last executing test programs: 2m37.900917131s ago: executing program 0 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb02030306"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 2m36.56624604s ago: executing program 0 (id=45): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2b40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)) 2m36.273897167s ago: executing program 0 (id=47): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) setresuid(0xee01, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000, 0x7ff, 0x0) 2m36.099463509s ago: executing program 0 (id=49): r0 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r3}}) setreuid(0x0, 0x0) io_uring_enter(r0, 0x4536, 0x6aaf, 0x0, 0x0, 0x0) 2m35.728822744s ago: executing program 0 (id=53): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r3, r4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 2m35.566839268s ago: executing program 0 (id=55): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.387346128s ago: executing program 32 (id=55): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m40.380625389s ago: executing program 1 (id=655): r0 = gettid() timer_create(0x0, &(0x7f0000001100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x44}) readv(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4092, 0xffc}], 0x1) 1m39.450847024s ago: executing program 1 (id=668): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r1, 0x0, 0x0) 1m39.31658053s ago: executing program 1 (id=669): r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000680)=0xa5) 1m39.17187992s ago: executing program 1 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 1m39.121720239s ago: executing program 1 (id=673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) socket$netlink(0x10, 0x3, 0x0) 1m38.735873599s ago: executing program 1 (id=679): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 1m38.479182828s ago: executing program 33 (id=679): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 1m9.030017754s ago: executing program 3 (id=1086): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) 1m8.778069873s ago: executing program 3 (id=1091): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0xb997, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0x3, 0xfff0}}}, 0x24}}, 0x40044) 1m8.459580632s ago: executing program 3 (id=1095): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x2, {0x0, 0x0, 0x4}, 0xff}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}}, 0x18, &(0x7f0000000080)={0x0}}, 0x4) 1m8.265740761s ago: executing program 3 (id=1096): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 1m8.205338772s ago: executing program 3 (id=1097): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfc}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x1}, 0x2) 1m8.049672672s ago: executing program 3 (id=1099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) 1m7.775171095s ago: executing program 34 (id=1099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) 42.525058748s ago: executing program 6 (id=1178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) open$dir(&(0x7f0000000340)='./file1\x00', 0x2000, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 36.028149112s ago: executing program 6 (id=1178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) open$dir(&(0x7f0000000340)='./file1\x00', 0x2000, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 26.714802189s ago: executing program 6 (id=1178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) open$dir(&(0x7f0000000340)='./file1\x00', 0x2000, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 20.211650899s ago: executing program 6 (id=1178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) open$dir(&(0x7f0000000340)='./file1\x00', 0x2000, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 10.439369598s ago: executing program 6 (id=1178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) open$dir(&(0x7f0000000340)='./file1\x00', 0x2000, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 8.974310519s ago: executing program 2 (id=1592): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 8.802116847s ago: executing program 2 (id=1594): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 8.693259751s ago: executing program 2 (id=1596): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$kcm(0x2, 0x2, 0x73) 8.565485129s ago: executing program 2 (id=1597): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2638c2, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x212d09b, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 7.820477074s ago: executing program 2 (id=1603): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x9}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x50) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) 6.479861795s ago: executing program 4 (id=1611): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.303607285s ago: executing program 4 (id=1612): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.37408891s ago: executing program 5 (id=1614): connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x1ff) 5.249644283s ago: executing program 5 (id=1615): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x5, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2002, 0x8a, 0x0, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x3, 0x3, 0x0, 0x11e, 0x1, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x5, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x2, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x800000, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.184022771s ago: executing program 7 (id=1616): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000dc0)={0x34, &(0x7f0000000ac0)={0x0, 0x0, 0x1, '='}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000580)={0x0, 0xd, 0x15, "6543aad91b8d568bfea793e5f9f7fcae46467714b4"}, 0x0, 0x0}) 2.116471831s ago: executing program 7 (id=1617): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x114e3, 0x80, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x103040}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0) 2.116218248s ago: executing program 4 (id=1618): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa00"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 2.111575764s ago: executing program 5 (id=1619): socket(0x11, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000003c0)={&(0x7f0000000a00)=[{0x6, 0x6010, 0x0, 0x0}, {0x0, 0xa00, 0x0, 0x0}, {0x3, 0x8a00, 0x0, 0x0}], 0x3}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 2.052429973s ago: executing program 4 (id=1620): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x800, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x12935}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 1.661600531s ago: executing program 4 (id=1621): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) fchdir(0xffffffffffffffff) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x89, &(0x7f00000001c0)=@generic={0x4, 0x2, 0x81, "bf2dff17", "1e8ebf4fa1e46e8dfb2caf1f88e86428911bcb29b050172a5d154d8a54ada3b624470b0d43c20cbe44452cac0db687d467540e2c61716c5c3b1f3870c28f572136efc16bc31fc8485ba3aaf1a5d33ca8bef65d822dd862498bc7a41260e56420f70af2a79992c1fc8cd46b0c16ccb4afe0b16acc13ecd2ae990920f360dc3be534"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x5}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.395917043s ago: executing program 6 (id=1178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) open$dir(&(0x7f0000000340)='./file1\x00', 0x2000, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 672.638855ms ago: executing program 2 (id=1603): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x9}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x50) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) 666.406507ms ago: executing program 7 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x64, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40) 541.249467ms ago: executing program 7 (id=1624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) 524.541943ms ago: executing program 5 (id=1625): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c1", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x46}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 427.46139ms ago: executing program 7 (id=1626): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}, 0x40008d0) 343.625929ms ago: executing program 5 (id=1627): r0 = syz_io_uring_setup(0xc17, &(0x7f0000000140)={0x0, 0x3ae7, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x80053c) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 324.318395ms ago: executing program 7 (id=1628): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) 38.819489ms ago: executing program 4 (id=1629): setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 0s ago: executing program 5 (id=1630): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRESOCT=r0], 0x0) kernel console output (not intermixed with test programs): ) entered forwarding state [ 172.161724][ T30] audit: type=1400 audit(1747872516.104:580): avc: denied { watch_reads } for pid=8824 comm="syz.2.1150" path="/237/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 172.163272][ T8690] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.221944][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.229127][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.257262][ T8667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.276378][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.283572][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.437916][ T5812] Bluetooth: hci0: command tx timeout [ 172.496010][ T30] audit: type=1400 audit(1747872516.434:581): avc: denied { mount } for pid=8839 comm="syz.2.1153" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 172.550005][ T30] audit: type=1400 audit(1747872516.444:582): avc: denied { mounton } for pid=8839 comm="syz.2.1153" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 172.610772][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.638081][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.899056][ T8861] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.918340][ T30] audit: type=1400 audit(1747872516.854:583): avc: denied { create } for pid=8860 comm="syz.5.1157" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 173.043163][ T8667] veth0_vlan: entered promiscuous mode [ 173.148617][ T30] audit: type=1400 audit(1747872516.854:584): avc: denied { associate } for pid=8860 comm="syz.5.1157" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 173.149068][ T30] audit: type=1400 audit(1747872516.864:585): avc: denied { mounton } for pid=8860 comm="syz.5.1157" path="/135/bus" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 173.299415][ T8667] veth1_vlan: entered promiscuous mode [ 173.326868][ T30] audit: type=1400 audit(1747872516.864:586): avc: denied { write } for pid=8860 comm="syz.5.1157" name="bus" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 173.403877][ T30] audit: type=1400 audit(1747872516.864:587): avc: denied { add_name } for pid=8860 comm="syz.5.1157" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 173.505625][ T30] audit: type=1400 audit(1747872516.874:588): avc: denied { setattr } for pid=8860 comm="syz.5.1157" name="work" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 173.516743][ T5812] Bluetooth: hci3: command tx timeout [ 173.632909][ T8667] veth0_macvtap: entered promiscuous mode [ 173.742810][ T30] audit: type=1400 audit(1747872516.874:589): avc: denied { write open } for pid=8860 comm="syz.5.1157" path=2F202864656C6574656429 dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 173.743229][ T30] audit: type=1400 audit(1747872516.874:590): avc: denied { create } for pid=8860 comm="syz.5.1157" name="#16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 173.844514][ T30] audit: type=1400 audit(1747872516.874:591): avc: denied { remove_name } for pid=8860 comm="syz.5.1157" name="#16" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 173.943690][ T8667] veth1_macvtap: entered promiscuous mode [ 174.074563][ T30] audit: type=1400 audit(1747872516.874:592): avc: denied { rename } for pid=8860 comm="syz.5.1157" name="#16" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 174.134375][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.251158][ T8690] veth0_vlan: entered promiscuous mode [ 174.263544][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.286538][ T8667] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.299304][ T8667] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.308211][ T8667] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.317075][ T8667] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.332316][ T8690] veth1_vlan: entered promiscuous mode [ 174.435025][ T8690] veth0_macvtap: entered promiscuous mode [ 174.454983][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.465865][ T8690] veth1_macvtap: entered promiscuous mode [ 174.477695][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.523701][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.531810][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.537998][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.539283][ T8415] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 174.552810][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.554931][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 174.580746][ T8690] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.590332][ T8690] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.600461][ T8690] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.613002][ T8690] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.717504][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 174.724894][ T8415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.736169][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.746284][ T8415] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.756054][ T8415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.765986][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.767310][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 174.791720][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.802332][ T8415] usb 5-1: config 0 descriptor?? [ 174.804794][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.811415][ T9] usb 3-1: Product: syz [ 174.822800][ T9] usb 3-1: Manufacturer: syz [ 174.830756][ T9] usb 3-1: SerialNumber: syz [ 174.838649][ T9] usb 3-1: config 0 descriptor?? [ 174.872190][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.888097][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.241789][ T8415] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 175.253840][ T8415] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0015/input/input26 [ 175.267256][ T9] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 175.353697][ T8415] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 175.393002][ T3487] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.456834][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 175.534279][ T3487] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.616580][ T3487] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.654327][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.668587][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.685641][ T9] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 175.688454][ T3487] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.704343][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.724454][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.734733][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.745768][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.756136][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.765678][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.782308][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.783244][ T24] usb 6-1: config 0 descriptor?? [ 175.793256][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.854063][ T3487] bridge_slave_1: left allmulticast mode [ 175.864723][ T3487] bridge_slave_1: left promiscuous mode [ 175.870957][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.887835][ T3487] bridge_slave_0: left allmulticast mode [ 175.895272][ T3487] bridge_slave_0: left promiscuous mode [ 175.903353][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.939205][ C0] Mem-Info: [ 175.942661][ C0] active_anon:4353 inactive_anon:0 isolated_anon:0 [ 175.942661][ C0] active_file:12498 inactive_file:40646 isolated_file:0 [ 175.942661][ C0] unevictable:768 dirty:490 writeback:0 [ 175.942661][ C0] slab_reclaimable:12485 slab_unreclaimable:99358 [ 175.942661][ C0] mapped:29307 shmem:1363 pagetables:764 [ 175.942661][ C0] sec_pagetables:0 bounce:0 [ 175.942661][ C0] kernel_misc_reclaimable:0 [ 175.942661][ C0] free:1319189 free_pcp:4828 free_cma:0 [ 175.987736][ C0] Node 0 active_anon:17412kB inactive_anon:0kB active_file:49992kB inactive_file:162384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117228kB dirty:1956kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11496kB pagetables:3056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.021115][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.052308][ C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.079321][ C0] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 176.085061][ C0] Node 0 DMA32 free:1353580kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:17388kB inactive_anon:0kB active_file:49992kB inactive_file:160560kB unevictable:1536kB writepending:1952kB present:3129332kB managed:2543896kB mlocked:0kB bounce:0kB free_pcp:19276kB local_pcp:9636kB free_cma:0kB [ 176.115542][ C0] lowmem_reserve[]: 0 0 1 1 1 [ 176.120236][ C0] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 176.147593][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 176.152288][ C0] Node 1 Normal free:3907800kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.181027][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 176.185720][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.198366][ C0] Node 0 DMA32: 12*4kB (UME) 3*8kB (UME) 286*16kB (M) 465*32kB (M) 409*64kB (UM) 201*128kB (UME) 134*256kB (UM) 101*512kB (UME) 34*1024kB (UME) 5*2048kB (UM) 281*4096kB (UM) = 1353480kB [ 176.216759][ C0] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 176.228652][ C0] Node 1 Normal: 216*4kB (UME) 49*8kB (UME) 39*16kB (UME) 236*32kB (UME) 98*64kB (UME) 33*128kB (UME) 15*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3907800kB [ 176.247039][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.256562][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.265824][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.275351][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.284613][ C0] 54503 total pagecache pages [ 176.289269][ C0] 0 pages in swap cache [ 176.293404][ C0] Free swap = 124996kB [ 176.297537][ C0] Total swap = 124996kB [ 176.301671][ C0] 2097051 pages RAM [ 176.305463][ C0] 0 pages HighMem/MovableOnly [ 176.310120][ C0] 428971 pages reserved [ 176.314254][ C0] 0 pages cma reserved [ 176.426581][ T8397] usb 3-1: USB disconnect, device number 20 [ 176.562400][ T24] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 176.589448][ T24] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 176.655873][ T8413] usb 5-1: USB disconnect, device number 16 [ 176.756142][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.775034][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.785392][ T3487] bond0 (unregistering): Released all slaves [ 177.043969][ T8916] chnl_net:caif_netlink_parms(): no params data found [ 177.099999][ T3487] hsr_slave_0: left promiscuous mode [ 177.105795][ T3487] hsr_slave_1: left promiscuous mode [ 177.111923][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.119674][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.127982][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.135411][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.154679][ T3487] veth1_macvtap: left promiscuous mode [ 177.160443][ T3487] veth0_macvtap: left promiscuous mode [ 177.166221][ T3487] veth1_vlan: left promiscuous mode [ 177.171721][ T3487] veth0_vlan: left promiscuous mode [ 177.359790][ T8397] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 177.534621][ T8397] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.556539][ T8397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.575492][ T8397] usb 3-1: Product: syz [ 177.585162][ T8397] usb 3-1: Manufacturer: syz [ 177.589858][ T8397] usb 3-1: SerialNumber: syz [ 177.704048][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 177.742285][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 177.878523][ T5812] Bluetooth: hci0: command tx timeout [ 178.233723][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 178.233739][ T30] audit: type=1400 audit(1747872522.174:597): avc: denied { read write } for pid=8943 comm="syz.7.1186" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.265846][ T30] audit: type=1400 audit(1747872522.204:598): avc: denied { open } for pid=8943 comm="syz.7.1186" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.270050][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.300312][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.308732][ T8916] bridge_slave_0: entered allmulticast mode [ 178.316081][ T8916] bridge_slave_0: entered promiscuous mode [ 178.316854][ T30] audit: type=1400 audit(1747872522.244:599): avc: denied { map } for pid=8943 comm="syz.7.1186" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.326637][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.344731][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.373549][ T30] audit: type=1400 audit(1747872522.244:600): avc: denied { execute } for pid=8943 comm="syz.7.1186" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.393307][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.439487][ T8916] bridge_slave_1: entered allmulticast mode [ 178.449111][ T8916] bridge_slave_1: entered promiscuous mode [ 178.555192][ T8916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.584424][ T8916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.663223][ T8413] usb 6-1: USB disconnect, device number 17 [ 178.680640][ T8397] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 178.687409][ T8397] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 178.717193][ T8397] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 178.795667][ T8916] team0: Port device team_slave_0 added [ 178.822398][ T8956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.838662][ T8916] team0: Port device team_slave_1 added [ 178.891378][ T8397] cdc_ncm 3-1:1.0: setting tx_max = 60 [ 178.935418][ T8397] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 178.959736][ T8397] usb 3-1: USB disconnect, device number 21 [ 178.967726][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.974756][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.015675][ T8397] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 179.043429][ T8963] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.056836][ T8916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.088648][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.095631][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.159752][ T8916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.223153][ T8916] hsr_slave_0: entered promiscuous mode [ 179.230716][ T8916] hsr_slave_1: entered promiscuous mode [ 179.238177][ T8916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.246183][ T8916] Cannot create hsr debugfs directory [ 179.386891][ T8413] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 179.516577][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 179.536785][ T8413] usb 5-1: Using ep0 maxpacket: 32 [ 179.543690][ T8413] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 179.553329][ T8413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.565624][ T8413] usb 5-1: config 0 descriptor?? [ 179.667396][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 179.669369][ T8916] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.686009][ T8916] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.689298][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.704725][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 179.708714][ T8916] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 179.726649][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.739263][ T9] usb 6-1: config 0 descriptor?? [ 179.748367][ T8916] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.783918][ T8413] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 179.816235][ T8413] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.846013][ T8413] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 179.863424][ T8413] usb 5-1: media controller created [ 179.897305][ T9] rc_core: IR keymap rc-xbox-dvd not found [ 179.903260][ T9] Registered IR keymap rc-empty [ 179.928868][ T8413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.938784][ T9] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 179.957427][ T5812] Bluetooth: hci0: command tx timeout [ 179.980984][ T9] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 179.999291][ T9] xbox_remote 6-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 179.999461][ T8413] az6027: usb out operation failed. (-71) [ 180.019866][ T8413] az6027: usb out operation failed. (-71) [ 180.025627][ T8413] stb0899_attach: Driver disabled by Kconfig [ 180.032791][ T8413] az6027: no front-end attached [ 180.032791][ T8413] [ 180.040643][ T8413] az6027: usb out operation failed. (-71) [ 180.046566][ T9] input: failed to attach handler kbd to device input27, error: -5 [ 180.057793][ T5170] xbox_remote 6-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 180.058571][ T8413] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 180.073761][ T9] usb 6-1: USB disconnect, device number 18 [ 180.084236][ T8413] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 180.097215][ T8413] dvb-usb: schedule remote query interval to 400 msecs. [ 180.099870][ T8916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.104160][ T8413] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 180.107045][ T8413] usb 5-1: USB disconnect, device number 17 [ 180.158354][ T8916] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.174532][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.181742][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.221614][ T8413] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 180.227594][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.237199][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.572912][ T8916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.760829][ T30] audit: type=1400 audit(1747872524.704:601): avc: denied { bind } for pid=9007 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.873954][ T8916] veth0_vlan: entered promiscuous mode [ 180.879895][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 180.901381][ T8916] veth1_vlan: entered promiscuous mode [ 180.935933][ T8916] veth0_macvtap: entered promiscuous mode [ 180.945713][ T8916] veth1_macvtap: entered promiscuous mode [ 180.962599][ T8916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.987330][ T8916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.007445][ T8916] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.016181][ T8916] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.025120][ T8916] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.036742][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 181.037730][ T8916] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.066354][ T9] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 181.088837][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.100343][ T9] usb 6-1: Product: syz [ 181.107637][ T9] usb 6-1: Manufacturer: syz [ 181.112504][ T9] usb 6-1: SerialNumber: syz [ 181.124691][ T9] usb 6-1: config 0 descriptor?? [ 181.139971][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.148817][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.183690][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.193057][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.335579][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 182.176806][ T8400] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 182.326928][ T8400] usb 3-1: Using ep0 maxpacket: 8 [ 182.335039][ T8400] usb 3-1: config index 0 descriptor too short (expected 6418, got 18) [ 182.343903][ T9] gspca_sunplus: reg_w_riv err -71 [ 182.349505][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 182.359903][ T8400] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 182.369619][ T9] usb 6-1: USB disconnect, device number 19 [ 182.376443][ T8400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.386954][ T8400] usb 3-1: Product: syz [ 182.391156][ T8400] usb 3-1: Manufacturer: syz [ 182.395729][ T8400] usb 3-1: SerialNumber: syz [ 182.401923][ T8400] usb 3-1: config 0 descriptor?? [ 182.488912][ T3529] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.618074][ T8400] peak_usb 3-1:0.0: PEAK-System PCAN-USB X6 v125 fw v93.0.0 (2 channels) [ 182.792929][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.802417][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.810882][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.821133][ T8400] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 182.829041][ T8400] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 182.829079][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.835822][ T8400] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 182.856007][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.887128][ T8413] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 182.930524][ T8400] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 182.954665][ T9042] SELinux: ebitmap start bit (6619172) is not a multiple of the map unit size (64) [ 182.973386][ T9042] SELinux: failed to load policy [ 183.058258][ T8400] usb 3-1: USB disconnect, device number 22 [ 183.068532][ T8413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.082422][ T8413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.095678][ T8413] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.105856][ T8413] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 183.114885][ T8413] usb 5-1: Manufacturer: syz [ 183.127990][ T8413] usb 5-1: config 0 descriptor?? [ 183.145043][ T8413] hub 5-1:0.0: USB hub found [ 183.181588][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 183.213360][ T30] audit: type=1400 audit(1747872527.154:602): avc: denied { write } for pid=9053 comm="syz.5.1223" path="socket:[30340]" dev="sockfs" ino=30340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 183.349699][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.357070][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.364541][ T9039] bridge_slave_0: entered allmulticast mode [ 183.370643][ T8413] hub 5-1:0.0: 1 port detected [ 183.377364][ T9039] bridge_slave_0: entered promiscuous mode [ 183.385832][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.393065][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.400791][ T9039] bridge_slave_1: entered allmulticast mode [ 183.409724][ T9039] bridge_slave_1: entered promiscuous mode [ 183.475623][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.489163][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.624751][ T3529] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.723427][ T9039] team0: Port device team_slave_0 added [ 183.732489][ T9039] team0: Port device team_slave_1 added [ 183.896013][ T3529] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.921340][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.953740][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.016815][ T8413] hub 5-1:0.0: activate --> -90 [ 184.031063][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.091014][ T3529] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.114487][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.123579][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.161105][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.314523][ T9039] hsr_slave_0: entered promiscuous mode [ 184.325473][ T9039] hsr_slave_1: entered promiscuous mode [ 184.335964][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.345710][ T9039] Cannot create hsr debugfs directory [ 184.423125][ T8413] usb 5-1-port1: cannot reset (err = -71) [ 184.423825][ T5864] usb 5-1: USB disconnect, device number 18 [ 184.450453][ T8413] usb 5-1-port1: attempt power cycle [ 184.497323][ T9087] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 184.509447][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 184.666268][ T3529] bridge_slave_1: left allmulticast mode [ 184.672598][ T3529] bridge_slave_1: left promiscuous mode [ 184.678597][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.697460][ T3529] bridge_slave_0: left allmulticast mode [ 184.711899][ T3529] bridge_slave_0: left promiscuous mode [ 184.727345][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.923343][ T5812] Bluetooth: hci0: command tx timeout [ 185.089622][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 185.143250][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 185.343928][ T3529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.356091][ T3529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.366305][ T3529] bond0 (unregistering): Released all slaves [ 185.881652][ T3529] hsr_slave_0: left promiscuous mode [ 185.944354][ T3529] hsr_slave_1: left promiscuous mode [ 185.963473][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.997314][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.029633][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.056830][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.173826][ T3529] veth1_macvtap: left promiscuous mode [ 186.191394][ T3529] veth0_macvtap: left promiscuous mode [ 186.214156][ T3529] veth1_vlan: left promiscuous mode [ 186.234740][ T3529] veth0_vlan: left promiscuous mode [ 186.413412][ T30] audit: type=1326 audit(1747872530.354:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.4.1258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f956c98e969 code=0x0 [ 186.436779][ T5864] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 186.599446][ T5864] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.612656][ T5864] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.622587][ T5864] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.631894][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.646344][ T9136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.657053][ T5864] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.709163][ T3529] team0 (unregistering): Port device team_slave_1 removed [ 186.747458][ T3529] team0 (unregistering): Port device team_slave_0 removed [ 186.892630][ T9] usb 3-1: USB disconnect, device number 23 [ 186.997010][ T5812] Bluetooth: hci0: command tx timeout [ 187.186258][ T9150] SELinux: unknown common 2 [ 187.198639][ T9150] SELinux: failed to load policy [ 187.293184][ T9039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 187.322166][ T9039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 187.339782][ T9039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.352919][ T9039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.523316][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.550900][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.558643][ T8400] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 187.587527][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.594721][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.605460][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.612605][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.724730][ T8400] usb 6-1: Using ep0 maxpacket: 8 [ 187.747316][ T8400] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 187.759759][ T9039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.776798][ T8400] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 187.779951][ T9039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.815985][ T8400] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.833934][ T8400] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.868466][ T8400] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.895153][ T8400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.042381][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.089040][ T9178] netlink: 'syz.4.1267': attribute type 4 has an invalid length. [ 188.110559][ T9178] netlink: 'syz.4.1267': attribute type 4 has an invalid length. [ 188.126123][ T30] audit: type=1400 audit(1747872532.054:604): avc: denied { relabelfrom } for pid=9180 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 188.142843][ T8400] usb 6-1: GET_CAPABILITIES returned 0 [ 188.158339][ T8400] usbtmc 6-1:16.0: can't read capabilities [ 188.176769][ T30] audit: type=1400 audit(1747872532.054:605): avc: denied { relabelto } for pid=9180 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 188.264927][ T9187] loop7: detected capacity change from 0 to 16384 [ 188.341757][ T9187] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 188.370465][ T9187] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 188.379925][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.389185][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.391404][ T9039] veth0_vlan: entered promiscuous mode [ 188.401242][ T8413] usb 6-1: USB disconnect, device number 20 [ 188.404057][ T9187] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.421576][ T9187] Buffer I/O error on dev loop7, logical block 1312, async page read [ 188.432308][ T9039] veth1_vlan: entered promiscuous mode [ 188.442422][ T9187] I/O error, dev loop7, sector 10504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.457561][ T9187] Buffer I/O error on dev loop7, logical block 1313, async page read [ 188.463669][ T9039] veth0_macvtap: entered promiscuous mode [ 188.478930][ T9187] I/O error, dev loop7, sector 10512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.479838][ T9039] veth1_macvtap: entered promiscuous mode [ 188.488832][ T9187] Buffer I/O error on dev loop7, logical block 1314, async page read [ 188.502441][ T8400] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 188.508690][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.511176][ T9187] I/O error, dev loop7, sector 10520 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.528642][ T9187] Buffer I/O error on dev loop7, logical block 1315, async page read [ 188.529960][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.539015][ T9187] I/O error, dev loop7, sector 10528 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.548839][ T9039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.564193][ T9187] Buffer I/O error on dev loop7, logical block 1316, async page read [ 188.565722][ T9039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.573049][ T9187] I/O error, dev loop7, sector 10536 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.583987][ T9039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.591095][ T9187] Buffer I/O error on dev loop7, logical block 1317, async page read [ 188.603216][ T9039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.616199][ T9187] I/O error, dev loop7, sector 10544 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.627121][ T9187] Buffer I/O error on dev loop7, logical block 1318, async page read [ 188.639606][ T9187] I/O error, dev loop7, sector 10552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.649486][ T9187] Buffer I/O error on dev loop7, logical block 1319, async page read [ 188.658409][ T9187] Buffer I/O error on dev loop7, logical block 1320, async page read [ 188.675936][ T9187] Buffer I/O error on dev loop7, logical block 1321, async page read [ 188.689233][ T8400] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.700962][ T8400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.713419][ T8400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.723386][ T8400] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.736938][ T8400] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.746024][ T8400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.750685][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.756382][ T8400] usb 3-1: config 0 descriptor?? [ 188.766898][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.826045][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.834004][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.222305][ T8400] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 189.231208][ T8400] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 189.249388][ T8400] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 189.287213][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 189.446933][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 189.459662][ T9] usb 5-1: config 0 has no interfaces? [ 189.465195][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.475275][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.485622][ T9] usb 5-1: config 0 descriptor?? [ 189.539237][ T9] usb 3-1: USB disconnect, device number 24 [ 189.687514][ T5812] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 189.704409][ T24] usb 5-1: USB disconnect, device number 23 [ 190.046209][ T1158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.200601][ T9216] wireguard0: entered promiscuous mode [ 190.206093][ T9216] wireguard0: entered allmulticast mode [ 190.461143][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.470637][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.479473][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.487883][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.496451][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.503658][ T30] audit: type=1400 audit(1747872534.444:606): avc: denied { mounton } for pid=9225 comm="syz.4.1284" path="/file0" dev="ramfs" ino=31754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 190.525604][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.820108][ T9222] chnl_net:caif_netlink_parms(): no params data found [ 190.951857][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.959054][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.966164][ T9222] bridge_slave_0: entered allmulticast mode [ 190.973052][ T9222] bridge_slave_0: entered promiscuous mode [ 190.982820][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.990655][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.998376][ T9222] bridge_slave_1: entered allmulticast mode [ 191.005115][ T9222] bridge_slave_1: entered promiscuous mode [ 191.028875][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.039832][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.069041][ T9222] team0: Port device team_slave_0 added [ 191.076389][ T9222] team0: Port device team_slave_1 added [ 191.100162][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.107235][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.133096][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.139254][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.149873][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 191.195731][ T1158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.218869][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.225852][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.254289][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.290142][ T30] audit: type=1400 audit(1747872535.234:607): avc: denied { mounton } for pid=9258 comm="syz.5.1296" path="/178/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 191.328031][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 191.343790][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 191.353099][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.363443][ T9222] hsr_slave_0: entered promiscuous mode [ 191.369623][ T9] usb 5-1: Product: syz [ 191.373799][ T9] usb 5-1: Manufacturer: syz [ 191.379610][ T9222] hsr_slave_1: entered promiscuous mode [ 191.385782][ T9222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.393653][ T9] usb 5-1: SerialNumber: syz [ 191.402627][ T9] usb 5-1: config 0 descriptor?? [ 191.410645][ T9222] Cannot create hsr debugfs directory [ 191.419433][ T9] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 191.554398][ T1158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.644287][ T1158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.822071][ T1158] bridge_slave_1: left allmulticast mode [ 191.828502][ T1158] bridge_slave_1: left promiscuous mode [ 191.834399][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.846484][ T1158] bridge_slave_0: left allmulticast mode [ 191.861000][ T1158] bridge_slave_0: left promiscuous mode [ 191.868948][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.046871][ T8412] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 192.063462][ T9] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 192.073952][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 192.084796][ T9] usb 5-1: USB disconnect, device number 24 [ 192.203306][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.210064][ T8412] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 192.222143][ T8412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.231046][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.232572][ T8412] usb 6-1: config 0 descriptor?? [ 192.246036][ T1158] bond0 (unregistering): Released all slaves [ 192.247803][ T8412] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 192.597160][ T5812] Bluetooth: hci0: command tx timeout [ 192.640507][ T1158] hsr_slave_0: left promiscuous mode [ 192.643694][ T30] audit: type=1400 audit(1747872536.584:608): avc: denied { read } for pid=9288 comm="syz.7.1310" path="socket:[31357]" dev="sockfs" ino=31357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.687287][ T1158] hsr_slave_1: left promiscuous mode [ 192.689469][ T30] audit: type=1400 audit(1747872536.614:609): avc: denied { setopt } for pid=9288 comm="syz.7.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.699194][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.726658][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.741118][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.751040][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.769210][ T1158] veth1_macvtap: left promiscuous mode [ 192.774757][ T1158] veth0_macvtap: left promiscuous mode [ 192.781087][ T1158] veth1_vlan: left promiscuous mode [ 192.786418][ T1158] veth0_vlan: left promiscuous mode [ 192.806979][ T8400] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 192.967030][ T8400] usb 3-1: Using ep0 maxpacket: 16 [ 192.986310][ T8400] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 193.002510][ T8400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.015173][ T8400] usb 3-1: config 0 descriptor?? [ 193.026654][ T8400] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 193.080125][ T8412] usb 6-1: USB disconnect, device number 21 [ 193.205845][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 193.253466][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 193.650014][ T8397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8397 comm=kworker/1:9 [ 193.665694][ T9299] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 193.719308][ T5812] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 193.733792][ T5812] Bluetooth: hci2: Injecting HCI hardware error event [ 193.742306][ T9222] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.742443][ T5812] Bluetooth: hci2: hardware error 0x00 [ 193.788552][ T9222] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.818948][ T9222] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 193.842797][ T9222] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 193.883044][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.890317][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.942279][ T30] audit: type=1400 audit(1747872537.884:610): avc: denied { sqpoll } for pid=9309 comm="syz.4.