+0x1e4/0x4d0
[ 69.294209][ T4968] device_initial_probe+0xaf/0xd0
[ 69.294225][ T4968] bus_probe_device+0x64/0x160
[ 69.294238][ T4968] device_add+0x121d/0x1970
[ 69.294260][ T4968] usb_set_configuration+0xd97/0x1c60
[ 69.294279][ T4968] usb_generic_driver_probe+0xa1/0xe0
[ 69.294294][ T4968] usb_probe_device+0xef/0x400
[ 69.294312][ T4968] really_probe+0x241/0xa60
[ 69.294327][ T4968] __driver_probe_device+0x210/0x460
[ 69.294342][ T4968] driver_probe_device+0x4a/0x140
[ 69.294357][ T4968] __device_attach_driver+0x1df/0x320
[ 69.294373][ T4968] bus_for_each_drv+0x159/0x1e0
[ 69.294393][ T4968] __device_attach+0x1e4/0x4d0
[ 69.294407][ T4968] device_initial_probe+0xaf/0xd0
[ 69.294423][ T4968] bus_probe_device+0x64/0x160
[ 69.294436][ T4968] device_add+0x121d/0x1970
[ 69.294453][ T4968] usb_new_device.part.0+0xcc2/0x1686
[ 69.294473][ T4968] hub_event.cold+0x1e3/0xe90
[ 69.294492][ T4968] process_one_work+0xac7/0x1b10
[ 69.294512][ T4968] worker_thread+0x5ef/0xe50
[ 69.294532][ T4968] kthread+0x373/0x450
[ 69.294551][ T4968] ret_from_fork+0x730/0xd60
[ 69.294566][ T4968] ret_from_fork_asm+0x1a/0x30
[ 69.294580][ T4968]
[ 69.294584][ T4968] Freed by task 5703:
[ 69.294590][ T4968] kasan_save_stack+0x30/0x50
[ 69.294605][ T4968] kasan_save_track+0x14/0x30
[ 69.294620][ T4968] kasan_save_free_info+0x3b/0x70
[ 69.294639][ T4968] __kasan_slab_free+0x5f/0x80
[ 69.294655][ T4968] kfree+0x22b/0x6d0
[ 69.294673][ T4968] redrat3_dev_probe+0x107a/0x2b50
[ 69.294693][ T4968] usb_probe_interface+0x386/0x9b0
[ 69.294713][ T4968] really_probe+0x241/0xa60
[ 69.294727][ T4968] __driver_probe_device+0x210/0x460
[ 69.294743][ T4968] driver_probe_device+0x4a/0x140
[ 69.294758][ T4968] __device_attach_driver+0x1df/0x320
[ 69.294774][ T4968] bus_for_each_drv+0x159/0x1e0
[ 69.294793][ T4968] __device_attach+0x1e4/0x4d0
[ 69.294808][ T4968] device_initial_probe+0xaf/0xd0
[ 69.294824][ T4968] bus_probe_device+0x64/0x160
[ 69.294836][ T4968] device_add+0x121d/0x1970
[ 69.294853][ T4968] usb_set_configuration+0xd97/0x1c60
[ 69.294871][ T4968] usb_generic_driver_probe+0xa1/0xe0
[ 69.294886][ T4968] usb_probe_device+0xef/0x400
[ 69.294904][ T4968] really_probe+0x241/0xa60
[ 69.294919][ T4968] __driver_probe_device+0x210/0x460
[ 69.294934][ T4968] driver_probe_device+0x4a/0x140
[ 69.294949][ T4968] __device_attach_driver+0x1df/0x320
[ 69.294965][ T4968] bus_for_each_drv+0x159/0x1e0
[ 69.294986][ T4968] __device_attach+0x1e4/0x4d0
[ 69.295001][ T4968] device_initial_probe+0xaf/0xd0
[ 69.295017][ T4968] bus_probe_device+0x64/0x160
[ 69.295030][ T4968] device_add+0x121d/0x1970
[ 69.295047][ T4968] usb_new_device.part.0+0xcc2/0x1686
[ 69.295067][ T4968] hub_event.cold+0x1e3/0xe90
[ 69.295086][ T4968] process_one_work+0xac7/0x1b10
[ 69.295106][ T4968] worker_thread+0x5ef/0xe50
[ 69.295126][ T4968] kthread+0x373/0x450
[ 69.295144][ T4968] ret_from_fork+0x730/0xd60
[ 69.295158][ T4968] ret_from_fork_asm+0x1a/0x30
[ 69.295172][ T4968]
[ 69.295175][ T4968] The buggy address belongs to the object at ffff88805548f000
[ 69.295175][ T4968] which belongs to the cache kmalloc-2k of size 2048
[ 69.295187][ T4968] The buggy address is located 1880 bytes inside of
[ 69.295187][ T4968] freed 2048-byte region [ffff88805548f000, ffff88805548f800)
