last executing test programs: 1.931111909s ago: executing program 4 (id=262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 1.879888012s ago: executing program 3 (id=263): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x68f0, 0x80, 0x2, 0x1df}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.792889293s ago: executing program 2 (id=265): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) write$dsp(r0, &(0x7f0000000380)="6d3db585afa3f6c7876a31fe777fb3fad04a85f5c70a76ed2fa0fe363193ac54afcbc17068ab10836e6845b9ca4d79ec84e90707dbfa3f7cc06a52771e5452db4f", 0x41) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 1.661663547s ago: executing program 3 (id=268): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x88, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20000006}]}]}]}, 0x88}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 1.630117818s ago: executing program 2 (id=269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in=@broadcast, 0x0, 0x0, 0x0, 0xfffa, 0xa, 0x0, 0x26b9ffe36856e205, 0x11}, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 1.609019478s ago: executing program 3 (id=270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.562340341s ago: executing program 2 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x0, 0xb09, 0x70bd29, 0x25dfdbfd, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="00000000400000003c001280110001006272696467655f736c6176650000000024000580050020008100000005000800000000000500"], 0x5c}}, 0x0) 1.525013341s ago: executing program 3 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x200005) 1.409366943s ago: executing program 2 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) 1.393593248s ago: executing program 3 (id=277): r0 = syz_usb_connect(0x3, 0x44, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000005e80), 0x406, 0x1) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.335396187s ago: executing program 2 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.197997399s ago: executing program 2 (id=281): fanotify_init(0x87, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x0, 0x3, 0x3, 0x20}, 0x20) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.02264721s ago: executing program 4 (id=284): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r1 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000100)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.014727348s ago: executing program 0 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 944.166416ms ago: executing program 4 (id=287): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f133f6a43d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1901323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742a851fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7981b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e150ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbb523e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da221001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d103e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27783ff6ce821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d22d26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x335, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) 918.871907ms ago: executing program 0 (id=288): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8000480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0x5}) 821.015806ms ago: executing program 1 (id=289): personality(0x500006) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) brk(0x20ffc004) 811.938053ms ago: executing program 4 (id=290): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) 796.766389ms ago: executing program 0 (id=291): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r1, 0x1c, "3f966b042bd4a75c486aa6f9625cbaed1a0e638d581edecb1ae6123a"}, &(0x7f0000000200)=0x24) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r2, 0xa, 0x7fff, 0x6}, 0x10) 742.406772ms ago: executing program 1 (id=292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0xb}, 0x1c) 736.235055ms ago: executing program 0 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000002580)='./file0/../file0\x00', 0x9) 729.210894ms ago: executing program 4 (id=294): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 683.022291ms ago: executing program 1 (id=295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x6, @private1, 0x7, 0x4}, 0x20) 634.32453ms ago: executing program 0 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 572.481568ms ago: executing program 4 (id=297): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) pselect6(0x40, &(0x7f0000000000)={0x10}, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16) 523.844901ms ago: executing program 1 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffd, 0x8318}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 452.807224ms ago: executing program 1 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 344.269438ms ago: executing program 1 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 268.756029ms ago: executing program 0 (id=301): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x38011, r1, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) fadvise64(r0, 0x18, 0x0, 0x4) 163.741545ms ago: executing program 32 (id=301): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x38011, r1, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) fadvise64(r0, 0x18, 0x0, 0x4) 0s ago: executing program 3 (id=303): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 45.190882][ T29] audit: type=1400 audit(1737658490.712:88): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 45.194100][ T5804] cgroup: Unknown subsys name 'net' [ 45.213681][ T29] audit: type=1400 audit(1737658490.712:89): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.241155][ T29] audit: type=1400 audit(1737658490.742:90): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.382747][ T5804] cgroup: Unknown subsys name 'cpuset' [ 45.390490][ T5804] cgroup: Unknown subsys name 'rlimit' [ 45.512383][ T29] audit: type=1400 audit(1737658491.032:91): avc: denied { setattr } for pid=5804 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.542906][ T29] audit: type=1400 audit(1737658491.032:92): avc: denied { create } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.563619][ T29] audit: type=1400 audit(1737658491.032:93): avc: denied { write } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.584202][ T29] audit: type=1400 audit(1737658491.032:94): avc: denied { read } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.604064][ T5807] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 45.604578][ T29] audit: type=1400 audit(1737658491.032:95): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 45.638756][ T29] audit: type=1400 audit(1737658491.042:96): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 45.662294][ T29] audit: type=1400 audit(1737658491.062:97): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.457082][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.248844][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.269037][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.278888][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.287077][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.295389][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.303885][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.311577][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.319640][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.327583][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.327792][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.335859][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.347376][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.350110][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.357633][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.362929][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.370808][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.377247][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.385274][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.392152][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.398729][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.404318][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.419721][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.420498][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 