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.038217][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.062733][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.090991][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.098140][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.132775][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.140042][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.248132][ T8400] gspca_sonixj: reg_w1 err -71 [ 194.267265][ T8400] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 194.294828][ T8400] usb 3-1: USB disconnect, device number 25 [ 194.306323][ T9322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.363460][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.612583][ T9222] veth0_vlan: entered promiscuous mode [ 194.630449][ T9222] veth1_vlan: entered promiscuous mode [ 194.666639][ T9222] veth0_macvtap: entered promiscuous mode [ 194.676333][ T9222] veth1_macvtap: entered promiscuous mode [ 194.682268][ T5815] Bluetooth: hci0: command tx timeout [ 194.693522][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.709843][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.733814][ T9338] loop2: detected capacity change from 0 to 7 [ 194.753405][ T9222] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.762479][ T9338] Dev loop2: unable to read RDB block 7 [ 194.770594][ T9338] loop2: unable to read partition table [ 194.776506][ T9338] loop2: partition table beyond EOD, truncated [ 194.783218][ T9222] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.806758][ T9338] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.812503][ T9222] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.855670][ T9222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.998881][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.027683][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.064350][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.072402][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.165925][ T30] audit: type=1400 audit(1747872539.104:611): avc: denied { setattr } for pid=9357 comm="syz.4.1335" name="bus" dev="tmpfs" ino=1668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.287060][ T8410] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 195.342862][ T9364] loop2: detected capacity change from 0 to 7 [ 195.352762][ T9364] Dev loop2: unable to read RDB block 7 [ 195.359195][ T9364] loop2: unable to read partition table [ 195.364920][ T9364] loop2: partition table beyond EOD, truncated [ 195.371203][ T9364] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.458805][ T8410] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 195.468156][ T8415] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 195.480722][ T8410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.495457][ T8410] usb 3-1: config 0 descriptor?? [ 195.639467][ T8415] usb 5-1: Using ep0 maxpacket: 32 [ 195.654173][ T8415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.672452][ T8415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.682747][ T8415] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.700619][ T8415] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 195.730090][ T8415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.751358][ T8415] usb 5-1: config 0 descriptor?? [ 195.796796][ T5812] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 195.948654][ T8410] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 195.958284][ T8410] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 196.150751][ T8410] [drm:udl_init] *ERROR* Selecting channel failed [ 196.171844][ T8410] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 196.187917][ T8410] [drm] Initialized udl on minor 2 [ 196.201299][ T8410] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 196.214153][ T8415] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0018/input/input29 [ 196.226147][ T8410] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 196.234845][ T8400] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 196.248857][ T8410] usb 3-1: USB disconnect, device number 26 [ 196.255647][ T8400] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 196.265659][ T8415] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0018/input/input30 [ 196.277436][ T8400] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 196.311092][ T8415] kye 0003:0458:5011.0018: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 196.462769][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.472767][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.532362][ T58] usb 5-1: USB disconnect, device number 25 [ 196.613561][ T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.460663][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.474633][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.482364][ T8410] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 197.492494][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.500378][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.511918][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.658682][ T8410] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 197.690913][ T8410] usb 5-1: config 0 has no interface number 0 [ 197.712566][ T8410] usb 5-1: config 0 interface 41 has no altsetting 0 [ 197.751043][ T8410] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 197.773645][ T8410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.792081][ T8410] usb 5-1: Product: syz [ 197.796286][ T8410] usb 5-1: Manufacturer: syz [ 197.801219][ T8410] usb 5-1: SerialNumber: syz [ 197.809859][ T8410] usb 5-1: config 0 descriptor?? [ 197.829109][ T9438] Bluetooth: MGMT ver 1.23 [ 197.833608][ T9438] Bluetooth: hci0: unsupported parameter 2327 [ 197.846138][ T9422] chnl_net:caif_netlink_parms(): no params data found [ 197.853185][ T9438] Bluetooth: hci0: unsupported parameter 256 [ 197.866737][ T9438] Bluetooth: hci0: unsupported parameter 2327 [ 197.872907][ T9438] Bluetooth: hci0: unsupported parameter 256 [ 197.932382][ T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.959959][ T9442] netlink: 'syz.7.1368': attribute type 1 has an invalid length. [ 198.013469][ T9442] bond1: entered promiscuous mode [ 198.022907][ T9442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.050115][ T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.114138][ T9448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.121617][ T9448] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 198.135328][ T9448] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 198.159663][ T9448] bond1: (slave wireguard0): making interface the new active one [ 198.170622][ T9448] wireguard0: entered promiscuous mode [ 198.177928][ T9448] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 198.251654][ T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.375632][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.386574][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.395744][ T9422] bridge_slave_0: entered allmulticast mode [ 198.413761][ T9422] bridge_slave_0: entered promiscuous mode [ 198.439549][ T8410] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 198.440142][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.461250][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.480890][ T9422] bridge_slave_1: entered allmulticast mode [ 198.505629][ T9422] bridge_slave_1: entered promiscuous mode [ 198.638553][ T9422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.726397][ T9422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.823567][ T9422] team0: Port device team_slave_0 added [ 198.855210][ T9422] team0: Port device team_slave_1 added [ 198.934168][ T63] bridge_slave_1: left allmulticast mode [ 198.942730][ T63] bridge_slave_1: left promiscuous mode [ 198.965929][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.992767][ T63] bridge_slave_0: left allmulticast mode [ 199.016999][ T63] bridge_slave_0: left promiscuous mode [ 199.033948][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.556803][ T5815] Bluetooth: hci0: command tx timeout [ 199.890296][ T30] audit: type=1400 audit(1747872543.834:612): avc: denied { read } for pid=9482 comm="syz.2.1380" path="socket:[33431]" dev="sockfs" ino=33431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.926205][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.936417][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.946156][ T63] bond0 (unregistering): Released all slaves [ 199.970072][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.977417][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.005737][ T9422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.022001][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.029690][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.058457][ T9422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.114811][ T9422] hsr_slave_0: entered promiscuous mode [ 200.118006][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 200.122844][ T9422] hsr_slave_1: entered promiscuous mode [ 200.133869][ T9422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.144453][ T9422] Cannot create hsr debugfs directory [ 200.247916][ T63] hsr_slave_0: left promiscuous mode [ 200.253939][ T63] hsr_slave_1: left promiscuous mode [ 200.259947][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.267568][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.272307][ T971] usb 5-1: USB disconnect, device number 26 [ 200.291890][ T24] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 200.301375][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.302338][ T24] usb 6-1: config 0 has no interface number 0 [ 200.317069][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.319876][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.330729][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.344050][ T24] usb 6-1: config 0 descriptor?? [ 200.352424][ T24] cp210x 6-1:0.2: cp210x converter detected [ 200.367720][ T63] veth1_macvtap: left promiscuous mode [ 200.373333][ T63] veth0_macvtap: left promiscuous mode [ 200.379434][ T63] veth1_vlan: left promiscuous mode [ 200.396899][ T63] veth0_vlan: left promiscuous mode [ 200.757149][ T24] cp210x 6-1:0.2: failed to get vendor val 0x000e size 3: -32 [ 200.757786][ T8410] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 200.787945][ T30] audit: type=1400 audit(1747872544.734:613): avc: denied { watch_reads } for pid=9494 comm="syz.2.1385" path="pipe:[33869]" dev="pipefs" ino=33869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 200.956187][ T8410] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.971929][ T8410] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.980962][ T24] cp210x 6-1:0.2: GPIO initialisation failed: -19 [ 200.988584][ T63] team0 (unregistering): Port device team_slave_1 removed [ 200.997890][ T8410] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.999522][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 201.022186][ T8410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.030515][ T8410] usb 5-1: SerialNumber: syz [ 201.030694][ T30] audit: type=1400 audit(1747872544.974:614): avc: denied { listen } for pid=9498 comm="syz.2.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.059113][ T30] audit: type=1400 audit(1747872544.994:615): avc: denied { accept } for pid=9498 comm="syz.2.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.089036][ T63] team0 (unregistering): Port device team_slave_0 removed [ 201.146280][ T30] audit: type=1400 audit(1747872545.084:616): avc: denied { mounton } for pid=9501 comm="syz.2.1388" path="/295/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 201.240893][ T971] usb 6-1: USB disconnect, device number 22 [ 201.256250][ T971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.264544][ T971] cp210x 6-1:0.2: device disconnected [ 201.267575][ T8410] usb 5-1: 0:2 : does not exist [ 201.302257][ T8410] usb 5-1: USB disconnect, device number 27 [ 201.641607][ T5815] Bluetooth: hci0: command tx timeout [ 201.834864][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1395'. [ 201.944065][ T30] audit: type=1400 audit(1747872545.884:617): avc: denied { connect } for pid=9526 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.149463][ T9422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.160250][ T9422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.173763][ T9422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.188186][ T9422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.291146][ T9422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.302409][ T9533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.320703][ T9422] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.333058][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.340180][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.363636][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.370845][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.433037][ T9535] pim6reg1: entered promiscuous mode [ 202.447652][ T9535] pim6reg1: entered allmulticast mode [ 202.456194][ T9537] input: syz1 as /devices/virtual/input/input31 [ 202.525714][ T9540] syz_tun: entered allmulticast mode [ 202.545918][ T9539] syz_tun: left allmulticast mode [ 202.683677][ T9422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.837881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 202.931472][ T9556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.017952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.198414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.267201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.323798][ T9422] veth0_vlan: entered promiscuous mode [ 203.346942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.373067][ T9422] veth1_vlan: entered promiscuous mode [ 203.373732][ T30] audit: type=1326 audit(1747872547.314:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.5.1416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f877378e969 code=0x0 [ 203.431106][ T9578] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.1414'. [ 203.588866][ T9422] veth0_macvtap: entered promiscuous mode [ 203.611675][ T9422] veth1_macvtap: entered promiscuous mode [ 203.717212][ T5815] Bluetooth: hci0: command tx timeout [ 203.731157][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.773341][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.829141][ T9422] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.872397][ T9422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.913739][ T9422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.956164][ T9422] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.135440][ T30] audit: type=1400 audit(1747872548.074:619): avc: denied { ioctl } for pid=9593 comm="syz.4.1422" path="socket:[35111]" dev="sockfs" ino=35111 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.175210][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.229192][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.268651][ T9598] Invalid ELF header magic: != ELF [ 204.270918][ T30] audit: type=1400 audit(1747872548.214:620): avc: denied { module_load } for pid=9597 comm="syz.4.1424" path="/333/bus" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 204.339287][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.368603][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.404905][ T30] audit: type=1400 audit(1747872548.344:621): avc: denied { create } for pid=9604 comm="syz.5.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.831298][ T9625] Invalid ELF header magic: != ELF [ 204.852383][ T9625] Invalid ELF header magic: != ELF [ 204.959117][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 204.959147][ T30] audit: type=1400 audit(1747872548.904:623): avc: denied { read } for pid=9630 comm="syz.5.1438" path="socket:[34463]" dev="sockfs" ino=34463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.059647][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 205.366808][ T8410] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 205.407948][ T9653] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 205.476489][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1450'. [ 205.526964][ T8410] usb 6-1: Using ep0 maxpacket: 32 [ 205.542898][ T8410] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.555587][ T8410] usb 6-1: config 0 has no interface number 0 [ 205.566605][ T8410] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.584982][ T8410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.595737][ T8410] usb 6-1: Product: syz [ 205.604665][ T8410] usb 6-1: Manufacturer: syz [ 205.609414][ T8410] usb 6-1: SerialNumber: syz [ 205.630207][ T8410] usb 6-1: config 0 descriptor?? [ 205.648374][ T8410] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 205.871635][ T1158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.013752][ T8410] usb 6-1: qt2_attach - failed to power on unit: -71 [ 206.039860][ T8410] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 206.057074][ T8410] usb 6-1: USB disconnect, device number 23 [ 206.541972][ T1158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.615289][ T30] audit: type=1400 audit(1747872550.554:624): avc: denied { execmem } for pid=9676 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 206.688387][ T1158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.779765][ T1158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.794330][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1461'. [ 206.864183][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1461'. [ 206.912445][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.922452][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.931270][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.941806][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.962034][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.997699][ T1158] bridge_slave_1: left allmulticast mode [ 207.003513][ T1158] bridge_slave_1: left promiscuous mode [ 207.012102][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.022619][ T1158] bridge_slave_0: left allmulticast mode [ 207.033156][ T1158] bridge_slave_0: left promiscuous mode [ 207.039008][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.077918][ T58] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 207.238953][ T58] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.248253][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.264825][ T58] usb 3-1: config 0 descriptor?? [ 207.273081][ T58] cp210x 3-1:0.0: cp210x converter detected [ 207.345733][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.356361][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.366062][ T1158] bond0 (unregistering): Released all slaves [ 207.614872][ T9691] chnl_net:caif_netlink_parms(): no params data found [ 207.642511][ T1158] hsr_slave_0: left promiscuous mode [ 207.650484][ T1158] hsr_slave_1: left promiscuous mode [ 207.656213][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.665246][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.672722][ T30] audit: type=1400 audit(1747872551.614:625): avc: denied { ioctl } for pid=9703 comm="syz.4.1466" path="socket:[34652]" dev="sockfs" ino=34652 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.699589][ T58] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 207.709579][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.717172][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.731093][ T58] usb 3-1: cp210x converter now attached to ttyUSB0 [ 207.763532][ T1158] veth1_macvtap: left promiscuous mode [ 207.769254][ T1158] veth0_macvtap: left promiscuous mode [ 207.774874][ T1158] veth1_vlan: left promiscuous mode [ 207.780703][ T1158] veth0_vlan: left promiscuous mode [ 207.921304][ T58] usb 3-1: USB disconnect, device number 27 [ 207.937452][ T58] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 207.956165][ T58] cp210x 3-1:0.0: device disconnected [ 208.133198][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 208.176443][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 208.587009][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.595160][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.602967][ T9691] bridge_slave_0: entered allmulticast mode [ 208.610579][ T9691] bridge_slave_0: entered promiscuous mode [ 208.619208][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.626773][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.633979][ T9691] bridge_slave_1: entered allmulticast mode [ 208.641385][ T9691] bridge_slave_1: entered promiscuous mode [ 208.760478][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.813407][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.920444][ T9691] team0: Port device team_slave_0 added [ 208.943497][ T9691] team0: Port device team_slave_1 added [ 208.996887][ T5812] Bluetooth: hci0: command tx timeout [ 209.038812][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.045795][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.087985][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.100309][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.107364][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.142492][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.165621][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 209.172136][ T5812] Bluetooth: hci5: command 0x1003 tx timeout [ 209.407725][ T9691] hsr_slave_0: entered promiscuous mode [ 209.415118][ T9691] hsr_slave_1: entered promiscuous mode [ 209.433958][ T9691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.457294][ T9691] Cannot create hsr debugfs directory [ 209.527378][ T8415] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 209.679559][ T8415] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 209.690745][ T8415] usb 6-1: config 0 interface 0 has no altsetting 0 [ 209.700447][ T8415] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.709623][ T8415] usb 6-1: New USB device strings: Mfr=23, Product=2, SerialNumber=3 [ 209.717954][ T8415] usb 6-1: Product: syz [ 209.722109][ T8415] usb 6-1: Manufacturer: syz [ 209.728674][ T8415] usb 6-1: SerialNumber: syz [ 209.734781][ T8415] usb 6-1: config 0 descriptor?? [ 209.742213][ T8415] usb 6-1: selecting invalid altsetting 0 [ 209.843186][ T9691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.860495][ T9691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.870151][ T9691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.881118][ T9691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.942449][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.988424][ T9691] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.003358][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.003775][ T8410] usb 6-1: USB disconnect, device number 24 [ 210.010548][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.037675][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.044865][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.092457][ T9691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.212399][ T9759] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 210.272817][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.453355][ T9691] veth0_vlan: entered promiscuous mode [ 210.464103][ T9691] veth1_vlan: entered promiscuous mode [ 210.485845][ T9691] veth0_macvtap: entered promiscuous mode [ 210.494594][ T9691] veth1_macvtap: entered promiscuous mode [ 210.509026][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.522095][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.532215][ T9691] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.541527][ T9691] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.550404][ T971] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 210.558565][ T9691] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.568285][ T9691] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.577118][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 210.642379][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.651276][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.673057][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.682419][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.717558][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 210.736592][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.750798][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 210.756136][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.766506][ T971] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 210.778628][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.788057][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 210.801385][ T971] usb 3-1: config 0 descriptor?? [ 210.809443][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 210.819419][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.827632][ T24] usb 5-1: Product: syz [ 210.831824][ T24] usb 5-1: Manufacturer: syz [ 210.836404][ T24] usb 5-1: SerialNumber: syz [ 210.843830][ T24] usb 5-1: config 0 descriptor?? [ 210.849348][ T9766] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 210.860868][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.866859][ T8410] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 211.028699][ T8410] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.042429][ T8410] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.051593][ T8410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.067147][ T8410] usb 6-1: Product: syz [ 211.071431][ T8410] usb 6-1: Manufacturer: syz [ 211.076021][ T8410] usb 6-1: SerialNumber: syz [ 211.101030][ T9766] binder: 9765:9766 ioctl c0306201 0 returned -14 [ 211.109034][ T9766] binder: 9765:9766 ioctl c0046209 0 returned -22 [ 211.119546][ T58] usb 5-1: USB disconnect, device number 28 [ 211.214817][ T971] hid (null): unknown global tag 0xe [ 211.228577][ T971] macally 0003:060B:0001.0019: unknown main item tag 0x1 [ 211.235709][ T971] macally 0003:060B:0001.0019: unknown global tag 0xe [ 211.242695][ T971] macally 0003:060B:0001.0019: item 0 0 1 14 parsing failed [ 211.250719][ T971] macally 0003:060B:0001.0019: probe with driver macally failed with error -22 [ 211.432061][ T971] usb 3-1: USB disconnect, device number 28 [ 211.705947][ T9776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.017971][ T971] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 212.093964][ T8410] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 212.100599][ T8410] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 212.188208][ T971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.200526][ T971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.210927][ T971] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.220100][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.228182][ T971] usb 5-1: SerialNumber: syz [ 212.294746][ T8410] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 212.305352][ T8410] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 212.320839][ T8410] usb 6-1: USB disconnect, device number 25 [ 212.328495][ T8410] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 212.374138][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.447505][ T971] usb 5-1: 0:2 : does not exist [ 212.469665][ T971] usb 5-1: USB disconnect, device number 29 [ 213.541410][ T9811] input: syz0 as /devices/virtual/input/input32 [ 213.560311][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.569856][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.582067][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.594196][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.609240][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.740349][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.889001][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.014571][ T30] audit: type=1400 audit(1747872557.954:626): avc: denied { listen } for pid=9825 comm="syz.7.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.095993][ T30] audit: type=1400 audit(1747872557.994:627): avc: denied { accept } for pid=9825 comm="syz.7.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.098693][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.377150][ T8400] libceph: connect (1)[c::]:6789 error -97 [ 214.385456][ T8400] libceph: mon0 (1)[c::]:6789 connect error [ 214.454868][ T24] libceph: connect (1)[b::]:6789 error -97 [ 214.468651][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 214.581355][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 214.601841][ T36] bridge_slave_1: left allmulticast mode [ 214.607625][ T36] bridge_slave_1: left promiscuous mode [ 214.613555][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.623482][ T36] bridge_slave_0: left allmulticast mode [ 214.631423][ T36] bridge_slave_0: left promiscuous mode [ 214.637621][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.697107][ T8400] libceph: connect (1)[c::]:6789 error -97 [ 214.703711][ T8400] libceph: mon0 (1)[c::]:6789 connect error [ 214.748312][ T24] libceph: connect (1)[b::]:6789 error -97 [ 214.754479][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 215.064199][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.067156][ T24] Process accounting resumed [ 215.084805][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.101645][ T36] bond0 (unregistering): Released all slaves [ 215.133711][ T9863] virtio-fs: tag not found [ 215.161283][ T9840] ceph: No mds server is up or the cluster is laggy [ 215.161383][ T9837] ceph: No mds server is up or the cluster is laggy [ 215.231514][ T8415] libceph: connect (1)[c::]:6789 error -97 [ 215.241583][ T8415] libceph: mon0 (1)[c::]:6789 connect error [ 215.386917][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.394075][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.416132][ T9813] bridge_slave_0: entered allmulticast mode [ 215.435533][ T9813] bridge_slave_0: entered promiscuous mode [ 215.453275][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1532'. [ 215.464967][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.472380][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.480407][ T9813] bridge_slave_1: entered allmulticast mode [ 215.488502][ T9813] bridge_slave_1: entered promiscuous mode [ 215.647075][ T5815] Bluetooth: hci0: command tx timeout [ 215.944443][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.010742][ T9891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.029847][ T9891] bridge0: port 3(bond2) entered blocking state [ 216.049905][ T9891] bridge0: port 3(bond2) entered disabled state [ 216.067419][ T9891] bond2: entered allmulticast mode [ 216.088442][ T9891] bond2: entered promiscuous mode [ 216.102274][ T9891] bridge0: port 3(bond2) entered blocking state [ 216.109853][ T9891] bridge0: port 3(bond2) entered forwarding state [ 216.145953][ T36] hsr_slave_0: left promiscuous mode [ 216.162751][ T36] hsr_slave_1: left promiscuous mode [ 216.181211][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.208045][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.221785][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.231426][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.270532][ T36] veth1_macvtap: left promiscuous mode [ 216.276302][ T36] veth0_macvtap: left promiscuous mode [ 216.282760][ T971] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 216.292305][ T36] veth1_vlan: left promiscuous mode [ 216.297889][ T36] veth0_vlan: left promiscuous mode [ 216.450516][ T971] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.479174][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.511824][ T971] usb 3-1: config 0 descriptor?? [ 216.532464][ T971] cp210x 3-1:0.0: cp210x converter detected [ 216.930127][ T8397] libceph: connect (1)[c::]:6789 error -101 [ 216.949300][ T971] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 216.958128][ T8397] libceph: mon0 (1)[c::]:6789 connect error [ 216.974977][ T8410] libceph: connect (1)[c::]:6789 error -101 [ 216.985106][ T971] usb 3-1: cp210x converter now attached to ttyUSB0 [ 216.995428][ T8410] libceph: mon0 (1)[c::]:6789 connect error [ 217.104532][ T36] team0 (unregistering): Port device team_slave_1 removed [ 217.149475][ T9920] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 217.170029][ T36] team0 (unregistering): Port device team_slave_0 removed [ 217.198514][ T8410] usb 3-1: USB disconnect, device number 29 [ 217.210554][ T8410] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.224641][ T8410] cp210x 3-1:0.0: device disconnected [ 217.232069][ T971] libceph: connect (1)[c::]:6789 error -101 [ 217.238435][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 217.267168][ T8415] libceph: connect (1)[c::]:6789 error -101 [ 217.281282][ T8415] libceph: mon0 (1)[c::]:6789 connect error [ 217.629852][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.656426][ T3529] bridge0: port 3(bond2) entered disabled state [ 217.716207][ T9813] team0: Port device team_slave_0 added [ 217.722306][ T5815] Bluetooth: hci0: command tx timeout [ 217.735787][ T9813] team0: Port device team_slave_1 added [ 217.757119][ T24] libceph: connect (1)[c::]:6789 error -101 [ 217.762800][ T9914] ceph: No mds server is up or the cluster is laggy [ 217.763316][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 217.770112][ T9909] ceph: No mds server is up or the cluster is laggy [ 217.801771][ T8410] libceph: connect (1)[c::]:6789 error -101 [ 217.813137][ T8410] libceph: mon0 (1)[c::]:6789 connect error [ 217.955325][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.002061][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.284258][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.301243][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.309936][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.368600][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.470162][ T9813] hsr_slave_0: entered promiscuous mode [ 218.476896][ T8410] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 218.507316][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1554'. [ 218.507459][ T9813] hsr_slave_1: entered promiscuous mode [ 218.533624][ T9813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.549945][ T9813] Cannot create hsr debugfs directory [ 218.561694][ T30] audit: type=1400 audit(1747872562.494:628): avc: denied { bind } for pid=9946 comm="syz.2.