last executing test programs: 1m12.479054854s ago: executing program 4 (id=89): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m12.030626683s ago: executing program 3 (id=71): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f000001a240)=""/4112, 0x1010}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 58.994610981s ago: executing program 3 (id=71): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f000001a240)=""/4112, 0x1010}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 58.335557145s ago: executing program 4 (id=89): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 45.863962673s ago: executing program 3 (id=71): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f000001a240)=""/4112, 0x1010}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 45.247298442s ago: executing program 4 (id=89): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 32.856113953s ago: executing program 3 (id=71): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f000001a240)=""/4112, 0x1010}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 31.184991716s ago: executing program 4 (id=89): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.113354471s ago: executing program 3 (id=71): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f000001a240)=""/4112, 0x1010}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 18.573634096s ago: executing program 4 (id=89): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.562665046s ago: executing program 0 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x8000f28, 0x0) 15.395968742s ago: executing program 0 (id=956): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x7cca870b0b802017, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_shrink_slab_end\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) 14.235586759s ago: executing program 0 (id=961): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) 14.122553964s ago: executing program 0 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) socket$vsock_stream(0x28, 0x1, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) 13.897992107s ago: executing program 0 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 13.412594721s ago: executing program 0 (id=971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 13.246204779s ago: executing program 32 (id=971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 5.012870976s ago: executing program 1 (id=1001): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0xd, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d34, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x5, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400800, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x403, 0xffff58b9, 0x4c2336d3, 0x80004, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00002, 0x80005, 0xb, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0xaa5, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x994, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x4, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x80000001, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdaf, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 4.843967822s ago: executing program 1 (id=1002): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='b:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.755766508s ago: executing program 2 (id=1003): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x600, 0x1, 0x10000, @value}, 0x28) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x3000) 4.53468651s ago: executing program 3 (id=71): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f000001a240)=""/4112, 0x1010}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 4.523535455s ago: executing program 2 (id=1004): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r0, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x4040881, 0x0, 0x63) recvfrom$inet6(r0, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 3.12876116s ago: executing program 1 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kvm_fpu\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.128395828s ago: executing program 2 (id=1006): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x3c}, @in=@empty, {}, {}, {0x0, 0xfffffffd}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 3.128249495s ago: executing program 4 (id=89): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.868131292s ago: executing program 1 (id=1007): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000a5000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 1.848102847s ago: executing program 2 (id=1008): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.662040831s ago: executing program 1 (id=1009): mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r2, 0xffffffffffffffe2, &(0x7f00000003c0)=""/28}) 1.148793417s ago: executing program 1 (id=1010): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) 932.583301ms ago: executing program 2 (id=1011): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x586abc7b6f5091ec, 0xfa00, {0x0, 0x0, 0x13f}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000300)={0x0, 0x0}) 713.398789ms ago: executing program 5 (id=972): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x8}, {0x4, 0xfe01, 0x1000}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/41, 0x29}, {&(0x7f0000000e40)=""/87, 0x57}], 0x2) 0s ago: executing program 2 (id=1012): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @local}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x6, 0x0) kernel console output (not intermixed with test programs): d_slave_0): Releasing backup interface [ 135.317080][ T30] audit: type=1400 audit(1748757889.003:603): avc: denied { write } for pid=8083 comm="syz.1.574" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 135.346755][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.358279][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.358636][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.385150][ T114] usb 1-1: USB disconnect, device number 9 [ 135.392008][ T114] em28xx 1-1:0.0: Disconnecting em28xx [ 135.399158][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.408205][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.417165][ T114] em28xx 1-1:0.0: Freeing device [ 135.437039][ T1142] bond0 (unregistering): Released all slaves [ 135.513491][ T8077] net_ratelimit: 3319 callbacks suppressed [ 135.513506][ T8077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.717179][ T30] audit: type=1400 audit(1748757889.423:604): avc: denied { write } for pid=8094 comm="syz.1.577" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.739699][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.998678][ T8107] netlink: 'syz.2.580': attribute type 10 has an invalid length. [ 136.072522][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 136.081650][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 136.113530][ T8107] syz_tun: entered promiscuous mode [ 136.128025][ T8107] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 136.164137][ T1142] hsr_slave_0: left promiscuous mode [ 136.192128][ T1142] hsr_slave_1: left promiscuous mode [ 136.203592][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.212013][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.227305][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.234790][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.264700][ T1142] veth1_macvtap: left promiscuous mode [ 136.270312][ T1142] veth0_macvtap: left promiscuous mode [ 136.275960][ T1142] veth1_vlan: left promiscuous mode [ 136.281670][ T1142] veth0_vlan: left promiscuous mode [ 136.775289][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 136.810883][ T5825] Bluetooth: hci2: command tx timeout [ 136.824488][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 137.070990][ T8113] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 137.080034][ T8113] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 137.306628][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 137.412873][ T5893] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.438104][ T8082] chnl_net:caif_netlink_parms(): no params data found [ 137.452318][ T5825] Bluetooth: hci3: command tx timeout [ 137.580003][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 137.599407][ T5893] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 137.617379][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.628058][ T5893] usb 2-1: config 0 descriptor?? [ 137.869455][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 137.893558][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.938870][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.955536][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.990657][ T8060] bridge_slave_0: entered allmulticast mode [ 138.003831][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 138.014608][ T8060] bridge_slave_0: entered promiscuous mode [ 138.016274][ T5893] usb 2-1: media controller created [ 138.049630][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.122599][ T5893] az6027: usb out operation failed. (-71) [ 138.142165][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.158398][ T5893] az6027: usb out operation failed. (-71) [ 138.158409][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.158536][ T8060] bridge_slave_1: entered allmulticast mode [ 138.169985][ T5893] stb0899_attach: Driver disabled by Kconfig [ 138.214562][ T8060] bridge_slave_1: entered promiscuous mode [ 138.215750][ T5893] az6027: no front-end attached [ 138.215750][ T5893] [ 138.241899][ T5893] az6027: usb out operation failed. (-71) [ 138.247634][ T5893] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 138.265044][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.274172][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 138.297010][ T5893] dvb-usb: schedule remote query interval to 400 msecs. [ 138.308922][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.315624][ T5893] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 138.319886][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.367891][ T8082] bridge_slave_0: entered allmulticast mode [ 138.372741][ T5893] usb 2-1: USB disconnect, device number 11 [ 138.388249][ T8082] bridge_slave_0: entered promiscuous mode [ 138.402985][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.428646][ T5893] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 138.434702][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.460233][ T8082] bridge_slave_1: entered allmulticast mode [ 138.467375][ T8082] bridge_slave_1: entered promiscuous mode [ 138.576495][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.706314][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.742973][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.805820][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.827505][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.875485][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.892731][ T5825] Bluetooth: hci2: command tx timeout [ 139.008751][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.162333][ T8082] team0: Port device team_slave_0 added [ 139.183388][ T8060] team0: Port device team_slave_0 added [ 139.192752][ T8082] team0: Port device team_slave_1 added [ 139.236863][ T8060] team0: Port device team_slave_1 added [ 139.281033][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.304460][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.342577][ T8082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.430162][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.461425][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.507369][ T8082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.528413][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.537834][ T5825] Bluetooth: hci3: command tx timeout [ 139.559878][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.585744][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.591885][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.735658][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.754608][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.780507][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.786902][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.914274][ T8082] hsr_slave_0: entered promiscuous mode [ 139.927239][ T8082] hsr_slave_1: entered promiscuous mode [ 139.936507][ T8082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.952198][ T8082] Cannot create hsr debugfs directory [ 139.990962][ T8060] hsr_slave_0: entered promiscuous mode [ 139.997298][ T8060] hsr_slave_1: entered promiscuous mode [ 140.019291][ T8060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.039276][ T8060] Cannot create hsr debugfs directory [ 140.079203][ T1142] bridge_slave_1: left allmulticast mode [ 140.084947][ T1142] bridge_slave_1: left promiscuous mode [ 140.100261][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.118349][ T1142] bridge_slave_0: left allmulticast mode [ 140.139000][ T1142] bridge_slave_0: left promiscuous mode [ 140.145031][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.380076][ T5864] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.474303][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.484941][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.494773][ T1142] bond0 (unregistering): Released all slaves [ 140.552541][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.574411][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.584514][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.601079][ T5864] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.611268][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.633103][ T5864] usb 1-1: config 0 descriptor?? [ 140.973902][ T5825] Bluetooth: hci2: command tx timeout [ 141.068662][ T5864] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 141.103550][ T5864] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 141.139892][ T5888] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 141.165073][ T1142] hsr_slave_0: left promiscuous mode [ 141.205129][ T1142] hsr_slave_1: left promiscuous mode [ 141.213864][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.228798][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.248995][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.268213][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.303190][ T5888] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.310931][ T1142] veth1_macvtap: left promiscuous mode [ 141.313766][ T5888] usb 2-1: config 0 has no interface number 0 [ 141.316662][ T1142] veth0_macvtap: left promiscuous mode [ 141.323267][ T5888] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.359424][ T1142] veth1_vlan: left promiscuous mode [ 141.362476][ T5888] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 141.364762][ T1142] veth0_vlan: left promiscuous mode [ 141.382506][ T5864] usb 1-1: USB disconnect, device number 10 [ 141.410945][ T5888] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.447018][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.478331][ T5888] usb 2-1: config 0 descriptor?? [ 141.490978][ T8281] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.514678][ T5888] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 141.610165][ T5825] Bluetooth: hci3: command tx timeout [ 141.754012][ T5864] usb 2-1: USB disconnect, device number 12 [ 141.884054][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 141.912577][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 141.989141][ T30] audit: type=1400 audit(1748757895.693:605): avc: denied { bind } for pid=8303 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 142.009269][ T30] audit: type=1400 audit(1748757895.693:606): avc: denied { connect } for pid=8303 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 142.053507][ T30] audit: type=1400 audit(1748757895.763:607): avc: denied { setopt } for pid=8305 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.073859][ T30] audit: type=1400 audit(1748757895.783:608): avc: denied { read } for pid=8305 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.325745][ T5893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5893 comm=kworker/0:7 [ 142.363491][ T8309] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.634'. [ 