48.426793][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.441862][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.449204][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.456214][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.457225][ T5822] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.465093][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.472924][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.804042][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 48.827561][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 48.852137][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 48.909157][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 48.987133][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 49.014135][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.022245][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.029488][ T5816] bridge_slave_0: entered allmulticast mode [ 49.036188][ T5816] bridge_slave_0: entered promiscuous mode [ 49.067317][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.074821][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.082182][ T5816] bridge_slave_1: entered allmulticast mode [ 49.088562][ T5816] bridge_slave_1: entered promiscuous mode [ 49.108219][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.115325][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.122621][ T5815] bridge_slave_0: entered allmulticast mode [ 49.129018][ T5815] bridge_slave_0: entered promiscuous mode [ 49.135689][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.142795][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.149937][ T5824] bridge_slave_0: entered allmulticast mode [ 49.156492][ T5824] bridge_slave_0: entered promiscuous mode [ 49.178007][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.185232][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.194459][ T5815] bridge_slave_1: entered allmulticast mode [ 49.201024][ T5815] bridge_slave_1: entered promiscuous mode [ 49.213661][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.221143][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.228220][ T5824] bridge_slave_1: entered allmulticast mode [ 49.234827][ T5824] bridge_slave_1: entered promiscuous mode [ 49.247369][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.257869][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.296475][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.313796][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.323103][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.333377][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.340790][ T5826] bridge_slave_0: entered allmulticast mode [ 49.347124][ T5826] bridge_slave_0: entered promiscuous mode [ 49.355102][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.362206][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.369317][ T5826] bridge_slave_1: entered allmulticast mode [ 49.376496][ T5826] bridge_slave_1: entered promiscuous mode [ 49.399827][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.417381][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.435120][ T5816] team0: Port device team_slave_0 added [ 49.441482][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.448551][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.456191][ T5821] bridge_slave_0: entered allmulticast mode [ 49.463318][ T5821] bridge_slave_0: entered promiscuous mode [ 49.485033][ T5816] team0: Port device team_slave_1 added [ 49.491782][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.498896][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.506297][ T5821] bridge_slave_1: entered allmulticast mode [ 49.513068][ T5821] bridge_slave_1: entered promiscuous mode [ 49.521705][ T5815] team0: Port device team_slave_0 added [ 49.539074][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.550098][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.565831][ T5815] team0: Port device team_slave_1 added [ 49.578661][ T5824] team0: Port device team_slave_0 added [ 49.601958][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.612830][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.623651][ T5824] team0: Port device team_slave_1 added [ 49.636317][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.643359][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.669360][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.681818][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.688776][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.714853][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.743537][ T5826] team0: Port device team_slave_0 added [ 49.759939][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.766938][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.793304][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.809443][ T5826] team0: Port device team_slave_1 added [ 49.817203][ T5821] team0: Port device team_slave_0 added [ 49.833246][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.840341][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.866926][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.881587][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.888550][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.914547][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.941387][ T5821] team0: Port device team_slave_1 added [ 49.947361][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.954980][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.981311][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.007510][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.014578][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.040683][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.057320][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.064379][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.090406][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.108456][ T5816] hsr_slave_0: entered promiscuous mode [ 50.114698][ T5816] hsr_slave_1: entered promiscuous mode [ 50.154088][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.161191][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.187881][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.200052][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.207047][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.232970][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.247355][ T5815] hsr_slave_0: entered promiscuous mode [ 50.253357][ T5815] hsr_slave_1: entered promiscuous mode [ 50.259096][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.266941][ T5815] Cannot create hsr debugfs directory [ 50.306738][ T5826] hsr_slave_0: entered promiscuous mode [ 50.312762][ T5826] hsr_slave_1: entered promiscuous mode [ 50.318524][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.326605][ T5826] Cannot create hsr debugfs directory [ 50.355884][ T5824] hsr_slave_0: entered promiscuous mode [ 50.363440][ T5824] hsr_slave_1: entered promiscuous mode [ 50.369225][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.376932][ T5824] Cannot create hsr debugfs directory [ 50.427897][ T5821] hsr_slave_0: entered promiscuous mode [ 50.434410][ T5821] hsr_slave_1: entered promiscuous mode [ 50.441294][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.448846][ T5821] Cannot create hsr debugfs directory [ 50.492605][ T5829] Bluetooth: hci0: command tx timeout [ 50.500302][ T5829] Bluetooth: hci1: command tx timeout [ 50.570486][ T5818] Bluetooth: hci3: command tx timeout [ 50.576194][ T5818] Bluetooth: hci4: command tx timeout [ 50.581807][ T5822] Bluetooth: hci2: command tx timeout [ 