last executing test programs: 19.9919518s ago: executing program 2 (id=215): io_uring_setup(0x1de1, &(0x7f00000002c0)={0x0, 0x43a3, 0x800, 0x2, 0x1ef}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 19.917704701s ago: executing program 2 (id=217): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$kcm(0x2, 0x2, 0x73) 19.861531997s ago: executing program 2 (id=218): pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) fcntl$setpipe(r0, 0x407, 0x9) close(r0) 19.611747541s ago: executing program 2 (id=221): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) 10.731043936s ago: executing program 2 (id=221): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) 3.913987856s ago: executing program 1 (id=337): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0x9c, 0x8, 0x3, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 3.158413576s ago: executing program 1 (id=341): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x0, 'e'}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}, @main=@item_012={0x2, 0x0, 0x9, "f792"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f00000006c0)=0x2) syz_open_dev$usbfs(0x0, 0x76, 0x101301) 3.007901748s ago: executing program 3 (id=342): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0xb18a91bcbebec8c0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.985846137s ago: executing program 3 (id=343): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.840165237s ago: executing program 4 (id=344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b0001006578746864720000340002"], 0x248}}, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 2.719767257s ago: executing program 4 (id=346): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1b, "4d26768012e32aebcfd04983e65be50f7cee2e9a0197afd2fa0eaf"}, 0x0) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 2.175895491s ago: executing program 0 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) readahead(0xffffffffffffffff, 0x3, 0x7fff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r2, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) 2.099739868s ago: executing program 0 (id=353): mkdir(0x0, 0x0) chdir(0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r1 = socket$phonet(0x23, 0x2, 0x1) sendfile(r1, r0, &(0x7f0000000080), 0x7f03) 2.051948344s ago: executing program 3 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.020744135s ago: executing program 0 (id=355): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x4821ea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1}) 1.977515159s ago: executing program 3 (id=356): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 1.504953177s ago: executing program 2 (id=221): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) 1.348775769s ago: executing program 3 (id=357): syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a"], 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0xac002) mkdir(&(0x7f00000002c0)='./control\x00', 0x0) rename(&(0x7f0000000380)='./control\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.295583091s ago: executing program 4 (id=358): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0xe) 1.2863574s ago: executing program 1 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="b9a00d0000b816000000ba000000000f30b9800000c00f3235000800000f30266726660f3821d50f0666baf80cb8bb71dc8bef66bafc0cb00fee0f20d835200000000f22d866b8f2008ee80f0f360d66ba6100ecb8009800000f23d00f21f8350000000c0f23f8"}], 0x1555555555555665, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.187876471s ago: executing program 4 (id=360): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x90}}, 0x24040084) 1.1242718s ago: executing program 4 (id=361): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.041635758s ago: executing program 1 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x74}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 955.901605ms ago: executing program 0 (id=363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 769.471797ms ago: executing program 0 (id=364): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x3}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x7, 0x2, 0x7, 0x4d942c23, 0x4, 0x3}) 751.312002ms ago: executing program 1 (id=365): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 667.922994ms ago: executing program 0 (id=366): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000000002) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x20, 0x14, 0x7, "6d9da4eecb0221"}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x81, 0x1, "97"}, 0x0, &(0x7f0000000600)={0x20, 0x83, 0x1, 'k'}, 0x0, 0x0}) 658.971756ms ago: executing program 1 (id=367): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 175.367828ms ago: executing program 4 (id=368): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) 0s ago: executing program 3 (id=369): setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 61.122373][ T30] audit: type=1400 audit(1747771076.953:66): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.125728][ T5797] cgroup: Unknown subsys name 'net' [ 61.145143][ T30] audit: type=1400 audit(1747771076.953:67): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.172541][ T30] audit: type=1400 audit(1747771076.983:68): avc: denied { unmount } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.373250][ T5797] cgroup: Unknown subsys name 'cpuset' [ 61.380883][ T5797] cgroup: Unknown subsys name 'rlimit' [ 61.524988][ T30] audit: type=1400 audit(1747771077.353:69): avc: denied { setattr } for pid=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.548701][ T30] audit: type=1400 audit(1747771077.353:70): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.582300][ T30] audit: type=1400 audit(1747771077.353:71): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.602718][ T30] audit: type=1400 audit(1747771077.353:72): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.623365][ T30] audit: type=1400 audit(1747771077.373:73): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 61.648191][ T30] audit: type=1400 audit(1747771077.373:74): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.653660][ T5799] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 61.671398][ T30] audit: type=1400 audit(1747771077.393:75): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 62.582365][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.572676][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.580643][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.588898][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.595108][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.603599][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.610562][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.611267][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.618447][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.641165][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.645730][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.650880][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.655916][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.669420][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.672973][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.677739][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.684357][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.690370][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.691557][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.700129][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.704800][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.712796][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.735966][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.736816][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.743049][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.760634][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.124947][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 65.289297][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 65.324766][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 65.374426][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 65.413574][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.420956][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.428093][ T5809] bridge_slave_0: entered allmulticast mode [ 65.435568][ T5809] bridge_slave_0: entered promiscuous mode [ 65.455697][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.462824][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.469959][ T5809] bridge_slave_1: entered allmulticast mode [ 65.476748][ T5809] bridge_slave_1: entered promiscuous mode [ 65.501325][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 65.580868][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.602810][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.609944][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.617334][ T5807] bridge_slave_0: entered allmulticast mode [ 65.624125][ T5807] bridge_slave_0: entered promiscuous mode [ 65.632062][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.639142][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.646359][ T5807] bridge_slave_1: entered allmulticast mode [ 65.653739][ T5807] bridge_slave_1: entered promiscuous mode [ 65.664824][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.685117][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.692283][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.699327][ T5808] bridge_slave_0: entered allmulticast mode [ 65.706886][ T5808] bridge_slave_0: entered promiscuous mode [ 65.785811][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.792963][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.800011][ T5808] bridge_slave_1: entered allmulticast mode [ 65.806786][ T5808] bridge_slave_1: entered promiscuous mode [ 65.814714][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.826283][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.835419][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.842663][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.849832][ T5814] bridge_slave_0: entered allmulticast mode [ 65.856870][ T5814] bridge_slave_0: entered promiscuous mode [ 65.865637][ T5809] team0: Port device team_slave_0 added [ 65.873625][ T5809] team0: Port device team_slave_1 added [ 65.910141][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.917284][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.925096][ T5814] bridge_slave_1: entered allmulticast mode [ 65.931853][ T5814] bridge_slave_1: entered promiscuous mode [ 65.955795][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.966929][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.006924][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.014097][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.021740][ T5818] bridge_slave_0: entered allmulticast mode [ 66.028342][ T5818] bridge_slave_0: entered promiscuous mode [ 66.045176][ T5807] team0: Port device team_slave_0 added [ 66.052770][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.064548][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.074451][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.082774][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.108811][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.125938][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.133056][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.140104][ T5818] bridge_slave_1: entered allmulticast mode [ 66.147919][ T5818] bridge_slave_1: entered promiscuous mode [ 66.169699][ T5807] team0: Port device team_slave_1 added [ 66.191606][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.198559][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.225058][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.244893][ T5808] team0: Port device team_slave_0 added [ 66.268047][ T5814] team0: Port device team_slave_0 added [ 66.279799][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.291670][ T5808] team0: Port device team_slave_1 added [ 66.304910][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.312122][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.338107][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.351021][ T5814] team0: Port device team_slave_1 added [ 66.377002][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.383981][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.410010][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.422189][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.440088][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.447172][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.474786][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.489128][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.496302][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.522490][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.540528][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.547458][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.573336][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.614680][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.621791][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.647827][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.663649][ T5809] hsr_slave_0: entered promiscuous mode [ 66.669653][ T5809] hsr_slave_1: entered promiscuous mode [ 66.679901][ T5818] team0: Port device team_slave_0 added [ 66.688084][ T5818] team0: Port device team_slave_1 added [ 66.737493][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.744729][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.771368][ T5816] Bluetooth: hci1: command tx timeout [ 66.771372][ T5812] Bluetooth: hci2: command tx timeout [ 66.771981][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.780430][ T5816] Bluetooth: hci4: command tx timeout [ 66.803755][ T5807] hsr_slave_0: entered promiscuous mode [ 66.809874][ T5807] hsr_slave_1: entered promiscuous mode [ 66.816292][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.824112][ T5807] Cannot create hsr debugfs directory [ 66.840316][ T5816] Bluetooth: hci3: command tx timeout [ 66.840626][ T5812] Bluetooth: hci0: command tx timeout [ 66.852015][ T5814] hsr_slave_0: entered promiscuous mode [ 66.857968][ T5814] hsr_slave_1: entered promiscuous mode [ 66.863971][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.871791][ T5814] Cannot create hsr debugfs directory [ 66.877489][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.884459][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.910356][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.969630][ T5808] hsr_slave_0: entered promiscuous mode [ 66.975948][ T5808] hsr_slave_1: entered promiscuous mode [ 66.982015][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.989546][ T5808] Cannot create hsr debugfs directory [ 67.101933][ T5818] hsr_slave_0: entered promiscuous mode [ 67.107922][ T5818] hsr_slave_1: entered promiscuous mode [ 67.114640][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.122265][ T5818] Cannot create hsr debugfs directory [ 67.365881][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.376066][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.404216][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.419021][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.459560][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.484055][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.497532][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.506863][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.557861][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.569089][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.578272][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.587042][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.683430][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.693435][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.703844][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.714193][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.728795][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.761955][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.800057][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.816074][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.823214][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.834440][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.856797][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.867549][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.879734][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.889385][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.909736][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.916803][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.925769][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.932948][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.955495][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.962608][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.028875][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.099919][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.109064][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 68.109076][ T30] audit: type=1400 audit(1747771083.933:90): avc: denied { sys_module } for pid=5809 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.132550][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.196892][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.204007][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.242128][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.264578][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.271718][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.331458][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.338562][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.395839][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.402966][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.426666][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.447163][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.484287][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.510067][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.574280][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.606569][ T5809] veth0_vlan: entered promiscuous mode [ 68.683526][ T5809] veth1_vlan: entered promiscuous mode [ 68.692170][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.699278][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.711913][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.719021][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.840878][ T5812] Bluetooth: hci4: command tx timeout [ 68.840888][ T5816] Bluetooth: hci1: command tx timeout [ 68.840920][ T5816] Bluetooth: hci2: command tx timeout [ 68.887455][ T5809] veth0_macvtap: entered promiscuous mode [ 68.914943][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.928964][ T5816] Bluetooth: hci0: command tx timeout [ 68.932447][ T5821] Bluetooth: hci3: command tx timeout [ 68.975746][ T5809] veth1_macvtap: entered promiscuous mode [ 69.008340][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.085870][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.108647][ T5818] veth0_vlan: entered promiscuous mode [ 69.128972][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.144782][ T5807] veth0_vlan: entered promiscuous mode [ 69.153382][ T5814] veth0_vlan: entered promiscuous mode [ 69.164813][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.174174][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.182935][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.192239][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.207212][ T5818] veth1_vlan: entered promiscuous mode [ 69.232863][ T5814] veth1_vlan: entered promiscuous mode [ 69.247088][ T5807] veth1_vlan: entered promiscuous mode [ 69.283838][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.307671][ T5818] veth0_macvtap: entered promiscuous mode [ 69.342006][ T5818] veth1_macvtap: entered promiscuous mode [ 69.356492][ T5814] veth0_macvtap: entered promiscuous mode [ 69.365116][ T5807] veth0_macvtap: entered promiscuous mode [ 69.387077][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.396816][ T5814] veth1_macvtap: entered promiscuous mode [ 69.408479][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.423620][ T5807] veth1_macvtap: entered promiscuous mode [ 69.436903][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.447465][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.470031][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.483856][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.508758][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.515149][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.526408][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.535453][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.535691][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.551670][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.565764][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.578593][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.587434][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.596881][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.624953][ T5808] veth0_vlan: entered promiscuous mode [ 69.626360][ T30] audit: type=1400 audit(1747771085.453:91): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.4yrO3O/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.634776][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.676187][ T30] audit: type=1400 audit(1747771085.493:92): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.705437][ T30] audit: type=1400 audit(1747771085.493:93): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.4yrO3O/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.732913][ T30] audit: type=1400 audit(1747771085.493:94): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.758035][ T30] audit: type=1400 audit(1747771085.493:95): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.4yrO3O/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.759065][ T5808] veth1_vlan: entered promiscuous mode [ 69.794078][ T30] audit: type=1400 audit(1747771085.493:96): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.4yrO3O/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.797347][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.838847][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.852183][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.866903][ T30] audit: type=1400 audit(1747771085.493:97): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.892799][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.911697][ T30] audit: type=1400 audit(1747771085.503:98): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.912419][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.951182][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.966511][ T30] audit: type=1400 audit(1747771085.503:99): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="gadgetfs" ino=7249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.105668][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.115103][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.117584][ T5808] veth0_macvtap: entered promiscuous mode [ 70.143995][ T5808] veth1_macvtap: entered promiscuous mode [ 70.164472][ T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.174510][ T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.213812][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.246326][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.257084][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.270999][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.290086][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.318581][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.331208][ T5808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.339911][ T5808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.340211][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.354857][ T5808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.366210][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.418544][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.430333][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 70.455107][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.462833][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.488697][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.516222][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.542085][ T5819] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 70.554182][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.562429][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.571253][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.586712][ T5819] usb 3-1: config 0 descriptor?? [ 70.637871][ T5819] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 70.689128][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 70.744672][ T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.762556][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 70.791776][ T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.864969][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 70.904488][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.914238][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 70.925865][ T5821] Bluetooth: hci4: command tx timeout [ 70.929397][ T5816] Bluetooth: hci1: command tx timeout [ 70.935161][ T5821] Bluetooth: hci2: command tx timeout [ 70.935658][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.953517][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.975402][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.988237][ T5801] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 71.000587][ T5816] Bluetooth: hci0: command tx timeout [ 71.002478][ T5821] Bluetooth: hci3: command tx timeout [ 71.029594][ T5896] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 71.092634][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 71.115999][ T5863] usb 3-1: USB disconnect, device number 2 [ 71.148813][ T5169] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 72.150689][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.301756][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 72.308573][ T5900] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 72.316881][ T5900] usb 2-1: config 0 has no interface number 0 [ 72.326244][ T5900] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 72.335823][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.344868][ T5900] usb 2-1: Product: syz [ 72.349149][ T5900] usb 2-1: Manufacturer: syz [ 72.353984][ T5900] usb 2-1: SerialNumber: syz [ 72.360080][ T5900] usb 2-1: config 0 descriptor?? [ 72.374230][ T5900] smsc95xx v2.0.0 [ 73.000834][ T5816] Bluetooth: hci4: command tx timeout [ 73.000895][ T5812] Bluetooth: hci1: command tx timeout [ 73.006280][ T5821] Bluetooth: hci2: command tx timeout [ 73.080685][ T5812] Bluetooth: hci3: command tx timeout [ 73.090592][ T5812] Bluetooth: hci0: command tx timeout [ 73.192526][ T5900] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 73.218083][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 73.218099][ T30] audit: type=1400 audit(1747771089.043:151): avc: denied { bind } for pid=5993 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.260134][ T52] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 73.299957][ T5994] Bluetooth: MGMT ver 1.23 [ 73.345397][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.370980][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.380245][ T30] audit: type=1400 audit(1747771089.083:152): avc: denied { ioctl } for pid=5991 comm="syz.4.33" path="socket:[7961]" dev="sockfs" ino=7961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.422241][ T5900] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 73.443684][ T5900] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 73.471356][ T5900] usb 2-1: USB disconnect, device number 2 [ 73.494726][ T30] audit: type=1400 audit(1747771089.123:153): avc: denied { write } for pid=5993 comm="syz.3.34" path="socket:[7960]" dev="sockfs" ino=7960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.550316][ T5864] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.690321][ T5863] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.691861][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 73.708425][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 73.717395][ T6003] Zero length message leads to an empty skb [ 73.723055][ T5864] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59576, setting to 64 [ 73.740236][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.754581][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.763221][ T5864] usb 1-1: Product: syz [ 73.767497][ T5864] usb 1-1: Manufacturer: syz [ 73.772183][ T5864] usb 1-1: SerialNumber: syz [ 73.796280][ T30] audit: type=1400 audit(1747771089.623:154): avc: denied { create } for pid=6004 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.832952][ T30] audit: type=1400 audit(1747771089.663:155): avc: denied { write } for pid=6004 comm="syz.2.37" path="socket:[7998]" dev="sockfs" ino=7998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.860409][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 73.868062][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.881291][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.893836][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 73.903796][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.915337][ T5863] usb 4-1: config 0 descriptor?? [ 73.931679][ T5863] hub 4-1:0.0: USB hub found [ 74.147900][ T5863] hub 4-1:0.0: 1 port detected [ 74.261054][ T30] audit: type=1400 audit(1747771090.093:156): avc: denied { create } for pid=6015 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.284354][ T30] audit: type=1400 audit(1747771090.093:157): avc: denied { bind } for pid=6015 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.310459][ T30] audit: type=1400 audit(1747771090.093:158): avc: denied { accept } for pid=6015 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.333299][ T30] audit: type=1400 audit(1747771090.093:159): avc: denied { setopt } for pid=6015 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.352934][ T5900] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.366960][ T30] audit: type=1400 audit(1747771090.103:160): avc: denied { read } for pid=6015 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.533881][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.548106][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.570067][ T5900] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 74.598665][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.45'. [ 74.608398][ T6030] netlink: 'syz.2.45': attribute type 7 has an invalid length. [ 74.612735][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.616515][ T6030] netlink: 'syz.2.45': attribute type 8 has an invalid length. [ 74.632817][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 74.643602][ T5900] usb 5-1: config 0 descriptor?? [ 74.657895][ T6030] erspan0: entered promiscuous mode [ 74.669218][ T6030] gretap0: entered promiscuous mode [ 74.677403][ T6030] erspan0: left promiscuous mode [ 74.696840][ T6030] gretap0: left promiscuous mode [ 74.783480][ T5863] hub 4-1:0.0: activate --> -90 [ 74.849872][ T5864] cdc_ncm 1-1:1.0: bind() failure [ 74.874263][ T5864] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 74.886726][ T5864] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 74.911268][ T5864] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 74.945623][ T5864] usb 1-1: USB disconnect, device number 2 [ 74.984374][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 74.994294][ T5863] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 74.994537][ T5898] usb 4-1: USB disconnect, device number 2 [ 75.884361][ T5900] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 75.930410][ T5900] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 75.938510][ T5900] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 75.972355][ T5900] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 75.990379][ T5900] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 76.013716][ T5900] usb 5-1: USB disconnect, device number 2 [ 76.218050][ T6073] virtio-fs: tag not found [ 76.250392][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.411449][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 76.429611][ T5864] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.449811][ T1336] Bluetooth: (null): Invalid header checksum [ 76.451984][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.468948][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.478107][ T1336] Bluetooth: (null): Invalid header checksum [ 76.484276][ T5864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.484584][ T5812] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 76.495963][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.535377][ T5864] usb 4-1: Product: syz [ 76.551563][ T12] Bluetooth: (null): Invalid header checksum [ 76.562693][ T5864] usb 4-1: Manufacturer: syz [ 76.567416][ T5864] usb 4-1: SerialNumber: syz [ 76.600750][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.671686][ T12] Bluetooth: (null): Invalid header checksum [ 76.760606][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 76.768839][ T5897] usb 1-1: config 0 has no interfaces? [ 76.779911][ T5897] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 76.789554][ T12] Bluetooth: (null): Invalid header checksum [ 76.799381][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.822922][ T5897] usb 1-1: config 0 descriptor?? [ 76.882735][ T12] Bluetooth: (null): Invalid header checksum [ 76.916017][ T6094] netlink: 'syz.1.68': attribute type 2 has an invalid length. [ 76.926698][ T6094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'. [ 76.981775][ T1203] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.991139][ T52] Bluetooth: (null): Invalid header checksum [ 77.078105][ T5897] usb 1-1: USB disconnect, device number 3 [ 77.105073][ T5864] usb 4-1: 0:2 : does not exist [ 77.150934][ T1203] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 77.183953][ T1203] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 77.193252][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.202272][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.221474][ T1203] usb 5-1: config 0 descriptor?? [ 77.228784][ T1203] usb 5-1: bad CDC descriptors [ 77.364231][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 77.381893][ T5900] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 77.389981][ T5900] usb 3-1: config 0 has no interface number 0 [ 77.400947][ T5900] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.420244][ T5900] usb 3-1: config 0 interface 85 has no altsetting 0 [ 77.434939][ T5900] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 77.450216][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.456839][ T1203] usb 5-1: USB disconnect, device number 3 [ 77.458195][ T5900] usb 3-1: Product: syz [ 77.458212][ T5900] usb 3-1: Manufacturer: syz [ 