142.448492][ T30] audit: type=1400 audit(1748757896.153:609): avc: denied { read } for pid=8312 comm="syz.1.636" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 142.471139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.482626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 142.529931][ T30] audit: type=1400 audit(1748757896.153:610): avc: denied { open } for pid=8312 comm="syz.1.636" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 142.601883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.611547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.620314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.752245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.779831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.972520][ T30] audit: type=1400 audit(1748757896.683:611): avc: denied { map } for pid=8326 comm="syz.0.640" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.049861][ T5825] Bluetooth: hci2: command tx timeout [ 143.084759][ T30] audit: type=1400 audit(1748757896.713:612): avc: denied { execute } for pid=8326 comm="syz.0.640" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.482570][ T30] audit: type=1804 audit(1748757897.183:613): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.642" name="/" dev="pidfs" ino=8337 res=1 errno=0 [ 143.689935][ T5825] Bluetooth: hci3: command tx timeout [ 143.747453][ T8060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.790153][ T8060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.843365][ T8060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.899325][ T8060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.034567][ T30] audit: type=1400 audit(1748757897.733:614): avc: denied { setattr } for pid=8351 comm="syz.2.646" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 144.038478][ T8082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.106334][ T8082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 144.164381][ T8082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.192225][ T8082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.353446][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.433327][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.436362][ T5815] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.454108][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.495741][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.502884][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.557374][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.574334][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.581461][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.657498][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.664642][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.672763][ T5815] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 144.687213][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.719897][ T5815] usb 2-1: Product: syz [ 144.722697][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.731219][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.742578][ T5815] usb 2-1: Manufacturer: syz [ 144.747251][ T5815] usb 2-1: SerialNumber: syz [ 144.780326][ T5815] usb 2-1: config 0 descriptor?? [ 144.802913][ T5815] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 013 [ 145.051656][ T8393] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 145.212547][ T5815] (null): failure reading functionality [ 145.243543][ T5815] i2c i2c-1: connected i2c-tiny-usb device [ 145.303384][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.325419][ T8082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.468234][ T5815] usb 2-1: USB disconnect, device number 13 [ 145.476195][ T8082] veth0_vlan: entered promiscuous mode [ 145.515776][ T8082] veth1_vlan: entered promiscuous mode [ 145.611201][ T8082] veth0_macvtap: entered promiscuous mode [ 145.641746][ T8082] veth1_macvtap: entered promiscuous mode [ 145.674053][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.707276][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.751928][ T8082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.770506][ T8082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.779205][ T8082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.789652][ T8082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.011018][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.020279][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.216506][ T8435] tipc: Started in network mode [ 146.225222][ T8435] tipc: Node identity ac141425, cluster identity 4711 [ 146.260377][ T8435] tipc: New replicast peer: 0.0.0.0 [ 146.282795][ T8435] tipc: Enabled bearer , priority 10 [ 146.313318][ T8436] tipc: New replicast peer: 172.20.20.170 [ 146.324621][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.355090][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.358088][ T8060] veth0_vlan: entered promiscuous mode [ 146.426079][ T8060] veth1_vlan: entered promiscuous mode [ 146.556699][ T8060] veth0_macvtap: entered promiscuous mode [ 146.632341][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 146.754454][ T8060] veth1_macvtap: entered promiscuous mode [ 146.838975][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.897216][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.926146][ T8060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.958120][ T8060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.985978][ T8060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.001852][ T8060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.133770][ T6417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.178938][ T6417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.232535][ T8463] wireguard0: entered promiscuous mode [ 147.238028][ T8463] wireguard0: entered allmulticast mode [ 147.386424][ T6414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.400654][ T9] tipc: Node number set to 2886997029 [ 147.453026][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.470174][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.725112][ T6414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.078385][ T6414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.191595][ T6414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.228940][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.243102][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.252346][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.260663][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.268589][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.407618][ T6414] bridge_slave_1: left allmulticast mode [ 148.421315][ T6414] bridge_slave_1: left promiscuous mode [ 148.427030][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.452751][ T6414] bridge_slave_0: left allmulticast mode [ 148.458396][ T6414] bridge_slave_0: left promiscuous mode [ 148.480055][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.741770][ T8492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.807901][ T8496] netlink: 11 bytes leftover after parsing attributes in process `syz.2.679'. [ 148.961999][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 149.163251][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.172300][ T6414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.172576][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.189663][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.189997][ T6414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.201633][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.214129][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.216521][ T6414] bond0 (unregistering): Released all slaves [ 149.245486][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 149.888792][ T6414] hsr_slave_0: left promiscuous mode [ 149.898140][ T6414] hsr_slave_1: left promiscuous mode [ 149.909902][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.924924][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.942594][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.963943][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.995017][ T6414] veth1_macvtap: left promiscuous mode [ 150.007267][ T6414] veth0_macvtap: left promiscuous mode [ 150.020007][ T6414] veth1_vlan: left promiscuous mode [ 150.033361][ T6414] veth0_vlan: left promiscuous mode [ 150.331304][ T5827] Bluetooth: hci2: command tx timeout [ 150.475962][ T6414] team0 (unregistering): Port device team_slave_1 removed [ 150.503987][ T6414] team0 (unregistering): Port device team_slave_0 removed [ 150.947404][ T8567] loop2: detected capacity change from 0 to 7 [ 150.981123][ T8567] Dev loop2: unable to read RDB block 7 [ 150.997696][ T8567] loop2: unable to read partition table [ 151.018994][ T8567] loop2: partition table beyond EOD, truncated [ 151.036946][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 151.049324][ T8567] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.211818][ T8578] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.260256][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 151.297106][ T5827] Bluetooth: hci3: command tx timeout [ 151.460876][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.467992][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.500023][ T8475] bridge_slave_0: entered allmulticast mode [ 151.521684][ T8592] Bluetooth: hci0: too big key_count value 12436 [ 151.532500][ T8475] bridge_slave_0: entered promiscuous mode [ 151.603420][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.628091][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.644275][ T8475] bridge_slave_1: entered allmulticast mode [ 151.682810][ T8475] bridge_slave_1: entered promiscuous mode [ 151.812954][ T8598] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 151.898205][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.977224][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.003115][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 152.003128][ T30] audit: type=1400 audit(1748757905.713:619): avc: denied { read } for pid=8614 comm="syz.0.713" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.029120][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.110485][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.117723][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.134439][ T8505] bridge_slave_0: entered allmulticast mode [ 152.152476][ T8505] bridge_slave_0: entered promiscuous mode [ 152.173785][ T8475] team0: Port device team_slave_0 added [ 152.184171][ T8475] team0: Port device team_slave_1 added [ 152.275573][ T6414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.310112][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.322724][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.332488][ T8505] bridge_slave_1: entered allmulticast mode [ 152.339760][ T8505] bridge_slave_1: entered promiscuous mode [ 152.409878][ T5827] Bluetooth: hci2: command tx timeout [ 152.531216][ T6414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.585653][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.599651][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.650914][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.671725][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.734146][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.807049][ T30] audit: type=1326 audit(1748757906.503:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af378e969 code=0x7ffc0000 [ 152.830261][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.855326][ T6414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.858084][ T30] audit: type=1326 audit(1748757906.503:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af378e969 code=0x7ffc0000 [ 152.904614][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.922321][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.925868][ T30] audit: type=1326 audit(1748757906.503:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9af378e969 code=0x7ffc0000 [ 152.948189][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.018122][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.073285][ T30] audit: type=1326 audit(1748757906.503:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af378e969 code=0x7ffc0000 [ 153.096478][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.117252][ T30] audit: type=1326 audit(1748757906.503:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af378e969 code=0x7ffc0000 [ 153.153988][ T30] audit: type=1400 audit(1748757906.623:625): avc: denied { ioctl } for pid=8636 comm="syz.2.721" path="socket:[26348]" dev="sockfs" ino=26348 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.178768][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.191603][ T30] audit: type=1400 audit(1748757906.623:626): avc: denied { read } for pid=8636 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.210789][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.227893][ T30] audit: type=1400 audit(1748757906.783:627): avc: denied { mount } for pid=8640 comm="syz.1.723" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 153.255639][ T30] audit: type=1400 audit(1748757906.783:628): avc: denied { mounton } for pid=8640 comm="syz.1.723" path="/231/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 153.380153][ T5827] Bluetooth: hci3: command tx timeout [ 153.387544][ T6414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.455332][ T8475] hsr_slave_0: entered promiscuous mode [ 153.465199][ T8475] hsr_slave_1: entered promiscuous mode [ 153.471900][ T8475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.479479][ T8475] Cannot create hsr debugfs directory [ 153.493426][ T8505] team0: Port device team_slave_0 added [ 153.556797][ T8505] team0: Port device team_slave_1 added [ 153.697890][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.715109][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.746552][ T8505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.832028][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.851250][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.882758][ T8505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.016283][ T8505] hsr_slave_0: entered promiscuous mode [ 154.022984][ T8505] hsr_slave_1: entered promiscuous mode [ 154.029706][ T8505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.042903][ T8505] Cannot create hsr debugfs directory [ 154.282476][ T6414] bridge_slave_1: left allmulticast mode [ 154.289039][ T6414] bridge_slave_1: left promiscuous mode [ 154.300182][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.335932][ T6414] bridge_slave_0: left allmulticast mode [ 154.342081][ T6414] bridge_slave_0: left promiscuous mode [ 154.348290][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.500087][ T5827] Bluetooth: hci2: command tx timeout [ 154.798881][ T6414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.808759][ T6414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.818539][ T6414] bond0 (unregistering): Released all slaves [ 154.847397][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 155.030180][ T5864] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 155.185729][ T5864] usb 2-1: config 127 has an invalid interface number: 32 but max is 0 [ 155.219989][ T5864] usb 2-1: config 127 has no interface number 0 [ 155.240081][ T5864] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 155.260448][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.335752][ T5864] ums-freecom 2-1:127.32: USB Mass Storage device detected [ 155.402331][ T6414] hsr_slave_0: left promiscuous mode [ 155.440905][ T6414] hsr_slave_1: left promiscuous mode [ 155.447348][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.460251][ T5827] Bluetooth: hci3: command tx timeout [ 155.460263][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.483910][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.500279][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.559400][ T6414] veth1_macvtap: left promiscuous mode [ 155.579705][ T6414] veth0_macvtap: left promiscuous mode [ 155.586606][ T5815] usb 2-1: USB disconnect, device number 14 [ 155.599407][ T6414] veth1_vlan: left promiscuous mode [ 155.608056][ T6414] veth0_vlan: left promiscuous mode [ 156.222104][ T6414] team0 (unregistering): Port device