50.628523][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.639078][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.658481][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.671739][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.697846][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.714716][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.726723][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.738402][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.777440][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.787826][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.797018][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.808116][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.867703][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.885061][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.894236][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.905574][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.951363][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.972474][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.986636][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.010728][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.023481][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.049203][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.066683][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.077757][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.085017][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.108985][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.116074][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.150068][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.174695][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.185403][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.204241][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.211364][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.221510][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.228608][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.285162][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.297546][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 51.297559][ T29] audit: type=1400 audit(1737658496.812:112): avc: denied { sys_module } for pid=5816 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.307202][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.352179][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.359248][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.368898][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.375981][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.412468][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.420072][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.437283][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.444408][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.474782][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.503346][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.538718][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.585565][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.592657][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.605743][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.612874][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.685751][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.754243][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.812530][ T5816] veth0_vlan: entered promiscuous mode [ 51.857613][ T5816] veth1_vlan: entered promiscuous mode [ 51.893617][ T5826] veth0_vlan: entered promiscuous mode [ 51.924985][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.943345][ T5826] veth1_vlan: entered promiscuous mode [ 51.986998][ T5826] veth0_macvtap: entered promiscuous mode [ 51.996843][ T5816] veth0_macvtap: entered promiscuous mode [ 52.007607][ T5826] veth1_macvtap: entered promiscuous mode [ 52.030973][ T5816] veth1_macvtap: entered promiscuous mode [ 52.047825][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.065756][ T5821] veth0_vlan: entered promiscuous mode [ 52.074486][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.084018][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.114083][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.125882][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.137863][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.153860][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.163107][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.174487][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.183516][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.195955][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.206864][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.217677][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.226015][ T5815] veth0_vlan: entered promiscuous mode [ 52.235576][ T5815] veth1_vlan: entered promiscuous mode [ 52.244079][ T5821] veth1_vlan: entered promiscuous mode [ 52.257460][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.266474][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.275285][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.284775][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.304927][ T5824] veth0_vlan: entered promiscuous mode [ 52.345202][ T5824] veth1_vlan: entered promiscuous mode [ 52.365070][ T5815] veth0_macvtap: entered promiscuous mode [ 52.384790][ T5815] veth1_macvtap: entered promiscuous mode [ 52.435196][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.446661][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.457456][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.468351][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.479081][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.499982][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.505150][ T5824] veth0_macvtap: entered promiscuous mode [ 52.517073][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.528373][ T5821] veth0_macvtap: entered promiscuous mode [ 52.540484][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.542329][ T5821] veth1_macvtap: entered promiscuous mode [ 52.548924][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.566750][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.577435][ T5818] Bluetooth: hci1: command tx timeout [ 52.577824][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.583180][ T5829] Bluetooth: hci0: command tx timeout [ 52.599302][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.610481][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.621325][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.635768][ T5824] veth1_macvtap: entered promiscuous mode [ 52.647554][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.656555][ T5818] Bluetooth: hci4: command tx timeout [ 52.661348][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.662036][ T5829] Bluetooth: hci2: command tx timeout [ 52.670883][ T5822] Bluetooth: hci3: command tx timeout [ 52.681490][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.690485][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.723352][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.733915][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.744373][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.753581][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.764964][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.776640][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.789766][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.801833][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.812289][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.822974][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.833992][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.843621][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.844193][ T29] audit: type=1400 audit(1737658498.362:113): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.q4SoAD/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 52.854433][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.889307][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.900865][ T29] audit: type=1400 audit(1737658498.402:114): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.906273][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.923658][ T29] audit: type=1400 audit(1737658498.402:115): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.q4SoAD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.937521][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.959467][ T29] audit: type=1400 audit(1737658498.402:116): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.973217][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.992007][ T29] audit: type=1400 audit(1737658498.402:117): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.q4SoAD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.030685][ T29] audit: type=1400 audit(1737658498.402:118): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.q4SoAD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.059418][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.060700][ T29] audit: type=1400 audit(1737658498.402:119): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.086693][ T29] audit: type=1400 audit(1737658498.582:120): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 53.114047][ T29] audit: type=1400 audit(1737658498.582:121): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="gadgetfs" ino=7690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 53.117448][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.156596][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.173636][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.183642][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.194298][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.204241][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.214904][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.224805][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.235262][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.246117][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.254994][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.264041][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.272810][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.281560][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.310122][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.356083][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.366683][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.381403][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.397494][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.408056][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.417991][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.429575][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.441992][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.505559][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.513787][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.532647][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.550734][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.555783][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.572119][ T5904] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.573854][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.629650][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.658736][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.687920][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.709392][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.734165][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.745616][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.806622][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.819827][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.917856][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.957620][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.177446][ T5920] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.391250][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.456266][ T5935] sctp: [Deprecated]: syz.3.17 (pid 5935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.456266][ T5935] Use struct sctp_sack_info instead [ 54.495221][ T5937] tipc: Started in network mode [ 54.508669][ T5937] tipc: Node identity 7, cluster identity 4711 [ 54.516423][ T5937] tipc: Node number set to 7 [ 54.522012][ T5937] tipc: Cannot configure node identity twice [ 54.577837][ T5896] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 54.601515][ T5896] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 54.628700][ T5896] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 54.638528][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.650980][ T5818] Bluetooth: hci0: command tx timeout [ 54.660854][ T5822] Bluetooth: hci1: command tx timeout [ 54.663447][ T5922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 54.710597][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 54.731404][ T5822] Bluetooth: hci3: command tx timeout [ 54.736837][ T5822] Bluetooth: hci4: command tx timeout [ 54.743698][ T5822] Bluetooth: hci2: command tx timeout [ 54.754599][ T5950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.036677][ T5866] usb 5-1: USB disconnect, device number 2 [ 55.187175][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'. [ 55.223685][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'. [ 55.234373][ T5968] vlan2: entered promiscuous mode [ 55.268927][ T5968] gretap0: entered promiscuous mode [ 55.269899][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.305058][ T5972] team1: entered promiscuous mode [ 55.326958][ T5972] 8021q: adding VLAN 0 to HW filter on device team1 [ 55.330509][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'. [ 55.345042][ T5973] nbd: device at index 64 is going down [ 55.624964][ T5987] netlink: 'syz.0.38': attribute type 39 has an invalid length. [ 55.781440][ T5866] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 55.901538][ T6001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 55.940327][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 55.950268][ T5869] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 55.975974][ T5866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.992114][ T5866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.005365][ T5866] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 56.017084][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.025332][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.033267][ T5866] usb 4-1: Product: syz [ 56.037444][ T5866] usb 4-1: Manufacturer: syz [ 56.045070][ T5866] usb 4-1: SerialNumber: syz [ 56.122298][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.133637][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.144057][ T5869] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 56.153648][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.170934][ T5869] usb 3-1: config 0 descriptor?? [ 56.193118][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 56.200078][ T47] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 56.209924][ T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.220961][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.240274][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.240303][ T5947] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.251361][ T47] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.278861][ T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 56.291970][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.303253][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 56.303266][ T29] audit: type=1400 audit(1737658501.822:180): avc: denied { ioctl } for pid=6005 comm="syz.0.47" path="socket:[8383]" dev="sockfs" ino=8383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.376205][ T29] audit: type=1400 audit(1737658501.892:181): avc: denied { execute } for pid=6007 comm="syz.0.48" path="/12/cpuacct.stat" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.409020][ T29] audit: type=1400 audit(1737658501.922:182): avc: denied { connect } for pid=6007 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.462588][ T5947] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 56.475041][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.481295][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.493534][ T29] audit: type=1400 audit(1737658502.002:183): avc: denied { create } for pid=6009 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.522087][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.522469][ T47] usb 2-1: usb_control_msg returned -32 [ 56.531689][ T5947] usb 5-1: config 0 descriptor?? [ 56.540312][ T47] usbtmc 2-1:16.0: can't read capabilities [ 56.548445][ T5947] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 56.559622][ T5866] usb 4-1: 0:2 : does not exist [ 56.584521][ T5866] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 56.624886][ T5866] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 56.650945][ T5866] usb 4-1: USB disconnect, device number 2 [ 56.689925][ T29] audit: type=1400 audit(1737658502.202:184): avc: denied { setopt } for pid=6011 comm="syz.0.50" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.721269][ T29] audit: type=1400 audit(1737658502.202:185): avc: denied { connect } for pid=6011 comm="syz.0.50" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.743422][ T29] audit: type=1400 audit(1737658502.202:186): avc: denied { write } for pid=6011 comm="syz.0.50" laddr=172.20.20.18 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.753075][ T5822] Bluetooth: hci1: command tx timeout [ 56.773736][ T5829] Bluetooth: hci0: command tx timeout [ 56.810709][ T5829] Bluetooth: hci2: command tx timeout [ 56.814035][ T5822] Bluetooth: hci4: command tx timeout [ 56.816141][ T5818] Bluetooth: hci3: command tx timeout [ 56.876067][ T29] audit: type=1400 audit(1737658502.392:187): avc: denied { write } for pid=5994 comm="syz.1.42" name="usbtmc0" dev="devtmpfs" ino=2749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.958497][ T6013] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 56.975413][ T5947] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 57.018104][ T29] audit: type=1400 audit(1737658502.532:188): avc: denied { mount } for pid=6014 comm="syz.0.51" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.043443][ T29] audit: type=1400 audit(1737658502.562:189): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.160564][ T8] usb 2-1: USB disconnect, device number 2 [ 57.241427][ T5869] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 57.251598][ T5869] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 57.259133][ T5869] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 57.274923][ T5869] usb 3-1: USB disconnect, device number 2 [ 57.286554][ T6021] bond_slave_1: entered promiscuous mode [ 57.295218][ T6021] bond_slave_1: left promiscuous mode [ 57.390377][ T5867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.404995][ T5947] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 57.570262][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 57.584787][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.596102][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.605945][ T5867] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 57.616417][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.627881][ T5867] usb 1-1: config 0 descriptor?? [ 57.661784][ T8] usb 5-1: USB disconnect, device number 3 [ 58.064321][ T5867] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 58.090351][ T5867] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 58.118897][ T5867] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 58.147075][ T5867] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 58.164704][ T5867] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 58.177334][ T5867] appleir 0003:05AC:8241.0002: No inputs registered, leaving [ 58.220788][ T5867] appleir 0003:05AC:8241.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 58.320615][ T5869] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 58.406362][ T8] usb 1-1: USB disconnect, device number 2 [ 58.492560][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 58.529473][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 58.554168][ T5869] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 58.580235][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.603548][ T5869] usb 2-1: config 0 descriptor?? [ 58.621080][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 58.828862][ T5177] bcm5974 2-1:0.0: could not read from device [ 58.836963][ T5177] bcm5974 2-1:0.0: could not read from device [ 58.845806][ T5869] bcm5974 2-1:0.0: could not read from device [ 58.852393][ T5866] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.866168][ T5869] input: failed to attach handler mousedev to device input5, error: -5 [ 58.895042][ T5177] bcm5974 2-1:0.0: could not read from device [ 58.895224][ T5869] usb 2-1: USB disconnect, device number 3 [ 59.022646][ T5866] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 59.064991][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.081427][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.107528][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.115233][ T6088] vlan3: entered promiscuous mode [ 59.115502][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.141500][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.152563][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.160636][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.170733][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.182413][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.189909][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.199207][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.228474][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.236426][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.249615][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.261786][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.269758][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.282633][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.295706][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.303341][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.312866][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.324161][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.331981][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.341173][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.352316][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.361002][ T5866] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 59.370792][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 59.380048][ T5866] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 59.389234][ T5866] usb 5-1: Product: syz [ 59.393719][ T5866] usb 5-1: Manufacturer: syz [ 59.398392][ T5866] usb 5-1: SerialNumber: syz [ 59.405885][ T5866] usb 5-1: config 0 descriptor?? [ 59.418334][ T5866] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 59.520503][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 59.542538][ T5869] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 59.559922][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.578859][ T5869] usb 1-1: config 0 descriptor?? [ 59.707406][ T6103] warning: `syz.2.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.846172][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.854937][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.892006][ T5866] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 59.945185][ T6112] bridge0: entered allmulticast mode [ 60.050353][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 60.057643][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.074626][ T5869] usb 1-1: can't set config #0, error -71 [ 60.086311][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.097892][ T5869] usb 1-1: USB disconnect, device number 3 [ 60.107359][ T5866] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 60.116881][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.126648][ T5866] usb 2-1: config 0 descriptor?? [ 60.221850][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.98'. [ 60.231245][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.98'. [ 60.268551][ T6125] SELinux: failed to load policy [ 60.276161][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 60.276608][ T9] usb 5-1: USB disconnect, device number 4 [ 60.296488][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 60.320098][ T6127] Zero length message leads to an empty skb [ 60.538424][ T6135] syz.3.102 uses obsolete (PF_INET,SOCK_PACKET) [ 60.562327][ T5866] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x4 [ 60.581910][ T5866] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 60.800867][ T5869] usb 2-1: USB disconnect, device number 4 [ 61.028971][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 61.138061][ T6162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 61.239719][ T6165] loop2: detected capacity change from 0 to 7 [ 61.251759][ T6165] Dev loop2: unable to read RDB block 7 [ 61.264001][ T6165] loop2: unable to read partition table [ 61.269956][ T6165] loop2: partition table beyond EOD, truncated [ 61.276250][ T6165] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 61.320280][ T6165] loop2: detected capacity change from 7 to 0 [ 61.334256][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 61.334272][ T29] audit: type=1400 audit(1737658506.852:239): avc: denied { read } for pid=6170 comm="syz.0.120" path="socket:[8891]" dev="sockfs" ino=8891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.480604][ T29] audit: type=1400 audit(1737658506.982:240): avc: denied { connect } for pid=6172 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.500247][ T5869] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 61.656950][ T6184] netlink: 32 bytes leftover after parsing attributes in process `syz.4.125'. [ 61.657403][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 61.675712][ T5829] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 61.677736][ T5869] usb 4-1: config 0 has no interfaces? [ 61.699287][ T5869] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 61.708588][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.718434][ T5869] usb 4-1: config 0 descriptor?? [ 61.750348][ T6188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 61.870099][ T29] audit: type=1400 audit(1737658507.382:241): avc: denied { create } for pid=6191 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.902831][ T29] audit: type=1400 audit(1737658507.402:242): avc: denied { setopt } for pid=6191 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.983811][ T29] audit: type=1400 audit(1737658507.502:243): avc: denied { read } for pid=6166 comm="syz.3.117" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.011950][ T29] audit: type=1400 audit(1737658507.532:244): avc: denied { open } for pid=6166 comm="syz.3.117" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.210327][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 62.214757][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.230518][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.246198][ T5867] usb 4-1: USB disconnect, device number 3 [ 62.256556][ T29] audit: type=1400 audit(1737658507.772:245): avc: denied { name_bind } for pid=6201 comm="syz.1.134" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.325578][ T29] audit: type=1400 audit(1737658507.842:246): avc: denied { block_suspend } for pid=6203 comm="syz.1.135" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.377687][ T29] audit: type=1400 audit(1737658507.842:247): avc: denied { write } for pid=6205 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.416006][ T29] audit: type=1400 audit(1737658507.842:248): avc: denied { nlmsg_write } for pid=6205 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.446916][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.470320][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.490933][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 62.497580][ T9] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 62.540304][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.558289][ T9] usb 5-1: config 0 descriptor?? [ 62.991403][ T9] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 62.998417][ T9] saitek 0003:06A3:0621.0004: unknown main item tag 0x0 [ 63.051020][ T9] saitek 0003:06A3:0621.0004: collection stack underflow [ 63.054327][ T6247] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 63.100271][ T9] saitek 0003:06A3:0621.0004: item 0 0 0 12 parsing failed [ 63.117084][ T9] saitek 0003:06A3:0621.0004: parse failed [ 63.123411][ T9] saitek 0003:06A3:0621.0004: probe with driver saitek failed with error -22 [ 63.227838][ T5896] usb 5-1: USB disconnect, device number 5 [ 63.502017][ T6274] syz.1.166 (6274) used greatest stack depth: 20128 bytes left [ 63.541501][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.580268][ T5866] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.690415][ T5829] Bluetooth: hci0: command tx timeout [ 63.710384][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 63.717769][ T5869] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 63.726289][ T5869] usb 1-1: config 8 has no interface number 0 [ 63.737308][ T5869] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 63.749686][ T5869] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 63.749865][ T6290] process 'syz.1.172' launched './file2' with NULL argv: empty string added [ 63.760436][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.780080][ T5869] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 63.794421][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 63.806301][ T5869] usb 1-1: config 8 interface 39 has no altsetting 0 [ 63.817040][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 63.828776][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.852975][ T5869] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 63.862192][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.876976][ T5866] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.887066][ T5869] usb 1-1: Product: syz [ 63.895888][ T5869] usb 1-1: Manufacturer: syz [ 63.900584][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.910641][ T5866] usb 3-1: config 0 descriptor?? [ 63.915737][ T5869] usb 1-1: SerialNumber: syz [ 63.920684][ T6265] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.131682][ T6307] netlink: 96 bytes leftover after parsing attributes in process `syz.1.180'. [ 64.345791][ T5866] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 64.355986][ T5866] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 64.373993][ T5866] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 64.535000][ T6319] capability: warning: `syz.1.186' uses deprecated v2 capabilities in a way that may be insecure [ 64.555127][ T5869] ipheth 1-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 64.579167][ T5867] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.583490][ T5869] ipheth 1-1:8.39: Apple iPhone USB Ethernet device attached [ 64.620561][ T5869] usb 1-1: USB disconnect, device number 4 [ 64.684837][ T5896] usb 3-1: USB disconnect, device number 3 [ 64.691441][ T5869] ipheth 1-1:8.39: Apple iPhone USB Ethernet now disconnected [ 64.751772][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.770309][ T5867] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 64.790074][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.801765][ T5867] usb 5-1: config 0 descriptor?? [ 64.814943][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 65.219926][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 65.243404][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 65.407747][ T6360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.199'. [ 65.455105][ T6366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6366 comm=syz.0.202 [ 65.473826][ T5867] pwc: recv_control_msg error -71 req 04 val 1000 [ 65.502659][ T5867] pwc: recv_control_msg error -71 req 04 val 1300 [ 65.522627][ T5867] pwc: recv_control_msg error -71 req 04 val 1400 [ 65.530090][ T5867] pwc: recv_control_msg error -71 req 02 val 2000 [ 65.554506][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 65.571675][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 65.590490][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 65.601086][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 65.614908][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 65.632401][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 65.656654][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 65.669384][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 65.683806][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 65.720969][ T5867] pwc: Registered as video103. [ 65.727110][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 65.752502][ T5867] usb 