[ 69.295201][ T4968]
[ 69.295205][ T4968] The buggy address belongs to the physical page:
[ 69.295211][ T4968] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55488
[ 69.295225][ T4968] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 69.295236][ T4968] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 69.295254][ T4968] page_type: f5(slab)
[ 69.295267][ T4968] raw: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122
[ 69.295280][ T4968] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 69.295293][ T4968] head: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122
[ 69.295305][ T4968] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 69.295318][ T4968] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 69.295331][ T4968] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 69.295338][ T4968] page dumped because: kasan: bad access detected
[ 69.295345][ T4968] page_owner tracks the page as allocated
[ 69.295350][ T4968] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 42, tgid 42 (kworker/u8:2), ts 68484823830
[ 69.295373][ T4968] post_alloc_hook+0xfd/0x120
[ 69.295394][ T4968] get_page_from_freelist+0x110d/0x35d0
[ 69.295416][ T4968] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 69.295429][ T4968] new_slab+0xa9/0x6e0
[ 69.295448][ T4968] refill_objects+0xe3/0x410
[ 69.295460][ T4968] __pcs_replace_empty_main+0x35e/0x650
[ 69.295481][ T4968] __kmalloc_node_track_caller_noprof+0x6a8/0x870
[ 69.295497][ T4968] kmalloc_reserve+0xe8/0x350
[ 69.295518][ T4968] __alloc_skb+0x185/0x710
[ 69.295533][ T4968] mld_newpack.isra.0+0x18e/0xa20
[ 69.295551][ T4968] add_grhead+0x299/0x340
[ 69.295567][ T4968] add_grec+0x1389/0x1930
[ 69.295583][ T4968] mld_send_initial_cr+0x156/0x320
[ 69.295601][ T4968] ipv6_mc_dad_complete+0xa7/0x1d0
[ 69.295621][ T4968] addrconf_dad_completed+0xd91/0xff0
[ 69.295637][ T4968] addrconf_dad_work+0x83c/0x1360
[ 69.295652][ T4968] page last free pid 1 tgid 1 ts 14767249359 stack trace:
[ 69.295661][ T4968] free_pages_prepare+0x586/0xe00
[ 69.295680][ T4968] __free_contig_range_common+0x14f/0x250
[ 69.295700][ T4968] destroy_args+0xa8/0x7a0
[ 69.295720][ T4968] debug_vm_pgtable+0x1d69/0x3490
[ 69.295739][ T4968] do_one_initcall+0x11c/0x6f0
[ 69.295753][ T4968] kernel_init_freeable+0x6ea/0x7b0
[ 69.295772][ T4968] kernel_init+0x21/0x1e0
[ 69.295785][ T4968] ret_from_fork+0x730/0xd60
[ 69.295799][ T4968] ret_from_fork_asm+0x1a/0x30
[ 69.295814][ T4968]
[ 69.295817][ T4968] Memory state around the buggy address:
[ 69.295824][ T4968] ffff88805548f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.295834][ T4968] ffff88805548f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.295844][ T4968] >ffff88805548f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.295851][ T4968] ^
[ 69.295859][ T4968] ffff88805548f780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.295869][ T4968] ffff88805548f800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.295877][ T4968] ==================================================================
[ 69.305545][ T4968] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 70.338640][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