team_slave_1 removed [ 156.288760][ T6414] team0 (unregistering): Port device team_slave_0 removed [ 156.562022][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 156.569877][ T5827] Bluetooth: hci2: command tx timeout [ 156.700139][ T54] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.721313][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 156.741239][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 156.768843][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.786356][ T8757] loop6: detected capacity change from 0 to 63 [ 156.791133][ T9] usb 1-1: config 0 descriptor?? [ 156.804540][ T8748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.809486][ T7845] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.824104][ T8757] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 156.834112][ T8757] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 156.852663][ T8757] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 156.865633][ T8757] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 156.877788][ T8758] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 156.892517][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.897563][ T8757] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 156.913660][ T8757] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 156.914840][ T54] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.922357][ T8757] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 156.953246][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.980423][ T54] usb 2-1: Product: syz [ 156.984593][ T54] usb 2-1: Manufacturer: syz [ 156.989354][ T54] usb 2-1: SerialNumber: syz [ 157.234286][ T8505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.255613][ T9] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 157.260329][ T8505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.380164][ T8505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.406647][ T8505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.493159][ T9] usb 1-1: USB disconnect, device number 11 [ 157.531506][ T5827] Bluetooth: hci3: command tx timeout [ 157.533608][ T8475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.596910][ T8475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.616932][ T8475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.633382][ T8475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.757978][ T8505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.806725][ T8505] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.824417][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.831550][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.863773][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.894167][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.901297][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.959075][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.987442][ T8505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.008990][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.016122][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.058087][ T54] cdc_ncm 2-1:1.0: bind() failure [ 158.075500][ T54] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 158.082990][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.090123][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.099461][ T54] cdc_ncm 2-1:1.1: bind() failure [ 158.116146][ T54] usb 2-1: USB disconnect, device number 15 [ 158.186558][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 158.186573][ T30] audit: type=1400 audit(1748757911.893:637): avc: denied { read write } for pid=8794 comm="syz.0.768" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.263941][ T30] audit: type=1400 audit(1748757911.933:638): avc: denied { open } for pid=8794 comm="syz.0.768" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.427140][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.613403][ T8475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.733173][ T8475] veth0_vlan: entered promiscuous mode [ 158.781951][ T8475] veth1_vlan: entered promiscuous mode [ 158.837165][ T8475] veth0_macvtap: entered promiscuous mode [ 158.858841][ T8475] veth1_macvtap: entered promiscuous mode [ 158.931992][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.983813][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.012645][ T8475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.039899][ T8475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.058816][ T8475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.080103][ T8475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.208844][ T8505] veth0_vlan: entered promiscuous mode [ 159.259013][ T8505] veth1_vlan: entered promiscuous mode [ 159.349732][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.370183][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.453252][ T8505] veth0_macvtap: entered promiscuous mode [ 159.460251][ T54] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 159.481898][ T6414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.492559][ T6414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.501287][ T8505] veth1_macvtap: entered promiscuous mode [ 159.533852][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.563294][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.586309][ T8505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.597782][ T8505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.608486][ T8505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.622817][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.633463][ T8505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.639814][ T54] usb 1-1: config 0 has no interfaces? [ 159.657746][ T54] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 159.692508][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.711864][ T5815] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 159.712476][ T54] usb 1-1: config 0 descriptor?? [ 159.748500][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 159.886783][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.906736][ T5815] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 159.926802][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.948951][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.987445][ T5815] usb 3-1: config 0 descriptor?? [ 160.015206][ T8834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.043375][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.046081][ T5888] usb 1-1: USB disconnect, device number 12 [ 160.062295][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.245632][ T5815] kaweth 3-1:0.0: Firmware present in device. [ 160.427774][ T5815] kaweth 3-1:0.0: Statistics collection: 0 [ 160.451165][ T5815] kaweth 3-1:0.0: Multicast filter limit: 0 [ 160.467280][ T5815] kaweth 3-1:0.0: MTU: 0 [ 160.472702][ T5815] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 160.514738][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.719941][ T1169] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 160.890928][ T1169] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 160.919938][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.947915][ T1169] usb 2-1: config 0 descriptor?? [ 161.044841][ T5815] kaweth 3-1:0.0: Error setting receive filter [ 161.064048][ T5815] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 161.105993][ T5815] usb 3-1: USB disconnect, device number 13 [ 161.312474][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.382528][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.398681][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.412933][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.419891][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.433944][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.442762][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.496333][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.745689][ T36] bridge_slave_1: left allmulticast mode [ 161.753699][ T36] bridge_slave_1: left promiscuous mode [ 161.759458][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.773310][ T36] bridge_slave_0: left allmulticast mode [ 161.779526][ T36] bridge_slave_0: left promiscuous mode [ 161.788239][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.971181][ T30] audit: type=1326 audit(1748757915.683:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 162.016989][ T1169] usb 2-1: Cannot set autoneg [ 162.032021][ T1169] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 162.050520][ T30] audit: type=1326 audit(1748757915.683:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 162.076397][ T30] audit: type=1326 audit(1748757915.683:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 162.162100][ T114] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.174233][ T30] audit: type=1326 audit(1748757915.683:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 162.220201][ T1169] usb 2-1: USB disconnect, device number 16 [ 162.307406][ T30] audit: type=1326 audit(1748757915.683:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 162.341739][ T114] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.392417][ T114] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.429550][ T30] audit: type=1326 audit(1748757915.683:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 162.448247][ T114] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.524344][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.534467][ T30] audit: type=1326 audit(1748757915.683:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 162.554638][ T114] usb 1-1: SerialNumber: syz [ 162.625364][ T30] audit: type=1326 audit(1748757915.683:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 162.706190][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.718732][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.740552][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.749464][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.757145][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.833516][ T114] usb 1-1: 0:2 : does not exist [ 162.891453][ T114] usb 1-1: USB disconnect, device number 13 [ 162.930535][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.966818][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.008525][ T7845] udevd[7845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.012426][ T36] bond0 (unregistering): Released all slaves [ 163.198936][ T30] kauditd_printk_skb: 409 callbacks suppressed [ 163.198947][ T30] audit: type=1326 audit(1748757916.893:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d298e969 code=0x7ffc0000 [ 163.346718][ T30] audit: type=1326 audit(1748757916.893:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 163.383862][ T30] audit: type=1326 audit(1748757916.893:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d298e969 code=0x7ffc0000 [ 163.412672][ T30] audit: type=1326 audit(1748757916.893:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 163.440082][ T30] audit: type=1326 audit(1748757916.893:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d298e969 code=0x7ffc0000 [ 163.467802][ T30] audit: type=1326 audit(1748757916.893:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 163.531903][ T5825] Bluetooth: hci2: command tx timeout [ 163.562067][ T30] audit: type=1326 audit(1748757916.893:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d298e969 code=0x7ffc0000 [ 163.589925][ T30] audit: type=1326 audit(1748757916.893:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 163.621589][ T8907] chnl_net:caif_netlink_parms(): no params data found [ 163.629875][ T30] audit: type=1326 audit(1748757916.893:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d298e969 code=0x7ffc0000 [ 163.690296][ T30] audit: type=1326 audit(1748757916.893:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48d292ab39 code=0x7ffc0000 [ 163.980929][ T36] hsr_slave_0: left promiscuous mode [ 163.993224][ T36] hsr_slave_1: left promiscuous mode [ 163.999090][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.006950][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.014951][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.022583][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.110892][ T36] veth1_macvtap: left promiscuous mode [ 164.139448][ T36] veth0_macvtap: left promiscuous mode [ 164.170038][ T36] veth1_vlan: left promiscuous mode [ 164.192581][ T36] veth0_vlan: left promiscuous mode [ 164.812960][ T5825] Bluetooth: hci3: command tx timeout [ 165.068382][ T36] team0 (unregistering): Port device team_slave_1 removed [ 165.113289][ T36] team0 (unregistering): Port device team_slave_0 removed [ 165.611573][ T5825] Bluetooth: hci2: command tx timeout [ 165.741711][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 165.758357][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 165.900856][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.923513][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.945778][ T8907] bridge_slave_0: entered allmulticast mode [ 165.954214][ T8907] bridge_slave_0: entered promiscuous mode [ 165.962017][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.969140][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.977171][ T8907] bridge_slave_1: entered allmulticast mode [ 165.985748][ T8907] bridge_slave_1: entered promiscuous mode [ 166.211630][ T8907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.244400][ T8907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.397070][ T8907] team0: Port device team_slave_0 added [ 166.421948][ T8907] team0: Port device team_slave_1 added [ 166.430097][ T8937] chnl_net:caif_netlink_parms(): no params data found [ 166.508793][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.515879][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.551199][ T8907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.588599][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.596373][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.650315][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 166.668673][ T8907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.752240][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.822605][ T9] usb 3-1: config 0 has no interfaces? [ 166.831973][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.842334][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.852095][ T9] usb 3-1: Manufacturer: syz [ 166.861040][ T9] usb 3-1: config 0 descriptor?? [ 166.890087][ T5825] Bluetooth: hci3: command tx timeout [ 166.897498][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.905329][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.912659][ T8937] bridge_slave_0: entered allmulticast mode [ 166.919361][ T8937] bridge_slave_0: entered promiscuous mode [ 166.929308][ T8907] hsr_slave_0: entered promiscuous mode [ 166.935743][ T8907] hsr_slave_1: entered promiscuous mode [ 166.941950][ T8907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.949950][ T8907] Cannot create hsr debugfs directory [ 166.968488][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.983249][ T8937] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.990631][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.997812][ T8937] bridge_slave_1: entered allmulticast mode [ 167.004858][ T8937] bridge_slave_1: entered promiscuous mode [ 167.054531][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.118013][ T8937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.157258][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.222254][ T114] usb 3-1: USB disconnect, device number 14 [ 167.234239][ T8937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.353797][ T8937] team0: Port device team_slave_0 added [ 167.387664][ T8937] team0: Port device team_slave_1 added [ 167.539230][ T8937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.546930][ T8937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.573768][ T8937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.601071][ T8937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.610249][ T8937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.636684][ T8937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.689912][ T5825] Bluetooth: hci2: command tx timeout [ 167.828815][ T8937] hsr_slave_0: entered promiscuous mode [ 