77.458226][ T5900] usb 3-1: SerialNumber: syz [ 77.466101][ T6086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.493209][ T5900] usb 3-1: config 0 descriptor?? [ 77.966003][ T5864] usb 4-1: USB disconnect, device number 3 [ 78.136587][ T5900] appletouch 3-1:0.85: Geyser mode initialized. [ 78.162135][ T5900] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 78.231332][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 78.231347][ T30] audit: type=1400 audit(1747771094.063:181): avc: denied { shutdown } for pid=6109 comm="syz.4.75" laddr=fe80::a lport=56892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.304764][ T30] audit: type=1400 audit(1747771094.103:182): avc: denied { getopt } for pid=6109 comm="syz.4.75" laddr=fe80::a lport=56892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.439746][ T1203] usb 3-1: USB disconnect, device number 3 [ 78.439799][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 78.495148][ T1203] appletouch 3-1:0.85: input: appletouch disconnected [ 78.676114][ T30] audit: type=1400 audit(1747771094.503:183): avc: denied { relabelfrom } for pid=6116 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.737108][ T30] audit: type=1400 audit(1747771094.503:184): avc: denied { relabelto } for pid=6116 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.822200][ T30] audit: type=1400 audit(1747771094.503:185): avc: denied { attach_queue } for pid=6116 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.846646][ T30] audit: type=1400 audit(1747771094.633:186): avc: denied { name_bind } for pid=6122 comm="syz.1.81" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.015000][ T30] audit: type=1400 audit(1747771094.843:187): avc: denied { create } for pid=6131 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.120411][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.340398][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 79.348067][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.369256][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.390140][ T5892] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.430221][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.457125][ T5892] usb 5-1: config 0 descriptor?? [ 79.488974][ T5892] hub 5-1:0.0: USB hub found [ 79.694695][ T6148] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.697477][ T5892] hub 5-1:0.0: 1 port detected [ 79.731494][ T30] audit: type=1400 audit(1747771095.553:188): avc: denied { write } for pid=6147 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.804014][ T30] audit: type=1400 audit(1747771095.633:189): avc: denied { ioctl } for pid=6149 comm="syz.0.91" path="socket:[8561]" dev="sockfs" ino=8561 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.830467][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 79.948309][ T30] audit: type=1400 audit(1747771095.673:190): avc: denied { wake_alarm } for pid=6151 comm="syz.3.92" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.393445][ T5897] kernel write not supported for file [eventfd] (pid: 5897 comm: kworker/0:4) [ 80.425557][ T1203] hub 5-1:0.0: activate --> -90 [ 80.534000][ T5812] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 80.543094][ T5812] Bluetooth: hci0: Injecting HCI hardware error event [ 80.551477][ T5821] Bluetooth: hci0: hardware error 0x00 [ 80.837840][ T1203] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 80.856026][ T5892] usb 5-1: USB disconnect, device number 4 [ 81.077183][ T6223] hsr0: entered promiscuous mode [ 81.084008][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 81.094229][ T6223] hsr_slave_0: left promiscuous mode [ 81.102845][ T6223] hsr_slave_1: left promiscuous mode [ 81.116275][ T6223] hsr0 (unregistering): left promiscuous mode [ 81.163998][ T81] cfg80211: failed to load regulatory.db [ 81.285939][ T6227] syz.3.109 uses obsolete (PF_INET,SOCK_PACKET) [ 81.294631][ T6227] syzkaller1: entered promiscuous mode [ 81.300103][ T6227] syzkaller1: entered allmulticast mode [ 81.435536][ T6229] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.451638][ T6229] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 81.467283][ T6229] bridge_slave_0: default FDB implementation only supports local addresses [ 81.910116][ T6242] netlink: 'syz.4.116': attribute type 4 has an invalid length. [ 81.939630][ T6242] netlink: 'syz.4.116': attribute type 4 has an invalid length. [ 81.961777][ T6244] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.979580][ T6244] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.527854][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 82.600779][ T5821] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 82.700136][ T6266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 82.719269][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 82.770243][ T5900] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.840315][ T5864] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.954380][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.967091][ T6274] netlink: 'syz.2.129': attribute type 21 has an invalid length. [ 82.983962][ T6274] netlink: 128 bytes leftover after parsing attributes in process `syz.2.129'. [ 82.994206][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.994232][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.994271][ T5900] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.994291][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.996642][ T5900] usb 5-1: config 0 descriptor?? [ 83.005302][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 83.068712][ T6274] netlink: 3 bytes leftover after parsing attributes in process `syz.2.129'. [ 83.104441][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.143218][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.160357][ T5864] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 83.169403][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.231552][ T5864] usb 1-1: config 0 descriptor?? [ 83.456191][ T5900] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 83.508231][ T5900] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 83.676545][ T5864] playstation 0003:054C:05C4.0003: hidraw1: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 83.739493][ T5898] usb 5-1: USB disconnect, device number 5 [ 84.065716][ T5864] playstation 0003:054C:05C4.0003: Failed to retrieve feature with reportID 163: -32 [ 84.078841][ T5864] playstation 0003:054C:05C4.0003: Failed to retrieve DualShock4 firmware info: -32 [ 84.093090][ T5864] playstation 0003:054C:05C4.0003: Failed to get firmware info from DualShock4 [ 84.102171][ T5864] playstation 0003:054C:05C4.0003: HW/FW version data in sysfs will be invalid. [ 84.118469][ T5864] input: HID 054c:05c4 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0003/input/input8 [ 84.136059][ T81] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.136391][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 84.136402][ T30] audit: type=1400 audit(1747771099.963:211): avc: denied { create } for pid=6292 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.178151][ T5864] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0003/input/input9 [ 84.255273][ T30] audit: type=1400 audit(1747771100.003:212): avc: denied { write } for pid=6292 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.280781][ T5864] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0003/input/input10 [ 84.321161][ T81] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 84.372737][ T81] usb 3-1: config 0 has no interface number 0 [ 84.378865][ T81] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 84.423518][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.529608][ T5864] playstation 0003:054C:05C4.0003: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 84.609328][ T5864] usb 1-1: USB disconnect, device number 4 [ 84.616118][ T81] usb 3-1: config 0 descriptor?? [ 84.636134][ T81] cp210x 3-1:0.2: cp210x converter detected [ 85.043478][ T81] cp210x 3-1:0.2: failed to get vendor val 0x000e size 3: -32 [ 85.221914][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 85.266201][ T81] cp210x 3-1:0.2: GPIO initialisation failed: -19 [ 85.287821][ T81] usb 3-1: cp210x converter now attached to ttyUSB0 [ 85.352381][ T6303] hsr_slave_1 (unregistering): left promiscuous mode [ 85.487072][ T30] audit: type=1400 audit(1747771101.313:213): avc: denied { create } for pid=6306 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.493392][ T5864] usb 3-1: USB disconnect, device number 4 [ 85.548330][ T30] audit: type=1400 audit(1747771101.313:214): avc: denied { read } for pid=6306 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.576827][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 85.587382][ T5864] cp210x 3-1:0.2: device disconnected [ 85.777034][ T30] audit: type=1400 audit(1747771101.603:215): avc: denied { read } for pid=6316 comm="syz.4.145" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.807698][ T1336] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 85.810268][ T30] audit: type=1400 audit(1747771101.603:216): avc: denied { open } for pid=6316 comm="syz.4.145" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.924687][ T30] audit: type=1400 audit(1747771101.753:217): avc: denied { connect } for pid=6320 comm="syz.1.146" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.455829][ T6231] Set syz1 is full, maxelem 65536 reached [ 86.657988][ T30] audit: type=1400 audit(1747771102.473:218): avc: denied { bind } for pid=6330 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.720367][ T5900] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 86.728010][ T30] audit: type=1400 audit(1747771102.483:219): avc: denied { setopt } for pid=6330 comm="syz.0.152" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.939055][ T5900] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.950342][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.958337][ T5900] usb 3-1: Product: syz [ 86.981772][ T5900] usb 3-1: Manufacturer: syz [ 87.020241][ T5900] usb 3-1: SerialNumber: syz [ 87.050334][ T81] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.164303][ T6347] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.158'. [ 87.221821][ T81] usb 4-1: config 1 has no interfaces? [ 87.229381][ T81] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 87.241772][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.258078][ T81] usb 4-1: Product: syz [ 87.265876][ T81] usb 4-1: Manufacturer: syz [ 87.294486][ T81] usb 4-1: SerialNumber: syz [ 87.414594][ T30] audit: type=1400 audit(1747771103.243:220): avc: denied { read write } for pid=6353 comm="syz.1.161" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.536147][ T81] usb 4-1: USB disconnect, device number 4 [ 87.890351][ T5864] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.057936][ T5900] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 88.060452][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 88.064503][ T5900] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 88.087679][ T5864] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 88.092656][ T5900] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 88.101834][ T5864] usb 5-1: config 0 has no interface number 0 [ 88.107933][ T5864] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.155793][ T5864] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 88.166976][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.179256][ T5864] usb 5-1: Product: syz [ 88.183635][ T5864] usb 5-1: Manufacturer: syz [ 88.188232][ T5864] usb 5-1: SerialNumber: syz [ 88.195719][ T5864] usb 5-1: config 0 descriptor?? [ 88.208469][ T5864] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 88.222930][ T5864] em28xx 5-1:0.132: Video interface 132 found: [ 88.282462][ T5900] cdc_ncm 3-1:1.0: setting