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.668562][ T8410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.687337][ T8410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.697717][ T8410] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.713169][ T8410] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.722489][ T8410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.771157][ T8410] usb 5-1: config 0 descriptor?? [ 218.822410][ T30] audit: type=1400 audit(1747872562.764:629): avc: denied { mount } for pid=9957 comm="syz.5.1559" name="/" dev="pstore" ino=3455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 218.846519][ T9958] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 218.902295][ T30] audit: type=1400 audit(1747872562.844:630): avc: denied { unmount } for pid=7040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 219.199999][ T9967] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 219.225252][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 219.230263][ T8410] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 219.251656][ T8410] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 219.529911][ T9813] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.548500][ T9976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.550192][ T9813] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.610518][ T9813] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.623279][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1566'. [ 219.651306][ T9813] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.684667][ T9981] loop4: detected capacity change from 0 to 524255232 [ 219.797060][ T5815] Bluetooth: hci0: command tx timeout [ 219.832750][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.858688][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.872075][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.879273][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.910521][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.917698][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.159319][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.600406][ T9999] team0 (unregistering): Port device team_slave_0 removed [ 220.640554][ T9999] team0 (unregistering): Port device team_slave_1 removed [ 220.865613][ T9813] veth0_vlan: entered promiscuous mode [ 220.901821][ T9813] veth1_vlan: entered promiscuous mode [ 220.920931][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 220.947069][T10025] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 220.969520][ T9813] veth0_macvtap: entered promiscuous mode [ 220.996158][T10025] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 221.011711][T10025] bond0: (slave netdevsim0): no link monitoring support [ 221.032794][T10025] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 221.108205][ T9813] veth1_macvtap: entered promiscuous mode [ 221.187624][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.212630][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.237827][ T9813] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.247820][ T9813] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.261295][ T9813] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.273495][ T9813] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.378557][ T8415] usb 5-1: USB disconnect, device number 30 [ 221.473228][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.481243][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.534782][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.560298][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.777063][ T8415] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 221.939880][ T8415] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 221.949138][ T8415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.957189][ T8415] usb 5-1: Product: syz [ 221.961425][ T8415] usb 5-1: Manufacturer: syz [ 221.965995][ T8415] usb 5-1: SerialNumber: syz [ 221.972034][ T8415] usb 5-1: config 0 descriptor?? [ 222.129725][ T971] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 222.143301][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.288353][ T971] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 222.297569][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.307725][ T971] usb 6-1: config 0 descriptor?? [ 222.330541][ C0] vcan0: j1939_tp_rxtimer: 0xffff888012992c00: rx timeout, send abort [ 222.663407][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.795820][ T8415] usb 5-1: f81604_write: reg: 105 data: 65 failed: -EPROTO [ 222.803288][ T8415] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 222.811016][ T8415] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 222.821284][ T8415] usb 5-1: USB disconnect, device number 31 [ 222.838811][ C0] vcan0: j1939_tp_rxtimer: 0xffff888012992c00: abort rx timeout. Force session deactivation [ 223.031796][T10042] SELinux: ebitmap start bit (6619172) is not a multiple of the map unit size (64) [ 223.049659][T10042] SELinux: failed to load policy [ 223.169472][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.183215][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.193275][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.203006][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.213993][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.221732][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.357722][T10050] bond0: (slave team0): Releasing backup interface [ 223.371525][T10050] team0 (unregistering): Port device team_slave_0 removed [ 223.381315][T10050] team0 (unregistering): Port device team_slave_1 removed [ 223.434367][ T30] audit: type=1400 audit(1747872567.374:631): avc: denied { execmod } for pid=10052 comm="syz.4.1591" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 223.462159][ T30] audit: type=1400 audit(1747872567.374:632): avc: denied { execute } for pid=10052 comm="syz.4.1591" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 223.518557][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.535590][ T971] usb 6-1: Cannot set autoneg [ 223.545516][ T971] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 223.598803][ T971] usb 6-1: USB disconnect, device number 26 [ 223.698590][T10055] netlink: 'syz.2.1592': attribute type 16 has an invalid length. [ 223.706643][T10055] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1592'. [ 223.804833][ T52] bridge_slave_1: left allmulticast mode [ 223.815691][ T52] bridge_slave_1: left promiscuous mode [ 223.836322][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.858988][ T52] bridge_slave_0: left allmulticast mode [ 223.864785][ T52] bridge_slave_0: left promiscuous mode [ 223.871064][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.147250][T10073] loop7: detected capacity change from 0 to 16384 [ 224.213195][T10073] blk_print_req_error: 35 callbacks suppressed [ 224.213211][T10073] I/O error, dev loop7, sector 10240 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 224.230628][T10073] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 224.241574][T10073] I/O error, dev loop7, sector 10240 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.251121][T10073] buffer_io_error: 1334 callbacks suppressed [ 224.251135][T10073] Buffer I/O error on dev loop7, logical block 1280, async page read [ 224.275655][T10073] I/O error, dev loop7, sector 10248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.285403][T10073] Buffer I/O error on dev loop7, logical block 1281, async page read [ 224.299222][T10073] I/O error, dev loop7, sector 10256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.311275][T10073] Buffer I/O error on dev loop7, logical block 1282, async page read [ 224.324993][T10073] I/O error, dev loop7, sector 10264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.350562][T10073] Buffer I/O error on dev loop7, logical block 1283, async page read [ 224.358816][T10073] I/O error, dev loop7, sector 10272 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.370781][T10073] Buffer I/O error on dev loop7, logical block 1284, async page read [ 224.379035][T10073] I/O error, dev loop7, sector 10280 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.388673][T10073] Buffer I/O error on dev loop7, logical block 1285, async page read [ 224.397677][T10073] I/O error, dev loop7, sector 10288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.408804][T10073] Buffer I/O error on dev loop7, logical block 1286, async page read [ 224.417152][T10073] I/O error, dev loop7, sector 10296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.426630][T10073] Buffer I/O error on dev loop7, logical block 1287, async page read [ 224.434823][T10073] Buffer I/O error on dev loop7, logical block 1288, async page read [ 224.444984][T10073] Buffer I/O error on dev loop7, logical block 1289, async page read [ 224.535581][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.556079][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.566402][ T52] bond0 (unregistering): Released all slaves [ 224.611873][T10047] chnl_net:caif_netlink_parms(): no params data found [ 224.705667][T10082] SELinux: failed to load policy [ 224.856017][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.864158][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.871390][T10047] bridge_slave_0: entered allmulticast mode [ 224.882689][T10047] bridge_slave_0: entered promiscuous mode [ 224.926597][ T52] hsr_slave_0: left promiscuous mode [ 224.938138][ T52] hsr_slave_1: left promiscuous mode [ 224.944157][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.951753][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.959832][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.967544][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.988313][ T52] veth1_macvtap: left promiscuous mode [ 224.993947][ T52] veth0_macvtap: left promiscuous mode [ 224.999773][ T52] veth1_vlan: left promiscuous mode [ 225.005142][ T52] veth0_vlan: left promiscuous mode [ 225.147046][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.160849][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.169378][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.177832][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.187663][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.238231][ T5815] Bluetooth: hci0: command tx timeout [ 225.461682][ T52] team0 (unregistering): Port device team_slave_1 removed [ 225.501236][ T52] team0 (unregistering): Port device team_slave_0 removed [ 225.811697][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.819202][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.826344][T10047] bridge_slave_1: entered allmulticast mode [ 225.834364][T10047] bridge_slave_1: entered promiscuous mode [ 225.906121][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.933634][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.009666][T10047] team0: Port device team_slave_0 added [ 226.027363][T10047] team0: Port device team_slave_1 added [ 226.140610][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.155169][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.192875][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.226531][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.275365][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.313936][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.477365][T10047] hsr_slave_0: entered promiscuous mode [ 226.487663][T10047] hsr_slave_1: entered promiscuous mode [ 226.493878][T10047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.530854][T10047] Cannot create hsr debugfs directory [ 226.896520][ T52] bond0: (slave netdevsim0): Releasing backup interface [ 226.984731][T10089] chnl_net:caif_netlink_parms(): no params data found [ 227.061538][T10115] loop7: detected capacity change from 0 to 16384 [ 227.242226][ T5815] Bluetooth: hci4: command tx timeout [ 227.320590][ T5815] Bluetooth: hci0: command tx timeout [ 227.421321][ T52] bridge_slave_1: left allmulticast mode [ 227.429503][ T52] bridge_slave_1: left promiscuous mode [ 227.435173][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.443899][ T52] bridge_slave_0: left allmulticast mode [ 227.449581][ T52] bridge_slave_0: left promiscuous mode [ 227.455245][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.698997][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.708522][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.719857][ T52] bond0 (unregistering): (slave bond2): Releasing backup interface [ 227.728251][ T52] bond0 (unregistering): Released all slaves [ 227.809488][ T52] bond1 (unregistering): Released all slaves [ 227.894042][ T52] bond2 (unregistering): Released all slaves [ 227.910987][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.918520][T10089] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.925703][T10089] bridge_slave_0: entered allmulticast mode [ 227.932816][T10089] bridge_slave_0: entered promiscuous mode [ 227.944219][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.951512][T10089] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.959138][T10089] bridge_slave_1: entered allmulticast mode [ 227.969694][T10089] bridge_slave_1: entered promiscuous mode [ 228.020333][T10089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.031388][T10089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.076597][T10089] team0: Port device team_slave_0 added [ 228.090493][T10089] team0: Port device team_slave_1 added [ 228.147909][T10089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.154877][T10089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.181852][T10089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.213821][T10089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.220856][T10089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.247518][T10089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.263204][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.272087][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.701352][T10047] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.721274][T10047] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.746164][T10047] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.764510][T10089] hsr_slave_0: entered promiscuous mode [ 228.771426][T10089] hsr_slave_1: entered promiscuous mode [ 228.778200][T10089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.786121][T10089] Cannot create hsr debugfs directory [ 228.793403][T10047] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.958475][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.983879][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.995614][ T52] IPVS: stop unused estimator thread 0... [ 229.003131][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.010227][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.025591][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.032699][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.185371][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.303904][T10089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.316812][ T5815] Bluetooth: hci4: command tx timeout [ 229.328603][T10089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.339122][T10089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.349794][T10089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.397287][ T5815] Bluetooth: hci0: command tx timeout [ 229.432240][T10089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.450000][T10089] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.467781][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.474934][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.493634][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.500773][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.545683][T10047] veth0_vlan: entered promiscuous mode [ 229.566357][T10047] veth1_vlan: entered promiscuous mode [ 229.600803][T10047] veth0_macvtap: entered promiscuous mode [ 229.611018][T10047] veth1_macvtap: entered promiscuous mode [ 229.645037][T10047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.669540][T10047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.695670][T10047] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.705220][T10047] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.718851][T10047] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.727935][T10047] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.784750][T10089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.808446][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.816474][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.853769][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.862590][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.892397][T10089] veth0_vlan: entered promiscuous mode [ 229.912775][T10089] veth1_vlan: entered promiscuous mode [ 229.974131][T10089] veth0_macvtap: entered promiscuous mode [ 229.983872][T10089] veth1_macvtap: entered promiscuous mode [ 229.999910][T10089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.014438][T10089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.025568][T10089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.034332][T10089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.044311][T10089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.053109][T10089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.112897][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.123467][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.142654][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.151498][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.620346][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.644086][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.715499][T10154] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.717462][ T8415] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 230.732018][T10154] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.732052][T10154] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.732076][T10154] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.783741][T10154] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.793054][T10154] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.802004][T10154] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.810875][T10154] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.820392][T10154] vxlan0: left promiscuous mode [ 230.907416][ T8415] usb 6-1: Using ep0 maxpacket: 8 [ 230.915394][ T8415] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 230.925894][ T8415] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.938596][ T8415] pvrusb2: Hardware description: Terratec Grabster AV400 [ 230.945640][ T8415] pvrusb2: ********** [ 230.950313][ T8415] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 230.960660][ T8415] pvrusb2: Important functionality might not be entirely working. [ 230.968498][ T8415] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 230.980315][ T8415] pvrusb2: ********** [ 231.142909][ T58] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 231.157446][ T2333] pvrusb2: Invalid write control endpoint [ 231.218379][ T1158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.268588][ T2333] pvrusb2: Invalid write control endpoint [ 231.275256][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 231.296758][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 231.304356][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 231.335088][ T2333] pvrusb2: Device being rendered inoperable [ 231.346055][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 231.353800][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 231.366069][ T58] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.375231][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.389914][ T58] usb 5-1: Product: syz [ 231.394125][ T58] usb 5-1: Manufacturer: syz [ 231.400559][ T2333] pvrusb2: Attached sub-driver cx25840 [ 231.406299][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 231.416534][ T58] usb 5-1: SerialNumber: syz [ 231.423149][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 231.434038][ T8400] usb 6-1: USB disconnect, device number 27 [ 231.442756][ T58] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.460505][ T30] audit: type=1400 audit(1747872575.404:633): avc: denied { firmware_load } for pid=971 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 231.501457][ T971] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 231.724878][ C1] usb 5-1: ath: unknown panic pattern! [ 231.928070][ T8400] usb 5-1: USB disconnect, device number 32 [ 232.231249][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.241677][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.251507][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.263507][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.273587][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.333232][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.347290][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.352783][ T30] audit: type=1400 audit(1747872576.294:634): avc: denied { read } for pid=10174 comm="syz.5.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.382370][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.404076][ T1158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.414783][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.424381][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.518565][ T971] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 232.525785][ T971] ath9k_htc: Failed to initialize the device [ 232.584076][T10184] [ 232.586448][T10184] ===================================================== [ 232.593384][T10184] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 232.600847][T10184] 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 Not tainted [ 232.607956][T10184] ----------------------------------------------------- [ 232.614884][T10184] syz.4.1629/10184 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 232.622609][T10184] ffffffff8e00c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 232.631258][T10184] [ 232.631258][T10184] and this task is already holding: [ 232.638625][T10184] ffff8881443a62a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 232.647350][T10184] which would create a new lock dependency: [ 232.653232][T10184] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 232.660816][T10184] [ 232.660816][T10184] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 232.670267][T10184] (&client->buffer_lock){..-.}-{3:3} [ 232.670297][T10184] [ 232.670297][T10184] ... which became SOFTIRQ-irq-safe at: [ 232.683372][T10184] lock_acquire+0x179/0x350 [ 232.685072][T10172] chnl_net:caif_netlink_parms(): no params data found [ 232.687970][T10184] _raw_spin_lock+0x2e/0x40 [ 232.687994][T10184] evdev_pass_values+0x10e/0x9b0 [ 232.688014][T10184] evdev_events+0x1bb/0x390 [ 232.688034][T10184] input_pass_values+0x6c4/0x890 [ 232.688056][T10184] input_handle_event+0xb29/0x14d0 [ 232.688078][T10184] input_event+0x83/0xb0 [ 232.688099][T10184] hidinput_hid_event+0xa10/0x2420 [ 232.688119][T10184] hid_process_event+0x4b7/0x5e0 [ 232.688133][T10184] hid_report_raw_event+0xa0a/0x1290 [ 232.688147][T10184] __hid_input_report.constprop.0+0x33f/0x450 [ 232.688161][T10184] hid_irq_in+0x35e/0x870 [ 232.688181][T10184] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 232.688204][T10184] usb_hcd_giveback_urb+0x39b/0x450 [ 232.688229][T10184] dummy_timer+0x180e/0x3a20 [ 232.688242][T10184] __hrtimer_run_queues+0x202/0xad0 [ 232.688259][T10184] hrtimer_run_softirq+0x17d/0x350 [ 232.688276][T10184] handle_softirqs+0x216/0x8e0 [ 232.780263][T10184] __irq_exit_rcu+0x109/0x170 [ 232.785017][T10184] irq_exit_rcu+0x9/0x30 [ 232.789332][T10184] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 232.795036][T10184] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.801085][T10184] console_flush_all+0x9a2/0xc60 [ 232.806093][T10184] console_unlock+0xd8/0x210 [ 232.810754][T10184] vprintk_emit+0x418/0x6d0 [ 232.815326][T10184] _printk+0xc7/0x100 [ 232.819384][T10184] __netdev_printk+0x379/0x500 [ 232.824217][T10184] netdev_info+0xe4/0x120 [ 232.828614][T10184] netif_set_allmulti+0x1a9/0x3d0 [ 232.833707][T10184] dev_set_allmulti+0xb7/0x260 [ 232.838541][T10184] del_nbp+0xb9/0xd40 [ 232.842589][T10184] br_dev_delete+0x99/0x1a0 [ 232.847159][T10184] br_net_exit_batch_rtnl+0x116/0x1f0 [ 232.852598][T10184] cleanup_net+0x555/0xb30 [ 232.857087][T10184] process_one_work+0x9cf/0x1b70 [ 232.862090][T10184] worker_thread+0x6c8/0xf10 [ 232.866749][T10184] kthread+0x3c2/0x780 [ 232.870882][T10184] ret_from_fork+0x45/0x80 [ 232.875364][T10184] ret_from_fork_asm+0x1a/0x30 [ 232.880203][T10184] [ 232.880203][T10184] to a SOFTIRQ-irq-unsafe lock: [ 232.887198][T10184] (tasklist_lock){.+.+}-{3:3} [ 232.887219][T10184] [ 232.887219][T10184] ... which became SOFTIRQ-irq-unsafe at: [ 232.899808][T10184] ... [ 232.899814][T10184] lock_acquire+0x179/0x350 [ 232.906950][T10184] _raw_read_lock+0x5f/0x70 [ 232.911522][T10184] __do_wait+0x105/0x890 [ 232.915840][T10184] do_wait+0x21e/0x5a0 [ 232.919988][T10184] kernel_wait+0x9f/0x160 [ 232.924381][T10184] call_usermodehelper_exec_work+0xf1/0x170 [ 232.930345][T10184] process_one_work+0x9cf/0x1b70 [ 232.935356][T10184] worker_thread+0x6c8/0xf10 [ 232.940017][T10184] kthread+0x3c2/0x780 [ 232.944168][T10184] ret_from_fork+0x45/0x80 [ 232.948651][T10184] ret_from_fork_asm+0x1a/0x30 [ 232.953488][T10184] [ 232.953488][T10184] other info that might help us debug this: [ 232.953488][T10184] [ 232.963693][T10184] Chain exists of: [ 232.963693][T10184] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 232.963693][T10184] [ 232.976885][T10184] Possible interrupt unsafe locking scenario: [ 232.976885][T10184] [ 232.985182][T10184] CPU0 CPU1 [ 232.991045][T10184] ---- ---- [ 232.996388][T10184] lock(tasklist_lock); [ 233.000613][T10184] local_irq_disable(); [ 233.007347][T10184] lock(&client->buffer_lock); [ 233.014699][T10184] lock(&f_owner->lock); [ 233.021527][T10184] [ 233.024957][T10184] lock(&client->buffer_lock); [ 233.029964][T10184] [ 233.029964][T10184] *** DEADLOCK *** [ 233.029964][T10184] [ 233.038084][T10184] 2 locks held by syz.4.1629/10184: [ 233.043265][T10184] #0: ffff88807bce3840 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xc74/0x1160 [ 233.052750][T10184] #1: ffff8881443a62a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 233.061873][T10184] [ 233.061873][T10184] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 233.072255][T10184] -> (&client->buffer_lock){..-.}-{3:3} { [ 233.078144][T10184] IN-SOFTIRQ-W at: [ 233.082277][T10184] lock_acquire+0x179/0x350 [ 233.088767][T10184] _raw_spin_lock+0x2e/0x40 [ 233.095252][T10184] evdev_pass_values+0x10e/0x9b0 [ 233.102170][T10184] evdev_events+0x1bb/0x390 [ 233.108654][T10184] input_pass_values+0x6c4/0x890 [ 233.115571][T10184] input_handle_event+0xb29/0x14d0 [ 233.122664][T10184] input_event+0x83/0xb0 [ 233.128899][T10184] hidinput_hid_event+0xa10/0x2420 [ 233.135992][T10184] hid_process_event+0x4b7/0x5e0 [ 233.142908][T10184] hid_report_raw_event+0xa0a/0x1290 [ 233.150168][T10184] __hid_input_report.constprop.0+0x33f/0x450 [ 233.158212][T10184] hid_irq_in+0x35e/0x870 [ 233.164523][T10184] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 233.171878][T10184] usb_hcd_giveback_urb+0x39b/0x450 [ 233.179070][T10184] dummy_timer+0x180e/0x3a20 [ 233.185638][T10184] __hrtimer_run_queues+0x202/0xad0 [ 233.192818][T10184] hrtimer_run_softirq+0x17d/0x350 [ 233.199912][T10184] handle_softirqs+0x216/0x8e0 [ 233.206656][T10184] __irq_exit_rcu+0x109/0x170 [ 233.213323][T10184] irq_exit_rcu+0x9/0x30 [ 233.219547][T10184] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 233.227165][T10184] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.235123][T10184] console_flush_all+0x9a2/0xc60 [ 233.242043][T10184] console_unlock+0xd8/0x210 [ 233.248627][T10184] vprintk_emit+0x418/0x6d0 [ 233.255124][T10184] _printk+0xc7/0x100 [ 233.261092][T10184] __netdev_printk+0x379/0x500 [ 233.267836][T10184] netdev_info+0xe4/0x120 [ 233.274151][T10184] netif_set_allmulti+0x1a9/0x3d0 [ 233.281155][T10184] dev_set_allmulti+0xb7/0x260 [ 233.287902][T10184] del_nbp+0xb9/0xd40 [ 233.293862][T10184] br_dev_delete+0x99/0x1a0 [ 233.300342][T10184] br_net_exit_batch_rtnl+0x116/0x1f0 [ 233.307694][T10184] cleanup_net+0x555/0xb30 [ 233.314090][T10184] process_one_work+0x9cf/0x1b70 [ 233.321007][T10184] worker_thread+0x6c8/0xf10 [ 233.327574][T10184] kthread+0x3c2/0x780 [ 233.333620][T10184] ret_from_fork+0x45/0x80 [ 233.340024][T10184] ret_from_fork_asm+0x1a/0x30 [ 233.346775][T10184] INITIAL USE at: [ 233.350822][T10184] lock_acquire+0x179/0x350 [ 233.357225][T10184] _raw_spin_lock+0x2e/0x40 [ 233.363623][T10184] evdev_pass_values+0x10e/0x9b0 [ 233.370452][T10184] evdev_events+0x1bb/0x390 [ 233.376847][T10184] input_pass_values+0x6c4/0x890 [ 233.383683][T10184] input_handle_event+0xf00/0x14d0 [ 233.390689][T10184] input_inject_event+0x1cd/0x390 [ 233.397624][T10184] evdev_write+0x457/0x750 [ 233.403956][T10184] vfs_write+0x25f/0x1180 [ 233.410198][T10184] ksys_write+0x205/0x240 [ 233.416424][T10184] do_syscall_64+0xcd/0x260 [ 233.422826][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.430615][T10184] } [ 233.433267][T10184] ... key at: [] __key.1+0x0/0x40 [ 233.440536][T10184] -> (&new->fa_lock){....}-{3:3} { [ 233.445732][T10184] INITIAL USE at: [ 233.449694][T10184] lock_acquire+0x179/0x350 [ 233.455923][T10184] _raw_write_lock_irq+0x36/0x50 [ 233.462584][T10184] fasync_remove_entry+0xb2/0x1e0 [ 233.469331][T10184] fasync_helper+0xaf/0xd0 [ 233.475466][T10184] pipe_fasync+0xc7/0x200 [ 233.481520][T10184] __fput+0x96b/0xb70 [ 233.487744][T10184] task_work_run+0x150/0x240 [ 233.494054][T10184] syscall_exit_to_user_mode+0x27b/0x2a0 [ 233.501412][T10184] do_syscall_64+0xda/0x260 [ 233.507641][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.515252][T10184] INITIAL READ USE at: [ 233.519645][T10184] lock_acquire+0x179/0x350 [ 233.526309][T10184] _raw_read_lock_irqsave+0x74/0x90 [ 233.533665][T10184] kill_fasync+0x138/0x510 [ 233.540238][T10184] pipe_release+0x1a7/0x320 [ 233.546894][T10184] __fput+0x3ff/0xb70 [ 233.553042][T10184] task_work_run+0x150/0x240 [ 233.559785][T10184] syscall_exit_to_user_mode+0x27b/0x2a0 [ 233.567575][T10184] do_syscall_64+0xda/0x260 [ 233.574243][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.582288][T10184] } [ 233.584868][T10184] ... key at: [] __key.0+0x0/0x40 [ 233.592067][T10184] ... acquired at: [ 233.595945][T10184] _raw_read_lock_irqsave+0x74/0x90 [ 233.601305][T10184] kill_fasync+0x138/0x510 [ 233.605880][T10184] evdev_pass_values+0x619/0x9b0 [ 233.610976][T10184] evdev_events+0x1bb/0x390 [ 233.615634][T10184] input_pass_values+0x6c4/0x890 [ 233.620729][T10184] input_handle_event+0xf00/0x14d0 [ 233.625998][T10184] input_inject_event+0x1cd/0x390 [ 233.631179][T10184] evdev_write+0x457/0x750 [ 233.635753][T10184] vfs_write+0x25f/0x1180 [ 233.640245][T10184] ksys_write+0x205/0x240 [ 233.644735][T10184] do_syscall_64+0xcd/0x260 [ 233.649412][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.655473][T10184] [ 233.657779][T10184] -> (&f_owner->lock){....}-{3:3} { [ 233.662983][T10184] INITIAL USE at: [ 233.666864][T10184] lock_acquire+0x179/0x350 [ 233.672927][T10184] _raw_write_lock_irq+0x36/0x50 [ 233.679431][T10184] __f_setown+0x61/0x3c0 [ 233.685220][T10184] generic_setlease+0xeef/0x1300 [ 233.691712][T10184] kernel_setlease+0x106/0x140 [ 233.698028][T10184] vfs_setlease+0x258/0x2d0 [ 233.704078][T10184] fcntl_setlease+0x3ed/0x5a0 [ 233.710306][T10184] do_fcntl+0x75a/0x1590 [ 233.716095][T10184] __x64_sys_fcntl+0x170/0x200 [ 233.722406][T10184] do_syscall_64+0xcd/0x260 [ 233.728485][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.735920][T10184] INITIAL READ USE at: [ 233.740226][T10184] lock_acquire+0x179/0x350 [ 233.746717][T10184] _raw_read_lock_irqsave+0x74/0x90 [ 233.753899][T10184] send_sigio+0x31/0x3e0 [ 233.760120][T10184] kill_fasync+0x214/0x510 [ 233.766521][T10184] lease_break_callback+0x23/0x30 [ 233.773524][T10184] __break_lease+0x674/0x1810 [ 233.780184][T10184] do_dentry_open+0x6e1/0x1c10 [ 233.786933][T10184] vfs_open+0x82/0x3f0 [ 233.792980][T10184] path_openat+0x1e5e/0x2d40 [ 233.799549][T10184] do_filp_open+0x20b/0x470 [ 233.806045][T10184] do_sys_openat2+0x11b/0x1d0 [ 233.812713][T10184] __x64_sys_openat+0x174/0x210 [ 233.819544][T10184] do_syscall_64+0xcd/0x260 [ 233.826031][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.833902][T10184] } [ 233.836383][T10184] ... key at: [] __key.1+0x0/0x40 [ 233.843476][T10184] ... acquired at: [ 233.847257][T10184] _raw_read_lock_irqsave+0x74/0x90 [ 233.852612][T10184] send_sigio+0x31/0x3e0 [ 233.857010][T10184] kill_fasync+0x214/0x510 [ 233.861581][T10184] lease_break_callback+0x23/0x30 [ 233.866762][T10184] __break_lease+0x674/0x1810 [ 233.871596][T10184] do_dentry_open+0x6e1/0x1c10 [ 233.876533][T10184] vfs_open+0x82/0x3f0 [ 233.880758][T10184] path_openat+0x1e5e/0x2d40 [ 233.885498][T10184] do_filp_open+0x20b/0x470 [ 233.890153][T10184] do_sys_openat2+0x11b/0x1d0 [ 233.894988][T10184] __x64_sys_openat+0x174/0x210 [ 233.899996][T10184] do_syscall_64+0xcd/0x260 [ 233.904674][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.910722][T10184] [ 233.913024][T10184] [ 233.913024][T10184] the dependencies between the lock to be acquired [ 233.913031][T10184] and SOFTIRQ-irq-unsafe lock: [ 233.926500][T10184] -> (tasklist_lock){.+.