[ 70.347485][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 70.357547][ T4968] Call Trace:
[ 70.360829][ T4968]
[ 70.363760][ T4968] dump_stack_lvl+0x100/0x190
[ 70.368452][ T4968] vpanic+0x553/0x970
[ 70.372434][ T4968] ? __pfx_vpanic+0x10/0x10
[ 70.376935][ T4968] ? mark_held_locks+0x40/0x70
[ 70.381694][ T4968] ? string+0x471/0x4d0
[ 70.385855][ T4968] panic+0xd1/0xe0
[ 70.389579][ T4968] ? __pfx_panic+0x10/0x10
[ 70.394001][ T4968] ? string+0x471/0x4d0
[ 70.398170][ T4968] ? preempt_schedule_common+0x3c/0xb0
[ 70.403647][ T4968] check_panic_on_warn.cold+0x19/0x34
[ 70.409047][ T4968] end_report.part.0+0x3a/0x90
[ 70.413839][ T4968] kasan_report.cold+0xe/0x18
[ 70.418514][ T4968] ? string+0x471/0x4d0
[ 70.422682][ T4968] string+0x471/0x4d0
[ 70.426666][ T4968] ? __pfx_string+0x10/0x10
[ 70.431168][ T4968] vsnprintf+0x422/0x1300
[ 70.435492][ T4968] ? __pfx_vsnprintf+0x10/0x10
[ 70.440252][ T4968] ? ksys_read+0x12a/0x250
[ 70.444663][ T4968] ? do_syscall_64+0x123/0x790
[ 70.449429][ T4968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 70.455509][ T4968] add_uevent_var+0x183/0x3a0
[ 70.460191][ T4968] ? __pfx_add_uevent_var+0x10/0x10
[ 70.465388][ T4968] ? __pfx_rc_dev_uevent+0x10/0x10
[ 70.470500][ T4968] rc_dev_uevent+0x17d/0x1c0
[ 70.475092][ T4968] dev_uevent+0x2f1/0x870
[ 70.479425][ T4968] ? __pfx_dev_uevent+0x10/0x10
[ 70.484277][ T4968] ? kasan_save_track+0x14/0x30
[ 70.489114][ T4968] ? __kasan_kmalloc+0xaa/0xb0
[ 70.493888][ T4968] ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 70.499439][ T4968] ? uevent_show+0x166/0x3a0
[ 70.504011][ T4968] ? __pfx_uevent_show+0x10/0x10
[ 70.508943][ T4968] uevent_show+0x1ca/0x3a0
[ 70.513365][ T4968] ? __pfx_uevent_show+0x10/0x10
[ 70.518299][ T4968] dev_attr_show+0x52/0xa0
[ 70.522738][ T4968] ? __pfx_dev_attr_show+0x10/0x10
[ 70.527861][ T4968] sysfs_kf_seq_show+0x217/0x3f0
[ 70.532794][ T4968] seq_read_iter+0x32f/0x1270
[ 70.537473][ T4968] ? cp_new_stat+0x484/0x5c0
[ 70.542086][ T4968] kernfs_fop_read_iter+0x46c/0x610
[ 70.547274][ T4968] ? rw_verify_area+0xce/0x6d0
[ 70.552024][ T4968] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 70.557732][ T4968] vfs_read+0x82e/0xb40
[ 70.561877][ T4968] ? __pfx_vfs_read+0x10/0x10
[ 70.566536][ T4968] ? __pfx___do_sys_newfstat+0x10/0x10
[ 70.572006][ T4968] ksys_read+0x12a/0x250
[ 70.576240][ T4968] ? __pfx_ksys_read+0x10/0x10
[ 70.581018][ T4968] do_syscall_64+0x123/0x790
[ 70.585604][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 70.591520][ T4968] RIP: 0033:0x7fa64abce407
[ 70.595932][ T4968] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 70.615545][ T4968] RSP: 002b:00007ffd97f5d260 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 70.623971][ T4968] RAX: ffffffffffffffda RBX: 00007fa64ab42880 RCX: 00007fa64abce407
[ 70.631935][ T4968] RDX: 0000000000001000 RSI: 000055b8bb597530 RDI: 000000000000000c
[ 70.639896][ T4968] RBP: 00007fa64ad16ff0 R08: 0000000000000000 R09: 0000000000000000
[ 70.647875][ T4968] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 70.655847][ T4968] R13: 00007fa64ad16ea0 R14: 0000000000000000 R15: 000055b8bb53b1f0
[ 70.663804][ T4968]
[ 70.667032][ T4968] Kernel Offset: disabled
[ 70.671341][ T4968] Rebooting in 86400 seconds..