tx_max = 60 [ 88.295654][ T5900] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 88.340793][ T5900] usb 3-1: USB disconnect, device number 5 [ 88.347674][ T5900] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 88.400376][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.588144][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.600286][ T5821] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 88.602146][ T5892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.609239][ T5821] Bluetooth: hci3: Injecting HCI hardware error event [ 88.622746][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.625938][ T5812] Bluetooth: hci3: hardware error 0x00 [ 88.648660][ T5864] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 88.675419][ T5892] usb 4-1: Product: syz [ 88.685519][ T5892] usb 4-1: Manufacturer: syz [ 88.695620][ T5892] usb 4-1: SerialNumber: syz [ 89.053589][ T6385] bridge_slave_0: left allmulticast mode [ 89.059366][ T6385] bridge_slave_0: left promiscuous mode [ 89.066697][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.089159][ T6385] bridge_slave_1: left allmulticast mode [ 89.103256][ T6385] bridge_slave_1: left promiscuous mode [ 89.109103][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.127579][ T6385] bond0: (slave bond_slave_0): Releasing backup interface [ 89.139750][ T6385] bond0: (slave bond_slave_1): Releasing backup interface [ 89.157676][ T6385] team0: Port device team_slave_0 removed [ 89.168261][ T6385] team0: Port device team_slave_1 removed [ 89.177931][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.185635][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.194494][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.202457][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.288647][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 89.288663][ T30] audit: type=1400 audit(1747771105.113:227): avc: denied { mount } for pid=6391 comm="syz.1.177" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.322572][ T30] audit: type=1400 audit(1747771105.143:228): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.665813][ T30] audit: type=1400 audit(1747771105.493:229): avc: denied { unlink } for pid=6395 comm="syz.0.179" name="#1" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.749618][ T5892] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 89.762490][ T5892] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 89.814719][ T5864] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 89.825313][ T5864] em28xx 5-1:0.132: board has no eeprom [ 89.900261][ T5864] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 89.914840][ T5864] em28xx 5-1:0.132: analog set to bulk mode. [ 89.926864][ T81] em28xx 5-1:0.132: Registering V4L2 extension [ 89.951173][ T5892] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 90.014400][ T5864] usb 5-1: USB disconnect, device number 6 [ 90.029748][ T81] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 90.048385][ T81] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 90.064146][ T81] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 90.082730][ T5864] em28xx 5-1:0.132: Disconnecting em28xx [ 90.088793][ T5892] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 90.129846][ T5892] usb 4-1: USB disconnect, device number 5 [ 90.198420][ T5892] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 90.289445][ T30] audit: type=1400 audit(1747771106.113:230): avc: denied { create } for pid=6407 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.318035][ T81] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 90.332444][ T81] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 90.380606][ T81] em28xx 5-1:0.132: No AC97 audio processor [ 90.390783][ T30] audit: type=1400 audit(1747771106.113:231): avc: denied { write } for pid=6407 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.395811][ T81] usb 5-1: Decoder not found [ 90.437259][ T81] em28xx 5-1:0.132: failed to create media graph [ 90.471149][ T81] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 90.487708][ T81] em28xx 5-1:0.132: Remote control support is not available for this card. [ 90.519589][ T5864] em28xx 5-1:0.132: Closing input extension [ 90.573672][ T5864] em28xx 5-1:0.132: Freeing device [ 90.683138][ T5812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 90.812097][ T30] audit: type=1400 audit(1747771106.633:232): avc: denied { append } for pid=6428 comm="syz.3.190" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.955496][ T6433] sp0: Synchronizing with TNC [ 90.966174][ T30] audit: type=1400 audit(1747771106.793:233): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.984100][ T6406] ceph: No mds server is up or the cluster is laggy [ 90.998991][ T30] audit: type=1400 audit(1747771106.823:234): avc: denied { read } for pid=5479 comm="dhcpcd" name="n102" dev="tmpfs" ino=2690 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.021483][ T6412] ceph: No mds server is up or the cluster is laggy [ 91.038116][ T30] audit: type=1400 audit(1747771106.823:235): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=2690 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.123784][ T30] audit: type=1400 audit(1747771106.823:236): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=2690 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.211148][ T81] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.241662][ T6444] Bluetooth: hci0: unsupported parameter 251 [ 91.255979][ T6444] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 91.373515][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.397045][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.408947][ T81] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 91.419527][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.460912][ T81] usb 5-1: config 0 descriptor?? [ 91.916391][ T81] lenovo 0003:17EF:6047.0004: unknown main item tag 0x1 [ 91.928206][ T81] lenovo 0003:17EF:6047.0004: reserved main item tag 0xd [ 91.944944][ T81] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 92.702905][ T81] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71 [ 92.720166][ T81] usb 5-1: USB disconnect, device number 7 [ 93.050538][ T5892] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.185527][ T6496] binder: 6495:6496 ioctl c0306201 2000000003c0 returned -14 [ 93.225879][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.244139][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.272927][ T5892] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 93.301320][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.329394][ T5892] usb 4-1: config 0 descriptor?? [ 93.478525][ T1336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.594106][ T1336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.692540][ T1336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.758153][ T5892] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 93.837645][ T1336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.004295][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.013057][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.020923][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.028776][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.036815][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.127651][ T1336] bridge_slave_1: left allmulticast mode [ 94.138703][ T1336] bridge_slave_1: left promiscuous mode [ 94.145589][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.157180][ T1336] bridge_slave_0: left allmulticast mode [ 94.175426][ T1336] bridge_slave_0: left promiscuous mode [ 94.191031][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.198636][ T5900] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.371762][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 94.378642][ T5900] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.399763][ T5900] usb 1-1: config 0 has no interface number 0 [ 94.436764][ T5900] usb 1-1: config 0 interface 184 has no altsetting 0 [ 94.459862][ T5900] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 94.479527][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 94.479540][ T30] audit: type=1804 audit(1747771110.303:254): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.228" name="/" dev="pidfs" ino=6523 res=1 errno=0 [ 94.487142][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.550488][ T5900] usb 1-1: Product: syz [ 94.557593][ T5892] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 94.567196][ T5900] usb 1-1: Manufacturer: syz [ 94.572196][ T5892] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 94.591437][ T5900] usb 1-1: SerialNumber: syz [ 94.592628][ T5892] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 94.616517][ T5900] usb 1-1: config 0 descriptor?? [ 94.626693][ T30] audit: type=1400 audit(1747771110.443:255): avc: denied { create } for pid=6528 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.648484][ T30] audit: type=1400 audit(1747771110.453:256): avc: denied { connect } for pid=6528 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.651429][ T5900] smsc75xx v1.0.0 [ 94.665331][ T5892] usb 4-1: USB disconnect, device number 6 [ 94.721622][ T30] audit: type=1400 audit(1747771110.523:257): avc: denied { write } for pid=6528 comm="syz.4.231" path="socket:[11622]" dev="sockfs" ino=11622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.813167][ T1336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.824157][ T1336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.837434][ T1336] bond0 (unregistering): Released all slaves [ 94.980219][ T30] audit: type=1400 audit(1747771110.803:258): avc: denied { create } for pid=6535 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.028295][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 95.098220][ T30] audit: type=1400 audit(1747771110.923:259): avc: denied { read } for pid=6539 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.145486][ T30] audit: type=1400 audit(1747771110.923:260): avc: denied { open } for pid=6539 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.173323][ T30] audit: type=1400 audit(1747771110.923:261): avc: denied { getattr } for pid=6539 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.221794][ T9] usb 2-1: config 0 has no interfaces? [ 95.231150][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 95.242865][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.251930][ T9] usb 2-1: SerialNumber: syz [ 95.273411][ T9] usb 2-1: config 0 descriptor?? [ 95.319160][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 95.373199][ T6547] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.383061][ T6547] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.392645][ T6547] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.402085][ T6547] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.414122][ T6547] vxlan0: entered promiscuous mode [ 95.548426][ T30] audit: type=1400 audit(1747771111.363:262): avc: denied { write } for pid=6538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.569411][ T5863] usb 2-1: USB disconnect, device number 3 [ 95.597149][ T30] audit: type=1400 audit(1747771111.363:263): avc: denied { add_name } for pid=6538 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.624035][ T1336] hsr_slave_0: left promiscuous mode [ 95.638953][ T1336] hsr_slave_1: left promiscuous mode [ 95.647920][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.657753][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.666498][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.674138][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.698781][ T1336] veth1_macvtap: left promiscuous mode [ 95.704914][ T1336] veth0_macvtap: left promiscuous mode [ 95.711032][ T1336] veth1_vlan: left promiscuous mode [ 95.716519][ T1336] veth0_vlan: left promiscuous mode [ 95.858213][ T5900] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 95.887580][ T5900] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 95.898057][ T5900] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 95.909662][ T5900] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 95.919810][ T5900] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 95.931019][ T5900] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 95.940619][ T5900] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 95.965912][ T5900] usb 1-1: USB disconnect, device number 5 [ 96.120449][ T5812] Bluetooth: hci1: command tx timeout [ 96.207027][ T1336] team0 (unregistering): Port device team_slave_1 removed [ 96.270669][ T1336] team0 (unregistering): Port device team_slave_0 removed [ 96.782023][ T5892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.872276][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 96.955475][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 96.971545][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 96.983314][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 96.997473][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.012966][ T5892] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 97.023099][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 97.031535][ T5892] usb 1-1: Product: syz [ 97.036440][ T5892] usb 1-1: Manufacturer: syz [ 97.041149][ T5892] usb 1-1: SerialNumber: syz [ 97.052218][ T5892] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11 [ 97.105228][ T6592] kvm: user requested TSC rate below hardware speed [ 97.158820][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.181520][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.192409][ T6516] bridge_slave_0: entered allmulticast mode [ 97.202882][ T6516] bridge_slave_0: entered promiscuous mode [ 97.245933][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.274250][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.309838][ T6516] bridge_slave_1: entered allmulticast mode [ 97.328799][ T5898] usb 1-1: USB disconnect, device number 6 [ 97.334743][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 97.344297][ T6516] bridge_slave_1: entered promiscuous mode [ 97.398510][ T5898] appletouch 1-1:1.0: input: appletouch disconnected [ 97.460784][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.492869][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.580928][ T6516] team0: Port device team_slave_0 added [ 97.598321][ T6516] team0: Port device team_slave_1 added [ 97.670610][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.702178][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.760258][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.791944][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.813134][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.877090][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.090105][ T6516] hsr_slave_0: entered promiscuous mode [ 98.105836][ T6516] hsr_slave_1: entered promiscuous mode [ 98.201906][ T5812] Bluetooth: hci1: command tx timeout [ 98.310311][ T5898] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.460256][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.490371][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 98.502966][ T5898] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 98.516176][ T5898] usb 5-1: config 0 has no interface number 0 [ 98.522556][ T5898] usb 5-1: config 0 interface 184 has no altsetting 0 [ 98.553002][ T5898] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 98.571904][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.588198][ T5898] usb 5-1: Product: syz [ 98.607119][ T5898] usb 5-1: Manufacturer: syz [ 98.622592][ T5898] usb 5-1: SerialNumber: syz [ 98.635583][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.654766][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.666964][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.688494][ T5898] usb 5-1: config 0 descriptor?? [ 98.715606][ T5898] smsc75xx v1.0.0 [ 98.720137][ T9] usb 2-1: config 0 descriptor?? [ 99.067684][ T6516] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.099208][ T6516] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.113389][ T6516] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.133067][ T6516] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.150621][ T5892] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 99.179493][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 99.209270][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input12 [ 99.295407][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.334514][ T5892] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.358311][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 99.364230][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.378943][ T5892] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.390832][ T5892] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.402539][ T6662] process 'syz.3.265' launched '/dev/fd/3' with NULL argv: empty string added [ 99.411556][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.430649][ T6653] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 99.443443][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.450588][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.465420][ T5892] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.501829][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.508961][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.667678][ T5892] usb 1-1: USB disconnect, device number 7 [ 99.834756][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 99.834770][ T30] audit: type=1400 audit(1747771115.663:279): avc: denied { sys_module } for pid=6516 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.947917][ T5898] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 99.970805][ T5898] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 100.009432][ T5898] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 100.027621][ T5898] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 100.039282][ T5898] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 100.059683][ T5898] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 100.072861][ T5898] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 100.075527][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.089987][ T5898] usb 5-1: USB disconnect, device number 8 [ 100.203095][ T6516] veth0_vlan: entered promiscuous mode [ 100.249473][ T6516] veth1_vlan: entered promiscuous mode [ 100.280678][ T5812] Bluetooth: hci1: command tx timeout [ 100.327898][ T6516] veth0_macvtap: entered promiscuous mode [ 100.336206][ T30] audit: type=1400 audit(1747771116.163:280): avc: denied { create } for pid=6688 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.360123][ T6516] veth1_macvtap: entered promiscuous mode [ 100.378884][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.412797][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.441112][ T6516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.460061][ T6516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.482988][ T6516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.499912][ T6516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.657283][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.689806][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.697406][ T6699] ALSA: seq fatal error: cannot create timer (-16) [ 100.773988][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.793525][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.839973][ T30] audit: type=1400 audit(1747771116.663:281): avc: denied { mounton } for pid=6516 comm="syz-executor" path="/root/syzkaller.ImWDDx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 101.179278][ T30] audit: type=1400 audit(1747771117.003:282): avc: denied { setattr } for pid=6712 comm="syz.3.276" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 101.359216][ T9] usb 2-1: USB disconnect, device number 4 [ 101.759400][ T30] audit: type=1326 audit(1747771117.573:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facea58e969 code=0x7ffc0000 [ 101.821788][ T30] audit: type=1326 audit(1747771117.573:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7facea58e969 code=0x7ffc0000 [ 101.950364][ T30] audit: type=1326 audit(1747771117.573:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facea58e969 code=0x7ffc0000 [ 102.265915][ T30] audit: type=1400 audit(1747771118.093:286): avc: denied { create } for pid=6757 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.339984][ T30] audit: type=1400 audit(1747771118.123:287): avc: denied { connect } for pid=6757 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.595929][ T6209] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.856277][ T30] audit: type=1400 audit(1747771118.673:288): avc: denied { read write } for pid=6777 comm="syz.3.291" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.863201][ T5863] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.899394][ T6782] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 102.968763][ T5863] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.993392][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 103.105010][ T6790] bond1: entered allmulticast mode [ 103.115823][ T6790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.338699][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.347292][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.347416][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 103.365274][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.381358][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.394931][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.416200][ T6209] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.529573][ T6209] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.638557][ T6209] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.040354][ T81] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.120670][ T5900] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.193418][ T81] usb 1-1: Using ep0 maxpacket: 16 [ 104.204459][ T81] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.227731][ T81] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.254699][ T6209] bridge_slave_1: left allmulticast mode [ 104.269467][ T6209] bridge_slave_1: left promiscuous mode [ 104.281306][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.293687][ T81] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.305960][ T6209] bridge_slave_0: left allmulticast mode [ 104.310807][ T81] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 104.321455][ T5900] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.324451][ T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.338148][ T6209] bridge_slave_0: left promiscuous mode [ 104.348159][ T5900] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.362331][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.362901][ T81] usb 1-1: config 0 descriptor?? [ 104.380529][ T5900] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.394763][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.431211][ T6822] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 104.442608][ T5900] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.659332][ T5900] usb 5-1: USB disconnect, device number 9 [ 104.721457][ T5863] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.754153][ T6209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.764521][ T6209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.774243][ T6209] bond0 (unregistering): Released all slaves [ 104.787673][ T6798] chnl_net:caif_netlink_parms(): no params data found [ 104.826346][ T81] apple 0003:05AC:0247.0008: unexpected long global