+}-{3:3} { [ 233.931609][T10184] HARDIRQ-ON-R at: [ 233.935568][T10184] lock_acquire+0x179/0x350 [ 233.941716][T10184] _raw_read_lock+0x5f/0x70 [ 233.947853][T10184] __do_wait+0x105/0x890 [ 233.953735][T10184] do_wait+0x21e/0x5a0 [ 233.959440][T10184] kernel_wait+0x9f/0x160 [ 233.965398][T10184] call_usermodehelper_exec_work+0xf1/0x170 [ 233.972926][T10184] process_one_work+0x9cf/0x1b70 [ 233.979494][T10184] worker_thread+0x6c8/0xf10 [ 233.985716][T10184] kthread+0x3c2/0x780 [ 233.991941][T10184] ret_from_fork+0x45/0x80 [ 233.997991][T10184] ret_from_fork_asm+0x1a/0x30 [ 234.004391][T10184] SOFTIRQ-ON-R at: [ 234.008352][T10184] lock_acquire+0x179/0x350 [ 234.014492][T10184] _raw_read_lock+0x5f/0x70 [ 234.020631][T10184] __do_wait+0x105/0x890 [ 234.026511][T10184] do_wait+0x21e/0x5a0 [ 234.032217][T10184] kernel_wait+0x9f/0x160 [ 234.038179][T10184] call_usermodehelper_exec_work+0xf1/0x170 [ 234.045723][T10184] process_one_work+0x9cf/0x1b70 [ 234.052292][T10184] worker_thread+0x6c8/0xf10 [ 234.058514][T10184] kthread+0x3c2/0x780 [ 234.064213][T10184] ret_from_fork+0x45/0x80 [ 234.070262][T10184] ret_from_fork_asm+0x1a/0x30 [ 234.076663][T10184] INITIAL USE at: [ 234.080537][T10184] lock_acquire+0x179/0x350 [ 234.086606][T10184] _raw_write_lock_irq+0x36/0x50 [ 234.093091][T10184] copy_process+0x3f09/0x91b0 [ 234.099321][T10184] kernel_clone+0xfc/0x960 [ 234.105287][T10184] user_mode_thread+0xc7/0x110 [ 234.111602][T10184] rest_init+0x23/0x2b0 [ 234.117302][T10184] start_kernel+0x3e9/0x4d0 [ 234.123347][T10184] x86_64_start_reservations+0x18/0x30 [ 234.130349][T10184] x86_64_start_kernel+0xb0/0xc0 [ 234.136832][T10184] common_startup_64+0x13e/0x148 [ 234.143325][T10184] INITIAL READ USE at: [ 234.147633][T10184] lock_acquire+0x179/0x350 [ 234.154125][T10184] _raw_read_lock+0x5f/0x70 [ 234.160609][T10184] __do_wait+0x105/0x890 [ 234.166839][T10184] do_wait+0x21e/0x5a0 [ 234.172891][T10184] kernel_wait+0x9f/0x160 [ 234.179196][T10184] call_usermodehelper_exec_work+0xf1/0x170 [ 234.187593][T10184] process_one_work+0x9cf/0x1b70 [ 234.194510][T10184] worker_thread+0x6c8/0xf10 [ 234.201078][T10184] kthread+0x3c2/0x780 [ 234.207129][T10184] ret_from_fork+0x45/0x80 [ 234.213524][T10184] ret_from_fork_asm+0x1a/0x30 [ 234.220272][T10184] } [ 234.222748][T10184] ... key at: [] tasklist_lock+0x18/0x40 [ 234.230452][T10184] ... acquired at: [ 234.234233][T10184] lock_acquire+0x179/0x350 [ 234.238900][T10184] _raw_read_lock+0x5f/0x70 [ 234.243560][T10184] send_sigurg+0xed/0xc80 [ 234.248047][T10184] sk_send_sigurg+0x76/0x360 [ 234.252792][T10184] unix_stream_sendmsg+0xe77/0x1160 [ 234.258155][T10184] ____sys_sendmsg+0xa95/0xc70 [ 234.263079][T10184] ___sys_sendmsg+0x134/0x1d0 [ 234.267910][T10184] __sys_sendmsg+0x16d/0x220 [ 234.272654][T10184] do_syscall_64+0xcd/0x260 [ 234.277318][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.283364][T10184] [ 234.285666][T10184] [ 234.285666][T10184] stack backtrace: [ 234.291536][T10184] CPU: 0 UID: 60928 PID: 10184 Comm: syz.4.1629 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 234.291557][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.291566][T10184] Call Trace: [ 234.291571][T10184] [ 234.291577][T10184] dump_stack_lvl+0x116/0x1f0 [ 234.291598][T10184] check_irq_usage+0x7dc/0x920 [ 234.291624][T10184] ? check_path.constprop.0+0x24/0x50 [ 234.291646][T10184] ? __lock_acquire+0x1189/0x1ba0 [ 234.291667][T10184] __lock_acquire+0x1189/0x1ba0 [ 234.291692][T10184] lock_acquire+0x179/0x350 [ 234.291713][T10184] ? send_sigurg+0xed/0xc80 [ 234.291733][T10184] _raw_read_lock+0x5f/0x70 [ 234.291750][T10184] ? send_sigurg+0xed/0xc80 [ 234.291766][T10184] send_sigurg+0xed/0xc80 [ 234.291782][T10184] ? find_held_lock+0x2b/0x80 [ 234.291801][T10184] sk_send_sigurg+0x76/0x360 [ 234.291815][T10184] unix_stream_sendmsg+0xe77/0x1160 [ 234.291838][T10184] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 234.291863][T10184] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 234.291890][T10184] ____sys_sendmsg+0xa95/0xc70 [ 234.291909][T10184] ? copy_msghdr_from_user+0x10a/0x160 [ 234.291925][T10184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.291949][T10184] ___sys_sendmsg+0x134/0x1d0 [ 234.291965][T10184] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.291992][T10184] __sys_sendmsg+0x16d/0x220 [ 234.292008][T10184] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.292023][T10184] ? __x64_sys_futex+0x1e0/0x4c0 [ 234.292046][T10184] ? rcu_is_watching+0x12/0xc0 [ 234.292065][T10184] do_syscall_64+0xcd/0x260 [ 234.292086][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.292100][T10184] RIP: 0033:0x7f956c98e969 [ 234.292112][T10184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.292131][T10184] RSP: 002b:00007f956d7b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.292144][T10184] RAX: ffffffffffffffda RBX: 00007f956cbb5fa0 RCX: 00007f956c98e969 [ 234.292154][T10184] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000003 [ 234.292163][T10184] RBP: 00007f956ca10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 234.292171][T10184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.292180][T10184] R13: 0000000000000000 R14: 00007f956cbb5fa0 R15: 00007ffd04f20dc8 [ 234.292194][T10184] [ 234.526019][ T5812] Bluetooth: hci0: command tx timeout [ 234.526612][ T8400] usb 5-1: ath9k_htc: USB layer deinitialized [ 234.531731][ T5812] Bluetooth: hci4: command tx timeout [ 234.603430][ T1158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.661326][ T1158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.681487][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.688724][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.695844][T10172] bridge_slave_0: entered allmulticast mode [ 234.702398][T10172] bridge_slave_0: entered promiscuous mode [ 234.711333][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.718432][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.725556][T10172] bridge_slave_1: entered allmulticast mode [ 234.732017][T10172] bridge_slave_1: entered promiscuous mode [ 234.769040][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.791922][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.809478][T10178] chnl_net:caif_netlink_parms(): no params data found [ 234.828693][T10172] team0: Port device team_slave_0 added [ 234.844451][T10172] team0: Port device team_slave_1 added [ 234.846841][ T5870] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 234.872227][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.879348][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.906106][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.918151][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.925146][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.951574][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.972535][ T1158] bridge_slave_1: left allmulticast mode [ 234.978272][ T1158] bridge_slave_1: left promiscuous mode [ 234.983876][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.992346][ T1158] bridge_slave_0: left allmulticast mode [ 234.998486][ T1158] bridge_slave_0: left promiscuous mode [ 235.004128][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.027845][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.038016][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.050907][ T5870] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.063636][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.073412][ T5870] usb 6-1: SerialNumber: syz [ 235.112635][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.123529][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.132866][ T1158] bond0 (unregistering): Released all slaves [ 235.145429][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.152678][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.160212][T10178] bridge_slave_0: entered allmulticast mode [ 235.167085][T10178] bridge_slave_0: entered promiscuous mode [ 235.181158][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.188363][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.195811][T10178] bridge_slave_1: entered allmulticast mode [ 235.202496][T10178] bridge_slave_1: entered promiscuous mode [ 235.225514][T10178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.236466][T10178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.272279][T10172] hsr_slave_0: entered promiscuous mode [ 235.280281][T10172] hsr_slave_1: entered promiscuous mode [ 235.288345][T10172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.292755][ T5870] usb 6-1: 0:2 : does not exist [ 235.295892][T10172] Cannot create hsr debugfs directory [ 235.297125][T10178] team0: Port device team_slave_0 added [ 235.308634][ T5870] usb 6-1: unit 48 not found! [ 235.313830][T10178] team0: Port device team_slave_1 added [ 235.341196][ T5870] usb 6-1: USB disconnect, device number 28 [ 235.355260][T10178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.362498][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.388659][T10178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.402638][T10178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.409712][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.436605][T10178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.460176][ T1158] hsr_slave_0: left promiscuous mode [ 235.465724][ T1158] hsr_slave_1: left promiscuous mode [ 235.472689][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.480294][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.488511][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.495890][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.504814][ T1158] veth1_macvtap: left promiscuous mode [ 235.510319][ T1158] veth0_macvtap: left promiscuous mode [ 235.515794][ T1158] veth1_vlan: left promiscuous mode [ 235.521114][ T1158] veth0_vlan: left promiscuous mode [ 235.621118][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 235.643673][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 235.737857][T10178] hsr_slave_0: entered promiscuous mode [ 235.743749][T10178] hsr_slave_1: entered promiscuous mode [ 235.749989][T10178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.757907][T10178] Cannot create hsr debugfs directory [ 235.811050][T10172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.872127][T10172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.960132][T10172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.011140][T10172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.125362][ T1158] bridge_slave_1: left allmulticast mode [ 236.131120][ T1158] bridge_slave_1: left promiscuous mode [ 236.137878][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.146389][ T1158] bridge_slave_0: left allmulticast mode [ 236.152149][ T1158] bridge_slave_0: left promiscuous mode [ 236.158226][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.221601][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.231811][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.240914][ T1158] bond0 (unregistering): Released all slaves [ 236.443671][T10172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.452281][T10172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.460534][T10172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.478192][T10172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.491321][ T1158] hsr_slave_0: left promiscuous mode [ 236.497729][ T1158] hsr_slave_1: left promiscuous mode [ 236.503279][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.511403][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.519179][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.526569][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.535627][ T1158] veth1_macvtap: left promiscuous mode [ 236.541205][ T1158] veth0_macvtap: left promiscuous mode [ 236.546806][ T1158] veth1_vlan: left promiscuous mode [ 236.552023][ T1158] veth0_vlan: left promiscuous mode [ 236.597031][ T5815] Bluetooth: hci4: command tx timeout [ 236.597247][ T5812] Bluetooth: hci0: command tx timeout [ 236.664881][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 236.685140][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 236.764678][T10178] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.773842][T10178] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.788544][T10178] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.797394][T10178] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.835876][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.851009][T10172] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.866216][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.873312][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.895738][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.902851][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.943506][T10178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.964232][T10178] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.975188][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.982298][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.998698][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.005834][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.080001][T10172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.111830][T10172] veth0_vlan: entered promiscuous mode [ 237.120965][T10172] veth1_vlan: entered promiscuous mode [ 237.140143][T10172] veth0_macvtap: entered promiscuous mode [ 237.149384][T10172] veth1_macvtap: entered promiscuous mode [ 237.163975][T10172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.173529][T10178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.184329][T10172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.196105][T10172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.204864][T10172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.215499][T10172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.224398][T10172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.251057][T10172] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 237.273187][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.273562][T10172] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 237.286145][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.304148][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.313778][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.373502][T10178] veth0_vlan: entered promiscuous mode [ 237.382424][T10178] veth1_vlan: entered promiscuous mode [ 237.397081][T10178] veth0_macvtap: entered promiscuous mode [ 237.404444][T10178] veth1_macvtap: entered promiscuous mode [ 237.414693][T10178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.428005][T10178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.439167][T10178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.448051][T10178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.457025][T10178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.466106][T10178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.487650][T10178] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 237.503278][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.504209][T10178] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 237.517451][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.534071][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.542935][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.259413][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.710275][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.770302][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.842530][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.909087][ T52] bridge_slave_1: left allmulticast mode [ 240.914753][ T52] bridge_slave_1: left promiscuous mode [ 240.921531][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.930864][ T52] bridge_slave_0: left allmulticast mode [ 240.936505][ T52] bridge_slave_0: left promiscuous mode [ 240.943147][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.032838][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.043435][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.053284][ T52] bond0 (unregistering): Released all slaves [ 241.272141][ T52] hsr_slave_0: left promiscuous mode [ 241.277798][ T52] hsr_slave_1: left promiscuous mode [ 241.283383][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.291169][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.298732][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.306103][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.317072][ T52] veth1_macvtap: left promiscuous mode [ 241.322579][ T52] veth0_macvtap: left promiscuous mode [ 241.328269][ T52] veth1_vlan: left promiscuous mode [ 241.333505][ T52] veth0_vlan: left promiscuous mode [ 241.425640][ T52] team0 (unregistering): Port device team_slave_1 removed [ 241.450065][ T52] team0 (unregistering): Port device team_slave_0 removed [ 241.760828][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.821147][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.870229][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.920407][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.019572][ T52] bridge_slave_1: left allmulticast mode [ 242.025246][ T52] bridge_slave_1: left promiscuous mode [ 242.031656][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.041050][ T52] bridge_slave_0: left allmulticast mode [ 242.047540][ T52] bridge_slave_0: left promiscuous mode [ 242.053184][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.143870][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.154176][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.164154][ T52] bond0 (unregistering): Released all slaves [ 242.363151][ T52] hsr_slave_0: left promiscuous mode [ 242.369630][ T52] hsr_slave_1: left promiscuous mode [ 242.375205][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.382672][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.392279][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.399729][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.411471][ T52] veth1_macvtap: left promiscuous mode [ 242.417355][ T52] veth0_macvtap: left promiscuous mode [ 242.422922][ T52] veth1_vlan: left promiscuous mode [ 242.428928][ T52] veth0_vlan: left promiscuous mode [ 242.541409][ T52] team0 (unregistering): Port device team_slave_1 removed [ 242.558491][ T52] team0 (unregistering): Port device team_slave_0 removed