5-1: USB disconnect, device number 6 [ 65.773822][ T5829] Bluetooth: hci0: command tx timeout [ 65.950275][ T5869] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 66.101662][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.120249][ T5869] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.150814][ T5869] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.170371][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.179525][ T5869] usb 3-1: SerialNumber: syz [ 66.242535][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 66.406118][ T5869] usb 3-1: 0:2 : does not exist [ 66.422762][ T5869] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 66.446879][ T5869] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 66.478096][ T5869] usb 3-1: USB disconnect, device number 4 [ 66.500735][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 66.500751][ T29] audit: type=1400 audit(1737658512.022:280): avc: denied { listen } for pid=6406 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.634195][ T6411] netlink: 71 bytes leftover after parsing attributes in process `syz.1.220'. [ 66.637496][ T29] audit: type=1400 audit(1737658512.152:281): avc: denied { ioctl } for pid=6412 comm="syz.3.222" path="socket:[11368]" dev="sockfs" ino=11368 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.745974][ T29] audit: type=1400 audit(1737658512.152:282): avc: denied { bind } for pid=6412 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.873518][ T6424] netlink: 248 bytes leftover after parsing attributes in process `syz.4.226'. [ 66.907997][ T6430] loop2: detected capacity change from 0 to 7 [ 66.927304][ T6430] Dev loop2: unable to read RDB block 7 [ 66.940252][ T6430] loop2: unable to read partition table [ 66.946035][ T6430] loop2: partition table beyond EOD, truncated [ 66.976218][ T6430] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 67.267216][ T29] audit: type=1400 audit(1737658512.782:283): avc: denied { create } for pid=6449 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.304251][ T29] audit: type=1400 audit(1737658512.782:284): avc: denied { write } for pid=6449 comm="syz.0.236" path="socket:[10694]" dev="sockfs" ino=10694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.363384][ T29] audit: type=1400 audit(1737658512.862:285): avc: denied { getopt } for pid=6456 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.393075][ T29] audit: type=1400 audit(1737658512.912:286): avc: denied { read } for pid=6459 comm="syz.0.242" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.417243][ T29] audit: type=1400 audit(1737658512.912:287): avc: denied { open } for pid=6459 comm="syz.0.242" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.473032][ T29] audit: type=1400 audit(1737658512.942:288): avc: denied { ioctl } for pid=6459 comm="syz.0.242" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.769562][ T9] kernel read not supported for file /swradio8 (pid: 9 comm: kworker/0:1) [ 67.842332][ T29] audit: type=1400 audit(1737658513.352:289): avc: denied { bind } for pid=6485 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.202911][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 68.774642][ T6531] tun0: tun_chr_ioctl cmd 1074025675 [ 68.782828][ T6531] tun0: persist enabled [ 68.803432][ T6531] tun0: tun_chr_ioctl cmd 1074025675 [ 68.820858][ T6531] tun0: persist enabled [ 69.130549][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 69.296447][ T9] usb 4-1: config 0 has an invalid interface number: 142 but max is 1 [ 69.318400][ T9] usb 4-1: config 0 has no interface number 0 [ 69.329352][ T9] usb 4-1: config 0 interface 1 has no altsetting 0 [ 69.350091][ T9] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 69.359555][ T5867] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 69.375752][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.387698][ T9] usb 4-1: Product: syz [ 69.393629][ T9] usb 4-1: Manufacturer: syz [ 69.399217][ T9] usb 4-1: SerialNumber: syz [ 69.406105][ T9] usb 4-1: config 0 descriptor?? [ 69.552668][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.575105][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.593428][ T5867] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.604045][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.630625][ T5867] usb 3-1: SerialNumber: syz [ 69.730320][ T9] msi2500 4-1:0.1: Registered as swradio24 [ 69.738520][ T9] msi2500 4-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 69.798713][ T9] videodev: could not get a free minor [ 69.806022][ T9] msi2500 4-1:0.142: Failed to register as video device (-23) [ 69.815720][ T9] msi2500 4-1:0.142: probe with driver msi2500 failed with error -23 [ 69.827728][ T9] usb 4-1: USB disconnect, device number 4 [ 69.850086][ T5867] usb 3-1: 0:2 : does not exist [ 69.874353][ T5867] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 69.895429][ T5867] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 69.915135][ T5867] usb 3-1: USB disconnect, device number 5 [ 70.017681][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.122864][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.257762][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.355769][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.369270][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.371372][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.377919][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.395456][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.404289][ T5818] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.413651][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.440207][ T5818] ================================================================== [ 70.448297][ T5818] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xd55/0xf10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 70.456208][ T5818] Read of size 8 at addr ffff888025012480 by task kworker/u9:2/5818 [ 70.464188][ T5818] [ 70.466515][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: kworker/u9:2 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 70.466538][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.466550][ T5818] Workqueue: hci1 hci_rx_work [ 70.466576][ T5818] Call Trace: [ 70.466581][ T5818] [ 70.466589][ T5818] dump_stack_lvl+0x116/0x1f0 [ 70.466609][ T5818] print_report+0xc3/0x620 [ 70.466636][ T5818] ? __virt_addr_valid+0x5e/0x590 [ 70.466660][ T5818] ? __phys_addr+0xc6/0x150 [ 70.466683][ T5818] kasan_report+0xd9/0x110 [ 70.466704][ T5818] ? l2cap_connect_cfm+0xd55/0xf10 [ 70.466726][ T5818] ? l2cap_connect_cfm+0xd55/0xf10 [ 70.466747][ T5818] l2cap_connect_cfm+0xd55/0xf10 [ 70.466770][ T5818] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 70.466793][ T5818] ? hci_cb_lookup+0x319/0x4e0 [ 70.466816][ T5818] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 70.466837][ T5818] le_conn_complete_evt+0x168d/0x1da0 [ 70.466861][ T5818] ? __pfx_lock_release+0x10/0x10 [ 70.466882][ T5818] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 70.466909][ T5818] hci_le_conn_complete_evt+0x23c/0x370 [ 70.466932][ T5818] hci_le_meta_evt+0x2e2/0x5d0 [ 70.466954][ T5818] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 70.466977][ T5818] hci_event_packet+0x666/0x1180 [ 70.466997][ T5818] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 70.467020][ T5818] ? __pfx_hci_event_packet+0x10/0x10 [ 70.467040][ T5818] ? mark_held_locks+0x9f/0xe0 [ 70.467060][ T5818] ? kcov_remote_start+0x3cf/0x6e0 [ 70.467083][ T5818] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.467104][ T5818] hci_rx_work+0x2c5/0x16b0 [ 70.467126][ T5818] ? process_one_work+0x921/0x1ba0 [ 70.467147][ T5818] process_one_work+0x9c5/0x1ba0 [ 70.467171][ T5818] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.467192][ T5818] ? __pfx_process_one_work+0x10/0x10 [ 70.467211][ T5818] ? rcu_is_watching+0x12/0xc0 [ 70.467229][ T5818] ? assign_work+0x1a0/0x250 [ 70.467247][ T5818] worker_thread+0x6c8/0xf00 [ 70.467270][ T5818] ? __pfx_worker_thread+0x10/0x10 [ 70.467290][ T5818] kthread+0x3af/0x750 [ 70.467309][ T5818] ? __pfx_kthread+0x10/0x10 [ 70.467325][ T5818] ? lock_acquire+0x2f/0xb0 [ 70.467347][ T5818] ? __pfx_kthread+0x10/0x10 [ 70.467363][ T5818] ret_from_fork+0x45/0x80 [ 70.467380][ T5818] ? __pfx_kthread+0x10/0x10 [ 70.467398][ T5818] ret_from_fork_asm+0x1a/0x30 [ 70.467440][ T5818] [ 70.467445][ T5818] [ 70.696052][ T5818] Allocated by task 5818: [ 70.700359][ T5818] kasan_save_stack+0x33/0x60 [ 70.705022][ T5818] kasan_save_track+0x14/0x30 [ 70.709682][ T5818] __kasan_kmalloc+0xaa/0xb0 [ 70.714253][ T5818] l2cap_chan_create+0x44/0x920 [ 70.719082][ T5818] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 70.724874][ T5818] l2cap_sock_new_connection_cb+0x101/0x240 [ 70.730752][ T5818] l2cap_connect_cfm+0x85f/0xf10 [ 70.735672][ T5818] le_conn_complete_evt+0x168d/0x1da0 [ 70.741025][ T5818] hci_le_conn_complete_evt+0x23c/0x370 [ 70.746553][ T5818] hci_le_meta_evt+0x2e2/0x5d0 [ 70.751303][ T5818] hci_event_packet+0x666/0x1180 [ 70.756224][ T5818] hci_rx_work+0x2c5/0x16b0 [ 70.760711][ T5818] process_one_work+0x9c5/0x1ba0 [ 70.765631][ T5818] worker_thread+0x6c8/0xf00 [ 70.770201][ T5818] kthread+0x3af/0x750 [ 70.774248][ T5818] ret_from_fork+0x45/0x80 [ 70.778643][ T5818] ret_from_fork_asm+0x1a/0x30 [ 70.783394][ T5818] [ 70.785698][ T5818] Freed by task 6587: [ 70.789656][ T5818] kasan_save_stack+0x33/0x60 [ 70.794319][ T5818] kasan_save_track+0x14/0x30 [ 70.798978][ T5818] kasan_save_free_info+0x3b/0x60 [ 70.803982][ T5818] __kasan_slab_free+0x51/0x70 [ 70.808727][ T5818] kfree+0x14f/0x4b0 [ 70.812605][ T5818] l2cap_chan_put+0x216/0x2c0 [ 70.817259][ T5818] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 70.822791][ T5818] l2cap_sock_release+0x5c/0x210 [ 70.827725][ T5818] __sock_release+0xb0/0x270 [ 70.832302][ T5818] sock_close+0x1c/0x30 [ 70.836450][ T5818] __fput+0x3f8/0xb60 [ 70.840422][ T5818] task_work_run+0x14e/0x250 [ 70.844993][ T5818] syscall_exit_to_user_mode+0x27b/0x2a0 [ 70.850612][ T5818] do_syscall_64+0xda/0x250 [ 70.855106][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.860982][ T5818] [ 70.863285][ T5818] The buggy address belongs to the object at ffff888025012000 [ 70.863285][ T5818] which belongs to the cache kmalloc-2k of size 2048 [ 70.877313][ T5818] The buggy address is located 1152 bytes inside of [ 70.877313][ T5818] freed 2048-byte region [ffff888025012000, ffff888025012800) [ 70.891257][ T5818] [ 70.893562][ T5818] The buggy address belongs to the physical page: [ 70.899945][ T5818] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25010 [ 70.908681][ T5818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 70.917157][ T5818] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 70.925111][ T5818] page_type: f5(slab) [ 70.929072][ T5818] raw: 00fff00000000040 ffff88801b042000 0000000000000000 0000000000000001 [ 70.937632][ T5818] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 70.946191][ T5818] head: 00fff00000000040 ffff88801b042000 0000000000000000 0000000000000001 [ 70.954841][ T5818] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 70.963491][ T5818] head: 00fff00000000003 ffffea0000940401 ffffffffffffffff 0000000000000000 [ 70.972139][ T5818] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 70.980787][ T5818] page dumped because: kasan: bad access detected [ 70.987172][ T5818] page_owner tracks the page as allocated [ 70.992863][ T5818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 53977591361, free_ts 53938335810 [ 71.014024][ T5818] post_alloc_hook+0x2d1/0x350 [ 71.018773][ T5818] get_page_from_freelist+0xfce/0x2f80 [ 71.024216][ T5818] __alloc_pages_noprof+0x221/0x2470 [ 71.029485][ T5818] alloc_pages_mpol_noprof+0x2c8/0x620 [ 71.034922][ T5818] new_slab+0x2c9/0x410 [ 71.039059][ T5818] ___slab_alloc+0xc5d/0x1720 [ 71.043716][ T5818] __slab_alloc.constprop.0+0x56/0xb0 [ 71.049069][ T5818] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 71.055480][ T5818] kmalloc_reserve+0xef/0x2c0 [ 71.060146][ T5818] pskb_expand_head+0x243/0x1240 [ 71.065069][ T5818] netlink_trim+0x22d/0x310 [ 71.070176][ T5818] netlink_unicast+0xc6/0x7f0 [ 71.074842][ T5818] rtnl_getlink+0x8f0/0xb30 [ 71.079325][ T5818] rtnetlink_rcv_msg+0x3c7/0xea0 [ 71.084247][ T5818] netlink_rcv_skb+0x16b/0x440 [ 71.088992][ T5818] netlink_unicast+0x53c/0x7f0 [ 71.093737][ T5818] page last free pid 5192 tgid 5192 stack trace: [ 71.100037][ T5818] free_unref_page+0x661/0x1080 [ 71.104872][ T5818] __put_partials+0x14c/0x170 [ 71.109531][ T5818] qlist_free_all+0x4e/0x120 [ 71.114102][ T5818] kasan_quarantine_reduce+0x195/0x1e0 [ 71.119545][ T5818] __kasan_slab_alloc+0x69/0x90 [ 71.124378][ T5818] kmem_cache_alloc_noprof+0x226/0x3d0 [ 71.129821][ T5818] getname_flags.part.0+0x4c/0x550 [ 71.134911][ T5818] __x64_sys_unlink+0xb0/0x110 [ 71.139672][ T5818] do_syscall_64+0xcd/0x250 [ 71.144157][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.150033][ T5818] [ 71.152336][ T5818] Memory state around the buggy address: [ 71.157950][ T5818] ffff888025012380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.165990][ T5818] ffff888025012400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.174039][ T5818] >ffff888025012480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.182073][ T5818] ^ [ 71.186114][ T5818] ffff888025012500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.194152][ T5818] ffff888025012580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.202202][ T5818] ================================================================== [ 71.210302][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.235794][ T5818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.243022][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: kworker/u9:2 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 71.253527][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 71.263592][ T5818] Workqueue: hci1 hci_rx_work [ 71.268287][ T5818] Call Trace: [ 71.271569][ T5818] [ 71.274505][ T5818] dump_stack_lvl+0x3d/0x1f0 [ 71.279106][ T5818] panic+0x71d/0x800 [ 71.283004][ T5818] ? __pfx_panic+0x10/0x10 [ 71.287430][ T5818] ? irqentry_exit+0x3b/0x90 [ 71.292028][ T5818] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.297230][ T5818] ? preempt_schedule_thunk+0x1a/0x30 [ 71.302606][ T5818] ? preempt_schedule_common+0x44/0xc0 [ 71.308075][ T5818] check_panic_on_warn+0xab/0xb0 [ 71.313019][ T5818] end_report+0x117/0x180 [ 71.317358][ T5818] kasan_report+0xe9/0x110 [ 71.321782][ T5818] ? l2cap_connect_cfm+0xd55/0xf10 [ 71.326898][ T5818] ? l2cap_connect_cfm+0xd55/0xf10 [ 71.332016][ T5818] l2cap_connect_cfm+0xd55/0xf10 [ 71.336962][ T5818] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 71.342516][ T5818] ? hci_cb_lookup+0x319/0x4e0 [ 71.347296][ T5818] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 71.352760][ T5818] le_conn_complete_evt+0x168d/0x1da0 [ 71.358142][ T5818] ? __pfx_lock_release+0x10/0x10 [ 71.363173][ T5818] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 71.368909][ T5818] hci_le_conn_complete_evt+0x23c/0x370 [ 71.374470][ T5818] hci_le_meta_evt+0x2e2/0x5d0 [ 71.379243][ T5818] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 71.385325][ T5818] hci_event_packet+0x666/0x1180 [ 71.390295][ T5818] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 71.395594][ T5818] ? __pfx_hci_event_packet+0x10/0x10 [ 71.400974][ T5818] ? mark_held_locks+0x9f/0xe0 [ 71.405749][ T5818] ? kcov_remote_start+0x3cf/0x6e0 [ 71.410846][ T5818] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.416033][ T5818] hci_rx_work+0x2c5/0x16b0 [ 71.420522][ T5818] ? process_one_work+0x921/0x1ba0 [ 71.425616][ T5818] process_one_work+0x9c5/0x1ba0 [ 71.430536][ T5818] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 71.436150][ T5818] ? __pfx_process_one_work+0x10/0x10 [ 71.441504][ T5818] ? rcu_is_watching+0x12/0xc0 [ 71.446248][ T5818] ? assign_work+0x1a0/0x250 [ 71.450819][ T5818] worker_thread+0x6c8/0xf00 [ 71.455485][ T5818] ? __pfx_worker_thread+0x10/0x10 [ 71.460578][ T5818] kthread+0x3af/0x750 [ 71.464631][ T5818] ? __pfx_kthread+0x10/0x10 [ 71.469199][ T5818] ? lock_acquire+0x2f/0xb0 [ 71.473693][ T5818] ? __pfx_kthread+0x10/0x10 [ 71.478264][ T5818] ret_from_fork+0x45/0x80 [ 71.482663][ T5818] ? __pfx_kthread+0x10/0x10 [ 71.487236][ T5818] ret_from_fork_asm+0x1a/0x30 [ 71.492003][ T5818] [ 71.495199][ T5818] Kernel Offset: disabled [ 71.499496][ T5818] Rebooting in 86400 seconds..