item [ 104.844772][ T81] apple 0003:05AC:0247.0008: parse failed [ 104.851142][ T81] apple 0003:05AC:0247.0008: probe with driver apple failed with error -22 [ 104.882193][ T5863] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.893796][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.908493][ T5863] usb 2-1: config 0 descriptor?? [ 104.918074][ T5863] cp210x 2-1:0.0: cp210x converter detected [ 105.015239][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.026670][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.034185][ T6798] bridge_slave_0: entered allmulticast mode [ 105.040599][ T5892] usb 1-1: USB disconnect, device number 8 [ 105.046335][ T6798] bridge_slave_0: entered promiscuous mode [ 105.069244][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.076818][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.085259][ T6798] bridge_slave_1: entered allmulticast mode [ 105.094092][ T6798] bridge_slave_1: entered promiscuous mode [ 105.198914][ T6798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.223422][ T6209] hsr_slave_0: left promiscuous mode [ 105.229204][ T6209] hsr_slave_1: left promiscuous mode [ 105.237002][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.247764][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.262274][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.269808][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.308382][ T6209] veth1_macvtap: left promiscuous mode [ 105.319904][ T5863] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 105.335262][ T6209] veth0_macvtap: left promiscuous mode [ 105.343432][ T6209] veth1_vlan: left promiscuous mode [ 105.348728][ T6209] veth0_vlan: left promiscuous mode [ 105.481414][ T5812] Bluetooth: hci1: command tx timeout [ 105.594376][ T5863] usb 2-1: cp210x converter now attached to ttyUSB0 [ 105.600108][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 105.600121][ T30] audit: type=1400 audit(1747771121.423:295): avc: denied { create } for pid=6865 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.657585][ T6866] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 105.682714][ T30] audit: type=1400 audit(1747771121.493:296): avc: denied { bind } for pid=6865 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.716073][ T30] audit: type=1400 audit(1747771121.493:297): avc: denied { setopt } for pid=6865 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.750125][ T5863] usb 2-1: USB disconnect, device number 5 [ 105.756433][ T30] audit: type=1400 audit(1747771121.493:298): avc: denied { write } for pid=6865 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.795860][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 105.859661][ T5863] cp210x 2-1:0.0: device disconnected [ 106.088475][ T30] audit: type=1326 audit(1747771121.913:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.4.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25bf38e969 code=0x0 [ 106.125691][ T6209] team0 (unregistering): Port device team_slave_1 removed [ 106.165802][ T6209] team0 (unregistering): Port device team_slave_0 removed [ 106.646806][ T6798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.685366][ T6905] warning: `syz.1.318' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.771002][ T6798] team0: Port device team_slave_0 added [ 106.794109][ T6798] team0: Port device team_slave_1 added [ 106.862230][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.868814][ T6912] loop2: detected capacity change from 0 to 7 [ 106.869352][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.883601][ T6912] Dev loop2: unable to read RDB block 7 [ 106.907503][ T6798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.924383][ T6912] loop2: unable to read partition table [ 106.925432][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.937632][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.963759][ T6912] loop2: partition table beyond EOD, truncated [ 106.963788][ T6912] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.046188][ T6798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.070534][ T5898] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.094171][ T6916] capability: warning: `syz.3.322' uses deprecated v2 capabilities in a way that may be insecure [ 107.111995][ T6915] overlayfs: failed to verify upper root origin [ 107.245271][ T5898] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 107.255808][ T6798] hsr_slave_0: entered promiscuous mode [ 107.266944][ T30] audit: type=1400 audit(1747771123.073:300): avc: denied { mount } for pid=6920 comm="syz.3.324" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.280156][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.294772][ T6798] hsr_slave_1: entered promiscuous mode [ 107.320646][ T30] audit: type=1400 audit(1747771123.103:301): avc: denied { map } for pid=6924 comm="syz.4.325" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.371006][ T5898] usb 1-1: config 0 descriptor?? [ 107.379316][ T30] audit: type=1400 audit(1747771123.103:302): avc: denied { execute } for pid=6924 comm="syz.4.325" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.560698][ T5812] Bluetooth: hci1: command tx timeout [ 107.646691][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.330'. [ 107.763718][ T30] audit: type=1400 audit(1747771123.593:303): avc: denied { name_connect } for pid=6943 comm="syz.4.332" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 107.892528][ T5863] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.062405][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 108.091185][ T5863] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 108.114026][ T5863] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 108.131774][ T5863] usb 4-1: config 0 has no interface number 0 [ 108.145418][ T5863] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.176162][ T5863] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 108.199988][ T5863] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.216155][ T6798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.228081][ T5863] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 108.240072][ T6798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.246857][ T5863] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 108.255874][ T5863] usb 4-1: Product: syz [ 108.264054][ T6798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.271002][ T5863] usb 4-1: Manufacturer: syz [ 108.287250][ T5863] usb 4-1: config 0 descriptor?? [ 108.295173][ T6798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.302896][ T6941] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.423590][ T6798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.439371][ T5898] usb 1-1: Cannot set autoneg [ 108.457155][ T6798] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.464747][ T5898] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 108.491403][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.498559][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.528403][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.535559][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.658785][ T9] usb 1-1: USB disconnect, device number 9 [ 108.857011][ T30] audit: type=1400 audit(1747771124.683:304): avc: denied { ioctl } for pid=6977 comm="syz.4.335" path="socket:[13235]" dev="sockfs" ino=13235 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.885675][ T6798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.962632][ T5863] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input13 [ 109.007461][ T6798] veth0_vlan: entered promiscuous mode [ 109.042339][ T6798] veth1_vlan: entered promiscuous mode [ 109.119784][ T6798] veth0_macvtap: entered promiscuous mode [ 109.147563][ T6798] veth1_macvtap: entered promiscuous mode [ 109.172312][ T5863] usb 4-1: USB disconnect, device number 7 [ 109.178172][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 109.186769][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.191240][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.220298][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.237927][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.248770][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.266991][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.289000][ T6798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.297919][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.297943][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.297963][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.297982][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.298001][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.298020][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.298038][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.298057][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.298076][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.298095][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.298114][ T81] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 109.345636][ T6798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.455146][ T6798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.463932][ T6798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.466612][ T81] hid-generic 009C:0008:0003.0009: hidraw0: HID v0.05 Device [syz1] on syz0 [ 109.640506][ T5812] Bluetooth: hci1: command tx timeout [ 109.658682][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.688622][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.747937][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.774187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.840678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.849184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.857616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.920298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 110.108767][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d6af400: rx timeout, send abort [ 110.118192][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d6af400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.200586][ T81] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.353644][ T81] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.380425][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.400704][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 110.417159][ T81] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.434448][ T81] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.445263][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.459223][ T81] usb 2-1: config 0 descriptor?? [ 110.551967][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 110.712567][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.725026][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.745650][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.758989][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 110.759001][ T30] audit: type=1400 audit(1747771126.593:319): avc: denied { read } for pid=7028 comm="syz.0.351" path="socket:[14380]" dev="sockfs" ino=14380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 110.759092][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.768193][ T30] audit: type=1400 audit(1747771126.603:320): avc: denied { setopt } for pid=7028 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 110.793064][ T9] usb 5-1: Product: syz [ 110.837608][ T9] usb 5-1: Manufacturer: syz [ 110.847912][ T9] usb 5-1: SerialNumber: syz [ 110.868126][ T7031] netlink: 664 bytes leftover after parsing attributes in process `syz.0.352'. [ 110.911684][ T81] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 110.919745][ T81] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 110.949641][ T81] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 