167.836207][ T8937] hsr_slave_1: entered promiscuous mode [ 167.843064][ T8937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.851479][ T8937] Cannot create hsr debugfs directory [ 167.893640][ T36] bridge_slave_1: left allmulticast mode [ 167.905452][ T36] bridge_slave_1: left promiscuous mode [ 167.915883][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.935458][ T36] bridge_slave_0: left allmulticast mode [ 167.957582][ T36] bridge_slave_0: left promiscuous mode [ 167.958616][ T9101] netlink: 'syz.2.823': attribute type 2 has an invalid length. [ 167.968994][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.982842][ T9101] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.823'. [ 167.997925][ T9101] nbd: must specify a device to reconfigure [ 168.321672][ T114] libceph: connect (1)[c::]:6789 error -101 [ 168.328007][ T114] libceph: mon0 (1)[c::]:6789 connect error [ 168.344159][ T114] libceph: connect (1)[c::]:6789 error -101 [ 168.362458][ T114] libceph: mon0 (1)[c::]:6789 connect error [ 168.371347][ T1169] libceph: connect (1)[c::]:6789 error -101 [ 168.378127][ T1169] libceph: mon0 (1)[c::]:6789 connect error [ 168.597248][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.617763][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.628044][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 168.637872][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 168.648793][ T36] bond0 (unregistering): Released all slaves [ 168.655703][ T1169] libceph: connect (1)[c::]:6789 error -101 [ 168.666065][ T1169] libceph: mon0 (1)[c::]:6789 connect error [ 168.716287][ T30] kauditd_printk_skb: 1096 callbacks suppressed [ 168.716301][ T30] audit: type=1400 audit(1748757922.413:2162): avc: denied { mounton } for pid=9130 comm="syz.2.833" path="/257/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 168.969839][ T5825] Bluetooth: hci3: command tx timeout [ 169.130610][ T9116] ceph: No mds server is up or the cluster is laggy [ 169.133553][ T9122] ceph: No mds server is up or the cluster is laggy [ 169.190184][ T1169] libceph: connect (1)[c::]:6789 error -101 [ 169.196250][ T1169] libceph: mon0 (1)[c::]:6789 connect error [ 169.254187][ T36] hsr_slave_0: left promiscuous mode [ 169.274711][ T36] hsr_slave_1: left promiscuous mode [ 169.281007][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.304302][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.336776][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.347368][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.396912][ T36] veth1_macvtap: left promiscuous mode [ 169.411299][ T36] veth0_macvtap: left promiscuous mode [ 169.417313][ T36] veth1_vlan: left promiscuous mode [ 169.429911][ T36] veth0_vlan: left promiscuous mode [ 169.773018][ T5825] Bluetooth: hci2: command tx timeout [ 169.847777][ T30] audit: type=1400 audit(1748757923.553:2163): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 170.030270][ T36] team0 (unregistering): Port device team_slave_1 removed [ 170.083447][ T36] team0 (unregistering): Port device team_slave_0 removed [ 170.261848][ T30] audit: type=1400 audit(1748757923.973:2164): avc: denied { override_creds } for pid=9175 comm="syz.2.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.665905][ T8907] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.705877][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 170.753532][ T8907] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.820114][ T9187] vcan0: entered promiscuous mode [ 170.825177][ T9187] vcan0: entered allmulticast mode [ 170.846872][ T8907] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.909533][ T8907] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.011860][ T30] audit: type=1400 audit(1748757924.723:2165): avc: denied { getopt } for pid=9182 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.049841][ T5825] Bluetooth: hci3: command tx timeout [ 171.248455][ T8907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.319522][ T8907] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.414862][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.421978][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.497284][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.504402][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.547569][ T30] audit: type=1326 audit(1748757925.253:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af378e969 code=0x7fc00000 [ 171.575432][ T8937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.589023][ T8937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.635994][ T8937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.649572][ T8937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.780374][ T8937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.824792][ T8937] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.848209][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.855391][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.893027][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.900176][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.965871][ T8907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.058893][ T8907] veth0_vlan: entered promiscuous mode [ 172.088003][ T8907] veth1_vlan: entered promiscuous mode [ 172.144483][ T8907] veth0_macvtap: entered promiscuous mode [ 172.156651][ T8907] veth1_macvtap: entered promiscuous mode [ 172.181598][ T8907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.206890][ T8907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.231385][ T8907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.244813][ T8907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.259803][ T8907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.268498][ T8907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.315712][ T30] audit: type=1326 audit(1748757926.013:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.1.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9af378e969 code=0x7fc00000 [ 172.408740][ T8937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.444491][ T30] audit: type=1400 audit(1748757926.153:2168): avc: denied { read } for pid=9241 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.472942][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.494655][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.576925][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.598222][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.711423][ T30] audit: type=1400 audit(1748757926.423:2169): avc: denied { map } for pid=9256 comm="syz.2.861" path="socket:[32104]" dev="sockfs" ino=32104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.779562][ T30] audit: type=1400 audit(1748757926.463:2170): avc: denied { accept } for pid=9256 comm="syz.2.861" path="socket:[32104]" dev="sockfs" ino=32104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.805150][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 172.962011][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 172.974205][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.996002][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.005802][ T8937] veth0_vlan: entered promiscuous mode [ 173.005887][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.019407][ T8937] veth1_vlan: entered promiscuous mode [ 173.034090][ T24] usb 1-1: Product: syz [ 173.044340][ T24] usb 1-1: Manufacturer: syz [ 173.049490][ T24] usb 1-1: SerialNumber: syz [ 173.058266][ T24] usb 1-1: config 0 descriptor?? [ 173.069272][ T24] usb 1-1: selecting invalid altsetting 0 [ 173.086012][ T8937] veth0_macvtap: entered promiscuous mode [ 173.106086][ T8937] veth1_macvtap: entered promiscuous mode [ 173.181484][ T8937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.219055][ T8937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.260970][ T8937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.270691][ T8937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.279422][ T8937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.309808][ T8937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.333963][ T54] usb 1-1: USB disconnect, device number 14 [ 173.522226][ T6414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.589528][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.618301][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.685458][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.707489][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.962568][ T6414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.520360][ T6414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.730434][ T30] audit: type=1400 audit(1748757928.433:2171): avc: denied { create } for pid=9320 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 175.029088][ T6414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.408727][ T6414] bridge_slave_1: left allmulticast mode [ 175.420347][ T6414] bridge_slave_1: left promiscuous mode [ 175.429954][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.483231][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.492263][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.501758][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.516640][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.524500][ T6414] bridge_slave_0: left allmulticast mode [ 175.534497][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.539791][ T6414] bridge_slave_0: left promiscuous mode [ 175.571453][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.784977][ T6414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.795833][ T6414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.806566][ T6414] bond0 (unregistering): Released all slaves [ 176.046568][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 176.108314][ T6414] hsr_slave_0: left promiscuous mode [ 176.122279][ T6414] hsr_slave_1: left promiscuous mode [ 176.128096][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.135962][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.144873][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.152430][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.169666][ T6414] veth1_macvtap: left promiscuous mode [ 176.179385][ T6414] veth0_macvtap: left promiscuous mode [ 176.185746][ T6414] veth1_vlan: left promiscuous mode [ 176.193588][ T6414] veth0_vlan: left promiscuous mode [ 176.843407][ T30] audit: type=1400 audit(1748757930.553:2172): avc: denied { execute } for pid=9365 comm="syz.0.874" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 176.964287][ T6414] team0 (unregistering): Port device team_slave_1 removed [ 176.976062][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.986348][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.003699][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.016811][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.026136][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.047229][ T6414] team0 (unregistering): Port device team_slave_0 removed [ 177.073915][ T30] audit: type=1400 audit(1748757930.783:2173): avc: denied { write } for pid=9378 comm="syz.1.879" path="socket:[33615]" dev="sockfs" ino=33615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.576018][ T30] audit: type=1326 audit(1748757931.283:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.2.882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48d298e969 code=0x0 [ 177.612477][ T5827] Bluetooth: hci2: command tx timeout [ 177.881786][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.897643][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.912898][ T9330] bridge_slave_0: entered allmulticast mode [ 177.930729][ T9330] bridge_slave_0: entered promiscuous mode [ 178.028739][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.065429][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.198249][ T9330] bridge_slave_1: entered allmulticast mode [ 178.250952][ T9330] bridge_slave_1: entered promiscuous mode [ 178.539679][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.560713][ T9413] QAT: Invalid ioctl 1075883590 [ 178.565806][ T9413] QAT: Invalid ioctl 1075883590 [ 178.573840][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.584954][ T9413] QAT: Invalid ioctl 1075883590 [ 178.590098][ T9413] QAT: Invalid ioctl 1075883590 [ 178.595574][ T9413] QAT: Invalid ioctl 1075883590 [ 178.632810][ T9413] QAT: Invalid ioctl 1075883590 [ 178.716889][ T9418] QAT: Invalid ioctl 21559 [ 178.743714][ T9413] QAT: Invalid ioctl 1075883590 [ 178.785284][ T9413] QAT: Invalid ioctl 1075883590 [ 178.826081][ T9413] QAT: Invalid ioctl 1075883590 [ 178.856225][ T9330] team0: Port device team_slave_0 added [ 178.984312][ T9330] team0: Port device team_slave_1 added [ 179.125609][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.133835][ T5819] Bluetooth: hci3: command tx timeout [ 179.145567][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.172061][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.207961][ T6414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.235036][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.242528][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.274568][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.333349][ T6414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.448857][ T6414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.499616][ T9330] hsr_slave_0: entered promiscuous mode [ 179.509670][ T9330] hsr_slave_1: entered promiscuous mode [ 179.529637][ T9330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.549959][ T9330] Cannot create hsr debugfs directory [ 179.562399][ T9374] chnl_net:caif_netlink_parms(): no params data found [ 179.667294][ T6414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.690021][ T5819] Bluetooth: hci2: command tx timeout [ 179.841306][ T5893] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 179.997658][ T30] audit: type=1400 audit(1748757933.683:2175): avc: denied { read write } for pid=9467 comm="syz.0.899" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.031111][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 180.060986][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 180.069583][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.094176][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.105395][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.113288][ T30] audit: type=1400 audit(1748757933.683:2176): avc: denied { open } for pid=9467 comm="syz.0.899" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.137752][ T5893] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 180.146944][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.160611][ T9374] bridge_slave_0: entered allmulticast mode [ 180.167904][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.177001][ T9374] bridge_slave_0: entered promiscuous mode [ 180.186677][ T5893] usb 2-1: config 0 descriptor?? [ 180.198682][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.206570][ T30] audit: type=1400 audit(1748757933.683:2177): avc: denied { read write } for pid=9465 comm="syz.2.898" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.210443][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.237261][ T30] audit: type=1400 audit(1748757933.683:2178): avc: denied { open } for pid=9465 comm="syz.2.898" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.258538][ T9374] bridge_slave_1: entered allmulticast mode [ 180.265133][ T30] audit: type=1400 audit(1748757933.693:2179): avc: denied { ioctl } for pid=9467 comm="syz.0.899" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.279152][ T9374] bridge_slave_1: entered promiscuous mode [ 180.350008][ T5888] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 180.393108][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.450967][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.492272][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 180.492836][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 180.498281][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 180.521161][ T5888] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 180.532695][ T5888] usb 1-1: config 0 has no interface number 0 [ 180.539213][ T5888] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 180.558983][ T5888] usb 1-1: New USB device found, idVendor=100f, idProduct=cb01, bcdDevice=86.ac [ 180.573790][ T5888] usb 1-1: New USB device strings: Mfr=118, Product=44, SerialNumber=0 [ 180.585248][ T5888] usb 1-1: Product: syz [ 180.589413][ T5888] usb 1-1: Manufacturer: syz [ 180.609049][ T5888] usb 1-1: config 0 descriptor?? [ 180.681430][ T5893] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 180.719057][ T9374] team0: Port device team_slave_0 added [ 180.737030][ T6414] bridge_slave_1: left allmulticast mode [ 180.746969][ T6414] bridge_slave_1: left promiscuous mode [ 180.778376][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.827908][ T6414] bridge_slave_0: left allmulticast mode [ 180.843329][ T6414] bridge_slave_0: left promiscuous mode [ 180.849067][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.992872][ T1169] usb 1-1: USB disconnect, device number 15 [ 181.037570][ T30] audit: type=1400 audit(1748757934.743:2180): avc: denied { module_request } for pid=9487 comm="syz.2.902" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 181.210831][ T5818] Bluetooth: hci3: command tx timeout [ 181.338316][ T6414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.349003][ T6414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.358678][ T6414] bond0 (unregistering): Released all slaves [ 181.372872][ T9374] team0: Port device team_slave_1 added [ 181.507890][ T30] audit: type=1400 audit(1748757935.213:2181): avc: denied { watch } for pid=9497 comm="syz.2.903" path="/287/file0" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.688941][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.709786][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.740555][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.762836][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 181.773512][ T5818] Bluetooth: hci2: command tx timeout [ 181.807304][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.815243][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.843185][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.860415][ T9506] vcan0: entered promiscuous mode [ 181.865462][ T9506] vcan0: entered allmulticast mode [ 182.023487][ T6414] hsr_slave_0: left promiscuous mode [ 182.032739][ T6414] hsr_slave_1: left promiscuous mode [ 182.038640][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.044002][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 182.048404][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.062869][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.070322][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.085986][ T6414] veth1_macvtap: left promiscuous mode [ 182.091638][ T6414] veth0_macvtap: left promiscuous mode [ 182.097177][ T6414] veth1_vlan: left promiscuous mode [ 182.103462][ T6414] veth0_vlan: left promiscuous mode [ 182.412012][ T6414] team0 (unregistering): Port device team_slave_1 removed [ 182.440586][ T6414] team0 (unregistering): Port device team_slave_0 removed [ 182.625356][ T5815] usb 2-1: USB disconnect, device number 17 [ 182.823385][ T9374] hsr_slave_0: entered promiscuous mode [ 182.829696][ T9374] hsr_slave_1: entered promiscuous mode [ 182.838645][ T9374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.846300][ T9374] Cannot create hsr debugfs directory [ 182.943669][ T9516] kvm: Disabled LAPIC found during irq injection [ 183.020240][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 183.054192][ T9522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.083554][ T9522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.120062][ T9522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.127576][ T9522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.290880][ T5818] Bluetooth: hci3: command tx timeout [ 183.396698][ T9330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.462059][ T9330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.481455][ T9330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.539976][ T9330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.738395][ T30] audit: type=1400 audit(1748757937.443:2182): avc: denied { read } for pid=9549 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.768907][ T30] audit: type=1400 audit(1748757937.473:2183): avc: denied { write } for pid=9549 comm="syz.1.919" path="socket:[34940]" dev="sockfs" ino=34940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.771995][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.838597][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.844666][ T30] audit: type=1400 audit(1748757937.543:2184): avc: denied { mounton } for pid=9552 comm="syz.1.920" path="/309/file0" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 183.849891][ T5818] Bluetooth: hci2: command tx timeout [ 183.878521][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.885659][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.927694][ T9330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.938578][ T9330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.971604][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.978716][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.132788][ T9374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.153331][ T9374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.165619][ T9374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.176852][ T9374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.388253][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.448031][ T9374] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.489441][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.496594][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.532395][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.552492][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.559627][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.763981][ T9330] veth0_vlan: entered promiscuous mode [ 184.814214][ T9330] veth1_vlan: entered promiscuous mode [ 184.886046][ T9330] veth0_macvtap: entered promiscuous mode [ 184.922754][ T9330] veth1_macvtap: entered promiscuous mode [ 185.003860][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.037742][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.085298][ T9330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.119676][ T9330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.163732][ T9330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.198858][ T9330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.266685][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.350637][ T5893] Process accounting resumed [ 185.370683][ T5818] Bluetooth: hci3: command tx timeout [ 185.573658][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.620131][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.712379][ T6417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.749302][ T6417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.779871][ T1169] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 185.860629][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 185.860645][ T30] audit: type=1400 audit(1748757939.573:2188): avc: denied { bind } for pid=9618 comm="syz.2.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.949959][ T1169] usb 2-1: Using ep0 maxpacket: 16 [ 185.974090][ T1169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.977095][ T30] audit: type=1400 audit(1748757939.573:2189): avc: denied { listen } for pid=9618 comm="syz.2.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.996343][ T1169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.049375][ T1169] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.076764][ T1169] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.088007][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.106017][ T30] audit: type=1400 audit(1748757939.573:2190): avc: denied { getopt } for pid=9618 comm="syz.2.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.137519][ T30] audit: type=1400 audit(1748757939.573:2191): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 186.150509][ T1169] usb 2-1: config 0 descriptor?? [ 186.179240][ T9374] veth0_vlan: entered promiscuous mode [ 186.208367][ T9374] veth1_vlan: entered promiscuous mode [ 186.264118][ T9374] veth0_macvtap: entered promiscuous mode [ 186.282755][ T9374] veth1_macvtap: entered promiscuous mode [ 186.300334][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 186.317849][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.348978][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.386205][ T9374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.399366][ T9374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.413604][ T9374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.423835][ T9374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.462201][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 186.489551][ T9] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 186.502356][ T9] usb 3-1: config 0 has no interface number 0 [ 186.509249][ T9] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.521667][ T9] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.532598][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 186.543988][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.557838][ T9] usb 3-1: config 0 descriptor?? [ 186.581384][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.598148][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.612025][ T54] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 186.638627][ T1169] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input14 [ 186.669373][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.683015][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.686613][ T1169] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 186.780686][ T54] usb 1-1: Using ep0 maxpacket: 8 [ 186.794282][ T54] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 186.818496][ T54] usb 1-1: config 0 has no interface number 0 [ 186.853383][ T54] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.865894][ T54] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 186.908632][ T54] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.921832][ T54] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.941895][ T54] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 186.951158][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.973275][ T54] usb 1-1: config 0 descriptor?? [ 186.978665][ T9] hid (null): report_id 37177 is invalid [ 186.994790][ T9] hid (null): report_id 841674347 is invalid [ 186.998010][ T54] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 187.009862][ T9] hid (null): unknown global tag 0xd [ 187.027926][ T9] hid (null): unknown global tag 0xc [ 187.038041][ T9] hid (null): invalid report_count -951564197 [ 187.051558][ T9] hid (null): unknown global tag 0x3c [ 187.061365][ T1169] usb 2-1: USB disconnect, device number 18 [ 187.079609][ T9] hid (null): report_id 0 is invalid [ 187.108499][ T9] hid (null): invalid report_size 16791 [ 187.117857][ T9] hid (null): unknown global tag 0xd [ 187.132209][ T9] hid (null): unknown global tag 0xe [ 187.137523][ T9] hid (null): unknown global tag 0xc [ 187.144837][ T9] hid (null): unknown global tag 0xc [ 187.248764][ T5864] usb 3-1: USB disconnect, device number 15 [ 187.262992][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.301939][ T54] usb 1-1: USB disconnect, device number 16 [ 187.328434][ T54] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 187.962696][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.986349][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.998420][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.008394][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.018402][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.026862][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.062190][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.153661][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.342335][ T9675] chnl_net:caif_netlink_parms(): no params data found [ 188.356705][ T13] bridge_slave_1: left allmulticast mode [ 188.363449][ T13] bridge_slave_1: left promiscuous mode [ 188.369140][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.378743][ T13] bridge_slave_0: left allmulticast mode [ 188.386441][ T13] bridge_slave_0: left promiscuous mode [ 188.394265][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.801363][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.822949][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.863374][ T13] bond0 (unregistering): Released all slaves [ 189.190548][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.200095][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.213094][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.224847][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.234200][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.294850][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.306241][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.314120][ T9675] bridge_slave_0: entered allmulticast mode [ 189.321528][ T9675] bridge_slave_0: entered promiscuous mode [ 189.371130][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.383887][ T6417] Bluetooth: (null): Invalid header checksum [ 189.390303][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.390449][ T9675] bridge_slave_1: entered allmulticast mode [ 189.404748][ T6417] Bluetooth: (null): Invalid header checksum [ 189.418063][ T9675] bridge_slave_1: entered promiscuous mode [ 189.479582][ T13] hsr_slave_0: left promiscuous mode [ 189.493013][ T3453] Bluetooth: (null): Invalid header checksum [ 189.502327][ T13] hsr_slave_1: left promiscuous mode [ 189.509158][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.519924][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 189.539839][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.553050][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.567134][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.604788][ T3453] Bluetooth: (null): Invalid header checksum [ 189.604826][ T13] veth1_macvtap: left promiscuous mode [ 189.621879][ T13] veth0_macvtap: left promiscuous mode [ 189.627489][ T13] veth1_vlan: left promiscuous mode [ 189.633370][ T13] veth0_vlan: left promiscuous mode [ 189.696626][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 189.713585][ T12] Bluetooth: (null): Invalid header checksum [ 189.721709][ T9] usb 1-1: config 0 has no interfaces? [ 189.728207][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 189.744612][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.757752][ T9] usb 1-1: config 0 descriptor?? [ 189.826804][ T12] Bluetooth: (null): Invalid header checksum [ 189.850482][ T5864] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 189.931282][ T6417] Bluetooth: (null): Invalid header checksum [ 189.997830][ T24] usb 1-1: USB disconnect, device number 17 [ 190.015011][ T5864] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 190.027063][ T5864] usb 2-1: config 0 has no interface number 0 [ 190.048081][ T5864] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 190.065261][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.079861][ T5864] usb 2-1: Product: syz [ 190.084032][ T5864] usb 2-1: Manufacturer: syz [ 190.089679][ T5864] usb 2-1: SerialNumber: syz [ 190.102372][ T5825] Bluetooth: hci2: command tx timeout [ 190.117341][ T5864] usb 2-1: config 0 descriptor?? [ 190.211998][ T13] team0 (unregistering): Port device team_slave_1 removed [ 190.287855][ T13] team0 (unregistering): Port device team_slave_0 removed [ 190.546419][ T5864] usb 2-1: Firmware: major: 56, minor: 92, hardware type: UNKNOWN (224) [ 190.576250][ T9675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.608672][ T9675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.767562][ T5864] usb 2-1: no permanent extended address found, random address set [ 190.838247][ T5864] usb 2-1: atusb_probe: initialization failed, error = -524 [ 190.846446][ T5864] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 190.934379][ T9675] team0: Port device team_slave_0 added [ 190.967644][ T9675] team0: Port device team_slave_1 added [ 191.041597][ T5864] usb 2-1: USB disconnect, device number 19 [ 191.152507][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.159472][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.278049][ T9768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.300028][ T5825] Bluetooth: hci3: command tx timeout [ 191.331049][ T9675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.390343][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.417541][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.468560][ T9675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.594453][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 191.643760][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 191.892502][ T9675] hsr_slave_0: entered promiscuous mode [ 191.914797][ T9675] hsr_slave_1: entered promiscuous mode [ 191.930630][ T9675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.961815][ T9675] Cannot create hsr debugfs directory [ 191.994327][ T9762] syz.0.956 (9762): drop_caches: 2 [ 192.171396][ T5825] Bluetooth: hci2: command tx timeout [ 192.258725][ T9727] chnl_net:caif_netlink_parms(): no params data found [ 192.294256][ T9793] overlay: filesystem on ./file1 not supported [ 192.304168][ T30] audit: type=1400 audit(1748757946.003:2192): avc: denied { mounton } for pid=9792 comm="syz.0.963" path="/302/file0/bus" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 192.548042][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.768023][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.977071][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.024367][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.033039][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.040524][ T9727] bridge_slave_0: entered allmulticast mode [ 193.047813][ T9727] bridge_slave_0: entered promiscuous mode [ 193.060765][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.067879][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.095620][ T9727] bridge_slave_1: entered allmulticast mode [ 193.106109][ T9727] bridge_slave_1: entered promiscuous mode [ 193.191464][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.362356][ T30] audit: type=1326 audit(1748757947.073:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.1.975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9af378e969 code=0x0 [ 193.398415][ T5825] Bluetooth: hci3: command tx timeout [ 193.483763][ T9727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.534964][ T9727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.608369][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.622943][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.636871][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.648439][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.656240][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.773941][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.783015][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.793399][ T1296] lapb8 selects TX queue 0, but real number of TX queues is 0 [ 193.824963][ T9727] team0: Port device team_slave_0 added [ 193.922176][ T9727] team0: Port device team_slave_1 added [ 194.046655][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.056939][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.085576][ T9727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.102133][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.109062][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.137539][ T9727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.250987][ T5825] Bluetooth: hci2: command tx timeout [ 194.285557][ T13] bridge_slave_1: left allmulticast mode [ 194.310090][ T13] bridge_slave_1: left promiscuous mode [ 194.315871][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.326920][ T13] bridge_slave_0: left allmulticast mode [ 194.334997][ T13] bridge_slave_0: left promiscuous mode [ 194.342565][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.597434][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.607425][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.617660][ T13] bond0 (unregistering): Released all slaves [ 194.633787][ T9727] hsr_slave_0: entered promiscuous mode [ 194.640582][ T9727] hsr_slave_1: entered promiscuous mode [ 194.646687][ T9727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.659438][ T9727] Cannot create hsr debugfs directory [ 194.678955][ T9863] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.979'. [ 194.896309][ T9869] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 194.917501][ T9675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 194.953779][ T9869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.969717][ T9872] bond1: (slave gretap1): making interface the new active one [ 194.979520][ T9872] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 194.995659][ T9675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.054825][ T9675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.095916][ T13] hsr_slave_0: left promiscuous mode [ 195.113149][ T13] hsr_slave_1: left promiscuous mode [ 195.129119][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.141555][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.155543][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.174906][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.215937][ T13] veth1_macvtap: left promiscuous mode [ 195.230370][ T13] veth0_macvtap: left promiscuous mode [ 195.245098][ T13] veth1_vlan: left promiscuous mode [ 195.265901][ T13] veth0_vlan: left promiscuous mode [ 195.450083][ T5825] Bluetooth: hci3: command tx timeout [ 195.494242][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 195.690139][ T5825] Bluetooth: hci1: command tx timeout [ 195.846780][ T13] team0 (unregistering): Port device team_slave_1 removed [ 195.876099][ T13] team0 (unregistering): Port device team_slave_0 removed [ 196.110274][ T9675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.333700][ T5825] Bluetooth: hci2: command tx timeout [ 196.444899][ T9848] chnl_net:caif_netlink_parms(): no params data found [ 196.517878][ T30] audit: type=1326 audit(1748757950.223:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9897 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af378e969 code=0x7fc00000 [ 196.706897][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.729955][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.737105][ T9848] bridge_slave_0: entered allmulticast mode [ 196.753300][ T9848] bridge_slave_0: entered promiscuous mode [ 196.762140][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.769269][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.776702][ T9848] bridge_slave_1: entered allmulticast mode [ 196.785140][ T9848] bridge_slave_1: entered promiscuous mode [ 196.841433][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.862176][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.905085][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.969484][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.994102][ T9848] team0: Port device team_slave_0 added [ 197.002154][ T9848] team0: Port device team_slave_1 added [ 197.023957][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.063471][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.070608][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.097490][ T9848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.109360][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.116404][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.142514][ T9848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.166273][ T30] audit: type=1326 audit(1748757950.873:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9897 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9af378e969 code=0x7fc00000 [ 197.211864][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.377592][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.408551][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.427211][ T9727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.452059][ T9848] hsr_slave_0: entered promiscuous mode [ 197.462116][ T9848] hsr_slave_1: entered promiscuous mode [ 197.468245][ T9848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.475866][ T9848] Cannot create hsr debugfs directory [ 197.484682][ T9727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.501022][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.508196][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.525449][ T9727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.532250][ T5818] Bluetooth: hci3: command tx timeout [ 197.547222][ T9727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.567067][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.574204][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.602371][ T5864] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 197.619852][ T54] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 197.772648][ T5818] Bluetooth: hci1: command tx timeout [ 197.779808][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 197.792694][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 197.801128][ T54] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 197.820645][ T54] usb 2-1: config 0 has no interface number 0 [ 197.829642][ T5864] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 197.842121][ T5864] usb 3-1: config 179 has no interface number 0 [ 197.848732][ T5864] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 197.852099][ T13] bridge_slave_1: left allmulticast mode [ 197.861116][ T5864] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 197.880346][ T5864] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.892467][ T54] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 197.894971][ T13] bridge_slave_1: left promiscuous mode [ 197.901768][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.916061][ T5864] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 197.919927][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.937651][ T54] usb 2-1: Product: syz [ 197.941959][ T54] usb 2-1: Manufacturer: syz [ 197.946645][ T54] usb 2-1: SerialNumber: syz [ 197.959894][ T5864] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 197.970652][ T13] bridge_slave_0: left allmulticast mode [ 197.970999][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.980512][ T13] bridge_slave_0: left promiscuous mode [ 197.988745][ T54] usb 2-1: config 0 descriptor?? [ 197.997468][ T54] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 198.009000][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.018344][ T9930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.259820][ T54] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 198.302949][ T54] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 198.337200][ T114] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15 [ 198.548767][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 198.566124][ T5893] usb 3-1: USB disconnect, device number 16 [ 198.566146][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 198.581161][ T5893] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 198.668447][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.679177][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.693740][ T13] bond0 (unregistering): Released all slaves [ 198.771387][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 198.779190][ T54] usb 2-1: USB disconnect, device number 20 [ 198.823242][ T13] tipc: Disabling bearer [ 198.845763][ T54] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 198.858715][ T13] tipc: Left network mode [ 198.910303][ T54] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 198.921723][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.954356][ T54] quatech2 2-1:0.51: device disconnected [ 199.037377][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.088031][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.162917][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.170071][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.297396][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.304573][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.351231][ T9848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.376489][ T13] hsr_slave_0: left promiscuous mode [ 199.383581][ T13] hsr_slave_1: left promiscuous mode [ 199.400511][ T13] veth1_macvtap: left promiscuous mode [ 199.406013][ T13] veth0_macvtap: left promiscuous mode [ 199.413030][ T13] veth1_vlan: left promiscuous mode [ 199.418262][ T13] veth0_vlan: left promiscuous mode [ 199.662335][ T13] team0 (unregistering): Port device team_slave_1 removed [ 199.688489][ T13] team0 (unregistering): Port device team_slave_0 removed [ 199.852116][ T5818] Bluetooth: hci1: command tx timeout [ 199.918763][ T9848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.934439][ T9848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.983968][ T9675] veth0_vlan: entered promiscuous mode [ 199.993155][ T9848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.039214][ T9675] veth1_vlan: entered promiscuous mode [ 200.213329][ T13] IPVS: stop unused estimator thread 0... [ 200.243203][ T9675] veth0_macvtap: entered promiscuous mode [ 200.305434][ T9675] veth1_macvtap: entered promiscuous mode [ 200.372899][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.416511][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.432348][ T9675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.432380][ T9675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.432406][ T9675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.432430][ T9675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.452578][ T9848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.513148][ T9848] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.684663][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.870461][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.877583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.937358][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.944513][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.067131][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.088103][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.215809][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.234468][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.608034][ T9727] veth0_vlan: entered promiscuous mode [ 201.646292][ T9727] veth1_vlan: entered promiscuous mode [ 201.673022][T10029] SELinux: ebitmap: map size 1728053248 does not match my size 64 (high bit was 1952543845) [ 201.678080][ T9848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.683361][T10029] SELinux: failed to load policy [ 201.831997][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.908957][ T9727] veth0_macvtap: entered promiscuous mode [ 201.930079][ T5818] Bluetooth: hci1: command tx timeout [ 202.011840][ T54] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 202.012238][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.030193][ T54] libceph: mon0 (1)[b::]:6789 socket closed (con state V1_BANNER) [ 202.059005][ T9727] veth1_macvtap: entered promiscuous mode [ 202.126249][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.157115][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.181239][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.202641][ T9727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.212039][ T9727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.224409][ T9727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.233584][ T9727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.262666][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.314078][T10020] ceph: No mds server is up or the cluster is laggy [ 202.319928][T10025] ceph: No mds server is up or the cluster is laggy [ 202.350659][ T9848] veth0_vlan: entered promiscuous mode [ 202.446759][ T9848] veth1_vlan: entered promiscuous mode [ 202.515640][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.539437][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.558462][ T9848] veth0_macvtap: entered promiscuous mode [ 202.598949][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.599562][ T9848] veth1_macvtap: entered promiscuous mode [ 202.610478][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.686673][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.711460][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.732905][ T9848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.747364][ T9848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.756331][ T9848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.765153][ T9848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.799247][ T13] bridge_slave_1: left allmulticast mode [ 202.804959][ T13] bridge_slave_1: left promiscuous mode [ 202.813062][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.822467][ T13] bridge_slave_0: left allmulticast mode [ 202.828107][ T13] bridge_slave_0: left promiscuous mode [ 202.835179][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.350703][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.362912][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.383365][ T13] bond0 (unregistering): Released all slaves [ 203.420484][T10069] bond0: (slave syz_tun): Releasing backup interface [ 203.437726][T10069] bridge_slave_0: left allmulticast mode [ 203.445627][T10069] bridge_slave_0: left promiscuous mode [ 203.459117][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.481528][T10069] bridge_slave_1: left allmulticast mode [ 203.487227][T10069] bridge_slave_1: left promiscuous mode [ 203.493067][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.519193][T10069] bond0: (slave bond_slave_0): Releasing backup interface [ 203.519688][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.536867][T10069] bond0: (slave bond_slave_1): Releasing backup interface [ 203.537286][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.553217][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.561232][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.566862][T10069] team0: Port device team_slave_0 removed [ 203.568651][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.584381][T10069] team0: Port device team_slave_1 removed [ 203.593603][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.601190][T10069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.609383][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.616936][T10069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.626073][T10069] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 203.633694][T10069] batman_adv: batadv0: Removing interface: virt_wifi0 [ 203.646726][T10069] bond1: (slave gretap1): Releasing active interface [ 203.914099][ T13] hsr_slave_0: left promiscuous mode [ 203.924863][ T13] hsr_slave_1: left promiscuous mode [ 203.934407][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.942229][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.950692][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.958066][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.981451][ T13] veth1_macvtap: left promiscuous mode [ 203.986968][ T13] veth0_macvtap: left promiscuous mode [ 203.995419][ T13] veth1_vlan: left promiscuous mode [ 204.000779][ T13] veth0_vlan: left promiscuous mode [ 204.471350][ T30] audit: type=1400 audit(1748757958.183:2196): avc: denied { append } for pid=10103 comm="syz.2.1008" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.518957][ T13] team0 (unregistering): Port device team_slave_1 removed [ 204.601437][ T13] team0 (unregistering): Port device team_slave_0 removed [ 204.884499][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.901903][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.911364][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.926986][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.934684][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.969240][T10112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.312419][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.333564][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.401789][ T5888] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 205.422925][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.432347][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.572389][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 205.594232][ T5888] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 205.607139][ T5888] usb 2-1: config 0 has no interface number 0 [ 205.617700][ T5888] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.628900][ T5818] Bluetooth: hci2: command tx timeout [ 205.643483][ T5888] usb 2-1: config 0 interface 85 has no altsetting 0 [ 205.652128][ T5888] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 205.669980][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.677974][ T5888] usb 2-1: Product: syz [ 205.683314][ T5888] usb 2-1: Manufacturer: syz [ 205.687919][ T5888] usb 2-1: SerialNumber: syz [ 205.699068][ T5888] usb 2-1: config 0 descriptor?? [ 205.737373][T10074] chnl_net:caif_netlink_parms(): no params data found [ 205.817801][T10117] chnl_net:caif_netlink_parms(): no params data found [ 205.865991][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.970066][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.977288][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.984742][T10074] bridge_slave_0: entered allmulticast mode [ 205.993259][T10074] bridge_slave_0: entered promiscuous mode [ 206.001432][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.008530][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.016428][T10074] bridge_slave_1: entered allmulticast mode [ 206.023554][T10074] bridge_slave_1: entered promiscuous mode [ 206.030454][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.037527][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.044814][T10117] bridge_slave_0: entered allmulticast mode [ 206.052046][T10117] bridge_slave_0: entered promiscuous mode [ 206.069550][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.096026][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.104967][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.112286][T10117] bridge_slave_1: entered allmulticast mode [ 206.119182][T10117] bridge_slave_1: entered promiscuous mode [ 206.157851][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.175964][T10074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.199345][T10074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.222116][T10117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.256393][T10074] team0: Port device team_slave_0 added [ 206.283210][T10117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.318800][ T5888] appletouch 2-1:0.85: Geyser mode initialized. [ 206.351829][ T5888] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input16 [ 206.362576][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.382657][ C0] [ 206.384986][ C0] ======================================================== [ 206.392148][ C0] WARNING: possible irq lock inversion dependency detected [ 206.399310][ C0] 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 Not tainted [ 206.406051][ C0] -------------------------------------------------------- [ 206.413240][ C0] acpid/5172 just changed the state of lock: [ 206.419220][ C0] ffff8880497b6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x70/0xb0 [ 206.428218][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 206.436535][ C0] (tasklist_lock){.+.+}-{3:3} [ 206.436569][ C0] [ 206.436569][ C0] [ 206.436569][ C0] and interrupts could create inverse lock ordering between them. [ 206.436569][ C0] [ 206.455623][ C0] [ 206.455623][ C0] other info that might help us debug this: [ 206.463681][ C0] Chain exists of: [ 206.463681][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 206.463681][ C0] [ 206.477263][ C0] Possible interrupt unsafe locking scenario: [ 206.477263][ C0] [ 206.485576][ C0] CPU0 CPU1 [ 206.490923][ C0] ---- ---- [ 206.496280][ C0] lock(tasklist_lock); [ 206.500506][ C0] local_irq_disable(); [ 206.507238][ C0] lock(&dev->event_lock#2); [ 206.514424][ C0] lock(&client->buffer_lock); [ 206.521773][ C0] [ 206.525212][ C0] lock(&dev->event_lock#2); [ 206.530057][ C0] [ 206.530057][ C0] *** DEADLOCK *** [ 206.530057][ C0] [ 206.538177][ C0] 2 locks held by acpid/5172: [ 206.542831][ C0] #0: ffff8880330fe160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x23/0x140 [ 206.553091][ C0] #1: ffff8880497b62c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x5c/0x390 [ 206.562653][ C0] [ 206.562653][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 206.572014][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 206.577473][ C0] HARDIRQ-ON-R at: [ 206.581782][ C0] lock_acquire+0x179/0x350 [ 206.588618][ C0] _raw_read_lock+0x5f/0x70 [ 206.595452][ C0] __do_wait+0x105/0x890 [ 206.602025][ C0] do_wait+0x21e/0x5a0 [ 206.608426][ C0] kernel_wait+0x9f/0x160 [ 206.615084][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 206.623314][ C0] process_one_work+0x9cf/0x1b70 [ 206.630585][ C0] worker_thread+0x6c8/0xf10 [ 206.637504][ C0] kthread+0x3c5/0x780 [ 206.643902][ C0] ret_from_fork+0x5d7/0x6f0 [ 206.650823][ C0] ret_from_fork_asm+0x1a/0x30 [ 206.657915][ C0] SOFTIRQ-ON-R at: [ 206.662224][ C0] lock_acquire+0x179/0x350 [ 206.669056][ C0] _raw_read_lock+0x5f/0x70 [ 206.675885][ C0] __do_wait+0x105/0x890 [ 206.682457][ C0] do_wait+0x21e/0x5a0 [ 206.688852][ C0] kernel_wait+0x9f/0x160 [ 206.695511][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 206.703737][ C0] process_one_work+0x9cf/0x1b70 [ 206.711006][ C0] worker_thread+0x6c8/0xf10 [ 206.717926][ C0] kthread+0x3c5/0x780 [ 206.724325][ C0] ret_from_fork+0x5d7/0x6f0 [ 206.731245][ C0] ret_from_fork_asm+0x1a/0x30 [ 206.738337][ C0] INITIAL USE at: [ 206.742557][ C0] lock_acquire+0x179/0x350 [ 206.749302][ C0] _raw_write_lock_irq+0x36/0x50 [ 206.756483][ C0] copy_process+0x4caf/0x76a0 [ 206.763398][ C0] kernel_clone+0xfc/0x960 [ 206.770051][ C0] user_mode_thread+0xc7/0x110 [ 206.777052][ C0] rest_init+0x23/0x2b0 [ 206.783454][ C0] start_kernel+0x3ee/0x4d0 [ 206.790205][ C0] x86_64_start_reservations+0x18/0x30 [ 206.797908][ C0] x86_64_start_kernel+0x130/0x190 [ 206.805264][ C0] common_startup_64+0x13e/0x148 [ 206.812449][ C0] INITIAL READ USE at: [ 206.817103][ C0] lock_acquire+0x179/0x350 [ 206.824290][ C0] _raw_read_lock+0x5f/0x70 [ 206.831467][ C0] __do_wait+0x105/0x890 [ 206.838398][ C0] do_wait+0x21e/0x5a0 [ 206.845155][ C0] kernel_wait+0x9f/0x160 [ 206.852169][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 206.860749][ C0] process_one_work+0x9cf/0x1b70 [ 206.868373][ C0] worker_thread+0x6c8/0xf10 [ 206.875645][ C0] kthread+0x3c5/0x780 [ 206.882394][ C0] ret_from_fork+0x5d7/0x6f0 [ 206.889664][ C0] ret_from_fork_asm+0x1a/0x30 [ 206.897107][ C0] } [ 206.899934][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 206.907991][ C0] ... acquired at: [ 206.912119][ C0] _raw_read_lock+0x5f/0x70 [ 206.916778][ C0] send_sigurg+0xed/0xc80 [ 206.921269][ C0] sk_send_sigurg+0x76/0x360 [ 206.926015][ C0] unix_stream_sendmsg+0xeb3/0x11d0 [ 206.931371][ C0] ____sys_sendmsg+0xa98/0xc70 [ 206.936297][ C0] ___sys_sendmsg+0x134/0x1d0 [ 206.941132][ C0] __sys_sendmsg+0x16d/0x220 [ 206.945881][ C0] do_syscall_64+0xcd/0x4c0 [ 206.950544][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.956590][ C0] [ 206.958891][ C0] -> (&f_owner->lock){....}-{3:3} { [ 206.964350][ C0] INITIAL USE at: [ 206.968485][ C0] lock_acquire+0x179/0x350 [ 206.975057][ C0] _raw_write_lock_irq+0x36/0x50 [ 206.982074][ C0] __f_setown+0x61/0x3c0 [ 206.988385][ C0] fcntl_dirnotify+0x78f/0xb50 [ 206.995220][ C0] do_fcntl+0xe62/0x15a0 [ 207.001535][ C0] __x64_sys_fcntl+0x163/0x200 [ 207.008399][ C0] do_syscall_64+0xcd/0x4c0 [ 207.014973][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.022933][ C0] INITIAL READ USE at: [ 207.027503][ C0] lock_acquire+0x179/0x350 [ 207.034511][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 207.042211][ C0] send_sigio+0x31/0x3e0 [ 207.048959][ C0] dnotify_handle_event+0x15e/0x2b0 [ 207.056662][ C0] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 207.065574][ C0] fsnotify+0x132f/0x1dc0 [ 207.072401][ C0] __fsnotify_parent+0x915/0xc40 [ 207.079836][ C0] vfs_copy_file_range+0xc1d/0x15f0 [ 207.087540][ C0] __do_sys_copy_file_range+0x1a1/0x460 [ 207.095589][ C0] do_syscall_64+0xcd/0x4c0 [ 207.102595][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.110989][ C0] } [ 207.113729][ C0] ... key at: [] __key.1+0x0/0x40 [ 207.121086][ C0] ... acquired at: [ 207.125128][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 207.130485][ C0] send_sigio+0x31/0x3e0 [ 207.134888][ C0] kill_fasync+0x214/0x510 [ 207.139465][ C0] lease_break_callback+0x23/0x30 [ 207.144649][ C0] __break_lease+0x671/0x1810 [ 207.149481][ C0] do_dentry_open+0x6e1/0x1c10 [ 207.154398][ C0] vfs_open+0x82/0x3f0 [ 207.158623][ C0] path_openat+0x1de4/0x2cb0 [ 207.163370][ C0] do_filp_open+0x20b/0x470 [ 207.168027][ C0] do_sys_openat2+0x11b/0x1d0 [ 207.172862][ C0] __x64_sys_creat+0xcc/0x120 [ 207.177700][ C0] do_syscall_64+0xcd/0x4c0 [ 207.182362][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.188407][ C0] [ 207.190710][ C0] -> (&new->fa_lock){....}-{3:3} { [ 207.195989][ C0] INITIAL USE at: [ 207.200033][ C0] lock_acquire+0x179/0x350 [ 207.206434][ C0] _raw_write_lock_irq+0x36/0x50 [ 207.213263][ C0] fasync_remove_entry+0xb2/0x1e0 [ 207.220194][ C0] fasync_helper+0xaf/0xd0 [ 207.226518][ C0] lease_modify+0x232/0x500 [ 207.232911][ C0] locks_remove_file+0x29e/0x5c0 [ 207.239744][ C0] __fput+0x351/0xb70 [ 207.245639][ C0] fput_close_sync+0x118/0x260 [ 207.252319][ C0] __x64_sys_close+0x8b/0x120 [ 207.258903][ C0] do_syscall_64+0xcd/0x4c0 [ 207.265307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.273103][ C0] INITIAL READ USE at: [ 207.277589][ C0] lock_acquire+0x179/0x350 [ 207.284426][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 207.291960][ C0] kill_fasync+0x138/0x510 [ 207.298714][ C0] lease_break_callback+0x23/0x30 [ 207.306073][ C0] __break_lease+0x671/0x1810 [ 207.313078][ C0] do_dentry_open+0x6e1/0x1c10 [ 207.320173][ C0] vfs_open+0x82/0x3f0 [ 207.326574][ C0] path_openat+0x1de4/0x2cb0 [ 207.333492][ C0] do_filp_open+0x20b/0x470 [ 207.340323][ C0] do_sys_openat2+0x11b/0x1d0 [ 207.347331][ C0] __x64_sys_creat+0xcc/0x120 [ 207.354341][ C0] do_syscall_64+0xcd/0x4c0 [ 207.361176][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.369395][ C0] } [ 207.372047][ C0] ... key at: [] __key.0+0x0/0x40 [ 207.379317][ C0] ... acquired at: [ 207.383272][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 207.388629][ C0] kill_fasync+0x138/0x510 [ 207.393203][ C0] evdev_pass_values+0x619/0x9b0 [ 207.398299][ C0] evdev_events+0x1bb/0x390 [ 207.402959][ C0] input_pass_values+0x6c7/0x890 [ 207.408057][ C0] input_handle_event+0xf00/0x14d0 [ 207.413325][ C0] input_inject_event+0x1cd/0x390 [ 207.418506][ C0] evdev_write+0x457/0x750 [ 207.423081][ C0] vfs_write+0x29d/0x1150 [ 207.427564][ C0] ksys_write+0x1f8/0x250 [ 207.432047][ C0] do_syscall_64+0xcd/0x4c0 [ 207.436709][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.442756][ C0] [ 207.445057][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 207.450863][ C0] INITIAL USE at: [ 207.454821][ C0] lock_acquire+0x179/0x350 [ 207.461047][ C0] _raw_spin_lock+0x2e/0x40 [ 207.467274][ C0] evdev_pass_values+0x10e/0x9b0 [ 207.473951][ C0] evdev_events+0x1bb/0x390 [ 207.480175][ C0] input_pass_values+0x6c7/0x890 [ 207.486831][ C0] input_handle_event+0xf00/0x14d0 [ 207.493662][ C0] input_inject_event+0x1cd/0x390 [ 207.500410][ C0] evdev_write+0x457/0x750 [ 207.506545][ C0] vfs_write+0x29d/0x1150 [ 207.512596][ C0] ksys_write+0x1f8/0x250 [ 207.518646][ C0] do_syscall_64+0xcd/0x4c0 [ 207.524885][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.532496][ C0] } [ 207.535061][ C0] ... key at: [] __key.1+0x0/0x40 [ 207.542247][ C0] ... acquired at: [ 207.546117][ C0] _raw_spin_lock+0x2e/0x40 [ 207.550774][ C0] evdev_pass_values+0x10e/0x9b0 [ 207.555868][ C0] evdev_events+0x1bb/0x390 [ 207.560528][ C0] input_pass_values+0x6c7/0x890 [ 207.565622][ C0] input_handle_event+0xf00/0x14d0 [ 207.570888][ C0] input_inject_event+0x1cd/0x390 [ 207.576081][ C0] evdev_write+0x457/0x750 [ 207.580666][ C0] vfs_write+0x29d/0x1150 [ 207.585150][ C0] ksys_write+0x1f8/0x250 [ 207.589634][ C0] do_syscall_64+0xcd/0x4c0 [ 207.594296][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.600346][ C0] [ 207.602650][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 207.608197][ C0] IN-SOFTIRQ-W at: [ 207.612156][ C0] lock_acquire+0x179/0x350 [ 207.618295][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 207.625125][ C0] input_event+0x70/0xb0 [ 207.631002][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 207.638199][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 207.645208][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 207.652043][ C0] dummy_timer+0x180e/0x3a20 [ 207.658276][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 207.665112][ C0] hrtimer_run_softirq+0x17d/0x350 [ 207.671860][ C0] handle_softirqs+0x219/0x8e0 [ 207.678266][ C0] __irq_exit_rcu+0x109/0x170 [ 207.684592][ C0] irq_exit_rcu+0x9/0x30 [ 207.690479][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 207.697747][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.705360][ C0] _raw_spin_unlock_irqrestore+0x31/0x80 [ 207.712626][ C0] dummy_urb_enqueue+0x558/0x920 [ 207.719201][ C0] usb_hcd_submit_urb+0x25b/0x1c60 [ 207.725951][ C0] usb_submit_urb+0x87c/0x1790 [ 207.732345][ C0] atp_open+0x60/0xd0 [ 207.737975][ C0] input_open_device+0x233/0x390 [ 207.744547][ C0] mousedev_open_device+0xe0/0x140 [ 207.751289][ C0] mousedev_open+0x2fa/0x580 [ 207.757522][ C0] chrdev_open+0x231/0x6a0 [ 207.763574][ C0] do_dentry_open+0x741/0x1c10 [ 207.769984][ C0] vfs_open+0x82/0x3f0 [ 207.775687][ C0] path_openat+0x1de4/0x2cb0 [ 207.781913][ C0] do_filp_open+0x20b/0x470 [ 207.788050][ C0] do_sys_openat2+0x11b/0x1d0 [ 207.794362][ C0] __x64_sys_openat+0x174/0x210 [ 207.800850][ C0] do_syscall_64+0xcd/0x4c0 [ 207.806991][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.814515][ C0] INITIAL USE at: [ 207.818405][ C0] lock_acquire+0x179/0x350 [ 207.824457][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 207.831202][ C0] input_inject_event+0x9f/0x390 [ 207.837698][ C0] led_set_brightness+0x214/0x290 [ 207.844268][ C0] kbd_led_trigger_activate+0xcb/0x110 [ 207.851278][ C0] led_trigger_set+0x597/0xc50 [ 207.857589][ C0] led_trigger_set_default+0x1bd/0x2a0 [ 207.864597][ C0] led_classdev_register_ext+0x7b8/0xa10 [ 207.871776][ C0] input_leds_connect+0x552/0x8e0 [ 207.878343][ C0] input_attach_handler.isra.0+0x184/0x260 [ 207.885694][ C0] input_register_device+0xa84/0x1130 [ 207.892626][ C0] atkbd_connect+0x5da/0xa20 [ 207.898763][ C0] serio_driver_probe+0x77/0xb0 [ 207.905158][ C0] really_probe+0x23e/0xa90 [ 207.911214][ C0] __driver_probe_device+0x1de/0x440 [ 207.918053][ C0] driver_probe_device+0x4c/0x1b0 [ 207.924626][ C0] __driver_attach+0x283/0x580 [ 207.930939][ C0] bus_for_each_dev+0x13b/0x1d0 [ 207.937335][ C0] serio_handle_event+0x247/0xa50 [ 207.943904][ C0] process_one_work+0x9cf/0x1b70 [ 207.950391][ C0] worker_thread+0x6c8/0xf10 [ 207.956529][ C0] kthread+0x3c5/0x780 [ 207.962149][ C0] ret_from_fork+0x5d7/0x6f0 [ 207.968286][ C0] ret_from_fork_asm+0x1a/0x30 [ 207.974595][ C0] } [ 207.977072][ C0] ... key at: [] __key.7+0x0/0x40 [ 207.984173][ C0] ... acquired at: [ 207.987955][ C0] __lock_acquire+0x8a5/0x1c90 [ 207.992876][ C0] lock_acquire+0x179/0x350 [ 207.997540][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 208.002908][ C0] input_event+0x70/0xb0 [ 208.007308][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 208.013015][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 208.018550][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 208.023908][ C0] dummy_timer+0x180e/0x3a20 [ 208.028659][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 208.034019][ C0] hrtimer_run_softirq+0x17d/0x350 [ 208.039291][ C0] handle_softirqs+0x219/0x8e0 [ 208.044220][ C0] __irq_exit_rcu+0x109/0x170 [ 208.049051][ C0] irq_exit_rcu+0x9/0x30 [ 208.053446][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 208.059235][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.065374][ C0] _raw_spin_unlock_irqrestore+0x31/0x80 [ 208.071162][ C0] dummy_urb_enqueue+0x558/0x920 [ 208.076265][ C0] usb_hcd_submit_urb+0x25b/0x1c60 [ 208.081539][ C0] usb_submit_urb+0x87c/0x1790 [ 208.086456][ C0] atp_open+0x60/0xd0 [ 208.090601][ C0] input_open_device+0x233/0x390 [ 208.095692][ C0] mousedev_open_device+0xe0/0x140 [ 208.100957][ C0] mousedev_open+0x2fa/0x580 [ 208.105702][ C0] chrdev_open+0x231/0x6a0 [ 208.110279][ C0] do_dentry_open+0x741/0x1c10 [ 208.115201][ C0] vfs_open+0x82/0x3f0 [ 208.119428][ C0] path_openat+0x1de4/0x2cb0 [ 208.124175][ C0] do_filp_open+0x20b/0x470 [ 208.128834][ C0] do_sys_openat2+0x11b/0x1d0 [ 208.133672][ C0] __x64_sys_openat+0x174/0x210 [ 208.138683][ C0] do_syscall_64+0xcd/0x4c0 [ 208.143346][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.149393][ C0] [ 208.151705][ C0] [ 208.151705][ C0] stack backtrace: [ 208.157573][ C0] CPU: 0 UID: 0 PID: 5172 Comm: acpid Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 208.157591][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.157601][ C0] Call Trace: [ 208.157606][ C0] [ 208.157611][ C0] dump_stack_lvl+0x116/0x1f0 [ 208.157631][ C0] print_irq_inversion_bug.part.0+0x212/0x270 [ 208.157652][ C0] mark_lock+0x2e5/0x610 [ 208.157673][ C0] __lock_acquire+0x8a5/0x1c90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 208.157692][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 208.157712][ C0] lock_acquire+0x179/0x350 [ 208.157730][ C0] ? input_event+0x70/0xb0 [ 208.157749][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 208.157765][ C0] ? input_event+0x70/0xb0 [ 208.157781][ C0] input_event+0x70/0xb0 [ 208.157798][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 208.157821][ C0] ? find_held_lock+0x2b/0x80 [ 208.157834][ C0] ? __pfx_atp_complete_geyser_3_4+0x10/0x10 [ 208.157860][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 208.157883][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 208.157904][ C0] dummy_timer+0x180e/0x3a20 [ 208.157936][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 208.157957][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 208.157978][ C0] ? mark_held_locks+0x49/0x80 [ 208.157995][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 208.158013][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 208.158033][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 208.158058][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 208.158080][ C0] ? read_tsc+0x9/0x20 [ 208.158105][ C0] hrtimer_run_softirq+0x17d/0x350 [ 208.158128][ C0] handle_softirqs+0x219/0x8e0 [ 208.158152][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 208.158177][ C0] __irq_exit_rcu+0x109/0x170 [ 208.158189][ C0] irq_exit_rcu+0x9/0x30 [ 208.158201][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 208.158218][ C0] [ 208.158222][ C0] [ 208.158227][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.158243][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 208.158266][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 5c 18 f6 48 89 df e8 1e b0 18 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 d5 08 f6 65 8b 05 ee a9 4b 08 85 c0 74 16 5b [ 208.158281][ C0] RSP: 0018:ffffc90003407718 EFLAGS: 00000246 [ 208.158294][ C0] RAX: 0000000000000002 RBX: ffff888029a60000 RCX: 0000000000000006 [ 208.158303][ C0] RDX: 0000000000000000 RSI: ffffffff8de092c5 RDI: ffffffff8c1544e0 [ 208.158313][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 208.158321][ C0] R10: ffffffff90a7b357 R11: 0000000000000001 R12: 0000000000000001 [ 208.158331][ C0] R13: ffff888144f28470 R14: ffff888144f28408 R15: 0000000000000000 [ 208.158346][ C0] dummy_urb_enqueue+0x558/0x920 [ 208.158370][ C0] usb_hcd_submit_urb+0x25b/0x1c60 [ 208.158391][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 208.158409][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 208.158428][ C0] usb_submit_urb+0x87c/0x1790 [ 208.158444][ C0] atp_open+0x60/0xd0 [ 208.158463][ C0] input_open_device+0x233/0x390 [ 208.158478][ C0] ? __pfx_atp_open+0x10/0x10 [ 208.158498][ C0] mousedev_open_device+0xe0/0x140 [ 208.158513][ C0] mousedev_open+0x2fa/0x580 [ 208.158528][ C0] ? __pfx_mousedev_open+0x10/0x10 [ 208.158542][ C0] chrdev_open+0x231/0x6a0 [ 208.158559][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 208.158578][ C0] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 208.158597][ C0] do_dentry_open+0x741/0x1c10 [ 208.158613][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 208.158632][ C0] vfs_open+0x82/0x3f0 [ 208.158652][ C0] path_openat+0x1de4/0x2cb0 [ 208.158672][ C0] ? __pfx_path_openat+0x10/0x10 [ 208.158689][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 208.158707][ C0] do_filp_open+0x20b/0x470 [ 208.158724][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 208.158747][ C0] ? alloc_fd+0x471/0x7d0 [ 208.158766][ C0] do_sys_openat2+0x11b/0x1d0 [ 208.158785][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.158805][ C0] ? sigprocmask+0xef/0x330 [ 208.158827][ C0] __x64_sys_openat+0x174/0x210 [ 208.158848][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.158868][ C0] ? ksys_read+0x1ac/0x250 [ 208.158886][ C0] do_syscall_64+0xcd/0x4c0 [ 208.158905][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.158920][ C0] RIP: 0033:0x7f7f3a092407 [ 208.158931][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 208.158945][ C0] RSP: 002b:00007ffec3a5a1e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 208.158958][ C0] RAX: ffffffffffffffda RBX: 00007f7f3a008740 RCX: 00007f7f3a092407 [ 208.158968][ C0] RDX: 0000000000080800 RSI: 00007ffec3a5a3f0 RDI: ffffffffffffff9c [ 208.158978][ C0] RBP: 00007ffec3a5a3f0 R08: 0000000000000000 R09: 0000000000000000 [ 208.158986][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020 [ 208.158995][ C0] R13: 00007ffec3a5a4f0 R14: 000055801604c7fe R15: 00007ffec3a5a4f0 [ 208.159009][ C0] [ 208.170135][ T5818] Bluetooth: hci2: command tx timeout [ 208.191990][ T5825] Bluetooth: hci3: command tx timeout [ 208.459980][ T30] audit: type=1400 audit(1748757962.013:2197): avc: denied { write } for pid=10153 comm="syz.2.1012" name="mcfilter" dev="proc" ino=4026533035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 208.473184][T10074] team0: Port device team_slave_1 added [ 208.494738][ T5888] usb 2-1: USB disconnect, device number 21 [ 208.496928][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 208.845425][ T5888] appletouch 2-1:0.85: input: appletouch disconnected [ 209.107629][ T13] bridge_slave_1: left allmulticast mode [ 209.114583][ T13] bridge_slave_1: left promiscuous mode [ 209.120327][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.128356][ T13] bridge_slave_0: left allmulticast mode [ 209.135164][ T13] bridge_slave_0: left promiscuous mode [ 209.141168][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.209528][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.220120][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.229082][ T13] bond0 (unregistering): Released all slaves [ 209.447468][ T13] hsr_slave_0: left promiscuous mode [ 209.454857][ T13] hsr_slave_1: left promiscuous mode [ 209.460671][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.468102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.479430][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.486959][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.499065][ T13] veth1_macvtap: left promiscuous mode [ 209.505819][ T13] veth0_macvtap: left promiscuous mode [ 209.511346][ T13] veth1_vlan: left promiscuous mode [ 209.516546][ T13] veth0_vlan: left promiscuous mode [ 209.602121][ T13] team0 (unregistering): Port device team_slave_1 removed [ 209.617753][ T13] team0 (unregistering): Port device team_slave_0 removed [ 209.941237][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.995738][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.035770][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.095036][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.184967][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.226615][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.284564][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.347313][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.462356][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.492525][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.543717][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.602665][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.659578][ T13] bridge_slave_1: left allmulticast mode [ 210.665581][ T13] bridge_slave_1: left promiscuous mode [ 210.671496][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.679171][ T13] bridge_slave_0: left allmulticast mode [ 210.684996][ T13] bridge_slave_0: left promiscuous mode [ 210.691360][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.699675][ T13] bridge_slave_1: left allmulticast mode [ 210.705357][ T13] bridge_slave_1: left promiscuous mode [ 210.711453][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.719055][ T13] bridge_slave_0: left allmulticast mode [ 210.724793][ T13] bridge_slave_0: left promiscuous mode [ 210.730727][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.738957][ T13] bridge_slave_1: left allmulticast mode [ 210.744768][ T13] bridge_slave_1: left promiscuous mode [ 210.750501][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.757975][ T13] bridge_slave_0: left allmulticast mode [ 210.763793][ T13] bridge_slave_0: left promiscuous mode [ 210.769384][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.777811][ T13] bridge_slave_1: left allmulticast mode [ 210.783591][ T13] bridge_slave_1: left promiscuous mode [ 210.789153][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.797015][ T13] bridge_slave_0: left allmulticast mode [ 210.802672][ T13] bridge_slave_0: left promiscuous mode [ 210.808244][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.903535][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.912808][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.921892][ T13] bond0 (unregistering): Released all slaves [ 211.040003][ T13] bond0 (unregistering): Released all slaves [ 211.096747][ T13] bond1 (unregistering): Released all slaves [ 211.242727][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.252618][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.261767][ T13] bond0 (unregistering): Released all slaves [ 211.270149][ T13] bond1 (unregistering): Released all slaves [ 211.313178][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.322607][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.331660][ T13] bond0 (unregistering): Released all slaves [ 211.393414][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.402869][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.411896][ T13] bond0 (unregistering): Released all slaves [ 211.854818][ T13] hsr_slave_0: left promiscuous mode [ 211.860500][ T13] hsr_slave_1: left promiscuous mode [ 211.866088][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.876507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.884757][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.893401][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.902839][ T13] hsr_slave_0: left promiscuous mode [ 211.908428][ T13] hsr_slave_1: left promiscuous mode [ 211.916997][ T13] hsr_slave_0: left promiscuous mode [ 211.922723][ T13] hsr_slave_1: left promiscuous mode [ 211.928882][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.937791][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.945380][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.954597][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.968548][ T13] veth1_macvtap: left promiscuous mode [ 211.975748][ T13] veth0_macvtap: left promiscuous mode [ 211.981331][ T13] veth1_vlan: left promiscuous mode [ 211.986585][ T13] veth0_vlan: left promiscuous mode [ 211.992712][ T13] veth1_macvtap: left promiscuous mode [ 211.998198][ T13] veth0_macvtap: left promiscuous mode [ 212.007834][ T13] veth1_macvtap: left promiscuous mode [ 212.013437][ T13] veth0_macvtap: left promiscuous mode [ 212.018962][ T13] veth1_vlan: left promiscuous mode [ 212.025311][ T13] veth0_vlan: left promiscuous mode [ 212.179442][ T13] team0 (unregistering): Port device team_slave_1 removed [ 212.197754][ T13] team0 (unregistering): Port device team_slave_0 removed [ 212.466839][ T13] team0 (unregistering): Port device team_slave_1 removed [ 212.483456][ T13] team0 (unregistering): Port device team_slave_0 removed [ 212.530915][ T13] team0 (unregistering): Port device team_slave_1 removed [ 212.545320][ T13] team0 (unregistering): Port device team_slave_0 removed