111.096148][ T9] usb 5-1: unknown interface protocol 0xaf, assuming v1 [ 111.107681][ T9] usb 5-1: cannot find UAC_HEADER [ 111.136417][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.155666][ T9] usb 5-1: USB disconnect, device number 10 [ 111.155976][ T30] audit: type=1326 audit(1747771126.983:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facea58e969 code=0x7fc00000 [ 111.193092][ T1203] usb 2-1: USB disconnect, device number 6 [ 111.223157][ T6301] udevd[6301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.516446][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.883143][ T30] audit: type=1326 audit(1747771127.713:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facea58e969 code=0x7fc00000 [ 111.911433][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 111.959828][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.973314][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.987036][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.004981][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.021301][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.095021][ T9] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 112.110250][ T9] usb 4-1: config 0 has no interface number 0 [ 112.118545][ T9] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 112.133134][ T9] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 112.142679][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.155396][ T9] usb 4-1: config 0 descriptor?? [ 112.188798][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input14 [ 112.389493][ T9] usb 4-1: USB disconnect, device number 8 [ 112.419420][ T7054] chnl_net:caif_netlink_parms(): no params data found [ 112.471884][ T7054] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.478966][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.487509][ T7054] bridge_slave_0: entered allmulticast mode [ 112.495403][ T7054] bridge_slave_0: entered promiscuous mode [ 112.503377][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.510725][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.517782][ T7054] bridge_slave_1: entered allmulticast mode [ 112.525224][ T7054] bridge_slave_1: entered promiscuous mode [ 112.547166][ T7054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.558753][ T7054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.570437][ T1203] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 112.596042][ T7054] team0: Port device team_slave_0 added [ 112.604900][ T7054] team0: Port device team_slave_1 added [ 112.610754][ T81] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 112.629088][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.656309][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.663989][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.692166][ T7054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.712508][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.727232][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.734595][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.761541][ T7054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.784258][ T81] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.800562][ T81] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.820635][ T1203] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 112.830459][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.838452][ T1203] usb 1-1: Product: syz [ 112.842769][ T81] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.857155][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.865506][ T1203] usb 1-1: Manufacturer: syz [ 112.870129][ T1203] usb 1-1: SerialNumber: syz [ 112.888755][ T1203] usb 1-1: config 0 descriptor?? [ 112.902431][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.927105][ T7079] netlink: 'syz.4.368': attribute type 39 has an invalid length. [ 112.943439][ T7054] hsr_slave_0: entered promiscuous mode [ 112.954928][ T7054] hsr_slave_1: entered promiscuous mode [ 112.971130][ T7054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.980044][ T7054] Cannot create hsr debugfs directory [ 113.022508][ T7081] [ 113.024856][ T7081] ===================================================== [ 113.031762][ T7081] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 113.039200][ T7081] 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 Not tainted [ 113.046282][ T7081] ----------------------------------------------------- [ 113.053188][ T7081] syz.3.369/7081 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 113.060717][ T7081] ffffffff8e00c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 113.069321][ T7081] [ 113.069321][ T7081] and this task is already holding: [ 113.076667][ T7081] ffff88805955ce20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 113.085354][ T7081] which would create a new lock dependency: [ 113.091224][ T7081] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 113.098816][ T7081] [ 113.098816][ T7081] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 113.108252][ T7081] (&client->buffer_lock){..-.}-{3:3} [ 113.108276][ T7081] [ 113.108276][ T7081] ... which became SOFTIRQ-irq-safe at: [ 113.121312][ T7081] lock_acquire+0x179/0x350 [ 113.125897][ T7081] _raw_spin_lock+0x2e/0x40 [ 113.130477][ T7081] evdev_pass_values+0x10e/0x9b0 [ 113.135486][ T7081] evdev_events+0x1bb/0x390 [ 113.140063][ T7081] input_pass_values+0x6c4/0x890 [ 113.145071][ T7081] input_handle_event+0xb29/0x14d0 [ 113.150257][ T7081] input_event+0x83/0xb0 [ 113.154571][ T7081] hidinput_hid_event+0xa10/0x2420 [ 113.159753][ T7081] hid_process_event+0x4b7/0x5e0 [ 113.164757][ T7081] hid_report_raw_event+0xa0a/0x1290 [ 113.170633][ T7081] __hid_input_report.constprop.0+0x33f/0x450 [ 113.176768][ T7081] hid_irq_in+0x35e/0x870 [ 113.181170][ T7081] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 113.186619][ T7081] usb_hcd_giveback_urb+0x39b/0x450 [ 113.191889][ T7081] dummy_timer+0x180e/0x3a20 [ 113.196553][ T7081] __hrtimer_run_queues+0x202/0xad0 [ 113.201830][ T7081] hrtimer_run_softirq+0x17d/0x350 [ 113.207013][ T7081] handle_softirqs+0x216/0x8e0 [ 113.211855][ T7081] __irq_exit_rcu+0x109/0x170 [ 113.216600][ T7081] irq_exit_rcu+0x9/0x30 [ 113.220922][ T7081] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 113.226637][ T7081] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.232689][ T7081] lock_is_held_type+0x107/0x150 [ 113.237701][ T7081] lookup_page_ext+0xe8/0x190 [ 113.242446][ T7081] page_table_check_set+0x3cc/0xb50 [ 113.247712][ T7081] __page_table_check_ptes_set+0x318/0x420 [ 113.253589][ T7081] set_pte_range+0x30e/0x520 [ 113.258250][ T7081] filemap_map_pages+0x56c/0x1680 [ 113.263346][ T7081] do_pte_missing+0xf1a/0x3fb0 [ 113.268183][ T7081] __handle_mm_fault+0x103d/0x2a40 [ 113.273375][ T7081] handle_mm_fault+0x3fe/0xad0 [ 113.278216][ T7081] do_user_addr_fault+0x60c/0x1370 [ 113.283397][ T7081] exc_page_fault+0x5c/0xc0 [ 113.287972][ T7081] asm_exc_page_fault+0x26/0x30 [ 113.292890][ T7081] [ 113.292890][ T7081] to a SOFTIRQ-irq-unsafe lock: [ 113.299886][ T7081] (tasklist_lock){.+.+}-{3:3} [ 113.299908][ T7081] [ 113.299908][ T7081] ... which became SOFTIRQ-irq-unsafe at: [ 113.312502][ T7081] ... [ 113.312508][ T7081] lock_acquire+0x179/0x350 [ 113.319647][ T7081] _raw_read_lock+0x5f/0x70 [ 113.324221][ T7081] __do_wait+0x105/0x890 [ 113.328541][ T7081] do_wait+0x21e/0x5a0 [ 113.332684][ T7081] kernel_wait+0x9f/0x160 [ 113.337080][ T7081] call_usermodehelper_exec_work+0xf1/0x170 [ 113.343044][ T7081] process_one_work+0x9cf/0x1b70 [ 113.348056][ T7081] worker_thread+0x6c8/0xf10 [ 113.352715][ T7081] kthread+0x3c2/0x780 [ 113.356853][ T7081] ret_from_fork+0x45/0x80 [ 113.361337][ T7081] ret_from_fork_asm+0x1a/0x30 [ 113.366176][ T7081] [ 113.366176][ T7081] other info that might help us debug this: [ 113.366176][ T7081] [ 113.376383][ T7081] Chain exists of: [ 113.376383][ T7081] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 113.376383][ T7081] [ 113.389574][ T7081] Possible interrupt unsafe locking scenario: [ 113.389574][ T7081] [ 113.397885][ T7081] CPU0 CPU1 [ 113.403229][ T7081] ---- ---- [ 113.408571][ T7081] lock(tasklist_lock); [ 113.412794][ T7081] local_irq_disable(); [ 113.419524][ T7081] lock(&client->buffer_lock); [ 113.426875][ T7081] lock(&f_owner->lock); [ 113.433706][ T7081] [ 113.437136][ T7081] lock(&client->buffer_lock); [ 113.442141][ T7081] [ 113.442141][ T7081] *** DEADLOCK *** [ 113.442141][ T7081] [ 113.450261][ T7081] 2 locks held by syz.3.369/7081: [ 113.455260][ T7081] #0: ffff888079bbfa40 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xc74/0x1160 [ 113.464734][ T7081] #1: ffff88805955ce20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 113.473853][ T7081] [ 113.473853][ T7081] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 113.484233][ T7081] -> (&client->buffer_lock){..-.}-{3:3} { [ 113.490122][ T7081] IN-SOFTIRQ-W at: [ 113.494256][ T7081] lock_acquire+0x179/0x350 [ 113.500749][ T7081] _raw_spin_lock+0x2e/0x40 [ 113.507234][ T7081] evdev_pass_values+0x10e/0x9b0 [ 113.514153][ T7081] evdev_events+0x1bb/0x390 [ 113.520638][ T7081] input_pass_values+0x6c4/0x890 [ 113.527556][ T7081] input_handle_event+0xb29/0x14d0 [ 113.534648][ T7081] input_event+0x83/0xb0 [ 113.540870][ T7081] hidinput_hid_event+0xa10/0x2420 [ 113.547960][ T7081] hid_process_event+0x4b7/0x5e0 [ 113.554874][ T7081] hid_report_raw_event+0xa0a/0x1290 [ 113.562139][ T7081] __hid_input_report.constprop.0+0x33f/0x450 [ 113.570188][ T7081] hid_irq_in+0x35e/0x870 [ 113.576507][ T7081] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 113.583862][ T7081] usb_hcd_giveback_urb+0x39b/0x450 [ 113.591045][ T7081] dummy_timer+0x180e/0x3a20 [ 113.597613][ T7081] __hrtimer_run_queues+0x202/0xad0 [ 113.604790][ T7081] hrtimer_run_softirq+0x17d/0x350 [ 113.611880][ T7081] handle_softirqs+0x216/0x8e0 [ 113.618626][ T7081] __irq_exit_rcu+0x109/0x170 [ 113.625284][ T7081] irq_exit_rcu+0x9/0x30 [ 113.631512][ T7081] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 113.639128][ T7081] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.647105][ T7081] lock_is_held_type+0x107/0x150 [ 113.654030][ T7081] lookup_page_ext+0xe8/0x190 [ 113.660688][ T7081] page_table_check_set+0x3cc/0xb50 [ 113.667864][ T7081] __page_table_check_ptes_set+0x318/0x420 [ 113.675649][ T7081] set_pte_range+0x30e/0x520 [ 113.682225][ T7081] filemap_map_pages+0x56c/0x1680 [ 113.689231][ T7081] do_pte_missing+0xf1a/0x3fb0 [ 113.695980][ T7081] __handle_mm_fault+0x103d/0x2a40 [ 113.703089][ T7081] handle_mm_fault+0x3fe/0xad0 [ 113.709838][ T7081] do_user_addr_fault+0x60c/0x1370 [ 113.716933][ T7081] exc_page_fault+0x5c/0xc0 [ 113.723422][ T7081] asm_exc_page_fault+0x26/0x30 [ 113.730252][ T7081] INITIAL USE at: [ 113.734305][ T7081] lock_acquire+0x179/0x350 [ 113.740718][ T7081] _raw_spin_lock+0x2e/0x40 [ 113.747128][ T7081] evdev_pass_values+0x10e/0x9b0 [ 113.753967][ T7081] evdev_events+0x1bb/0x390 [ 113.760366][ T7081] input_pass_values+0x6c4/0x890 [ 113.767204][ T7081] input_handle_event+0xf00/0x14d0 [ 113.774214][ T7081] input_inject_event+0x1cd/0x390 [ 113.781136][ T7081] evdev_write+0x457/0x750 [ 113.787448][ T7081] vfs_write+0x25c/0x1180 [ 113.793678][ T7081] ksys_write+0x205/0x240 [ 113.799911][ T7081] do_syscall_64+0xcd/0x260 [ 113.806323][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.814118][ T7081] } [ 113.816772][ T7081] ... key at: [] __key.1+0x0/0x40 [ 113.824040][ T7081] -> (&new->fa_lock){....}-{3:3} { [ 113.829235][ T7081] INITIAL USE at: [ 113.833200][ T7081] lock_acquire+0x179/0x350 [ 113.839429][ T7081] _raw_write_lock_irq+0x36/0x50 [ 113.846093][ T7081] fasync_remove_entry+0xb2/0x1e0 [ 113.852842][ T7081] fasync_helper+0xaf/0xd0 [ 113.858979][ T7081] lease_modify+0x232/0x500 [ 113.865209][ T7081] locks_remove_file+0x29e/0x5b0 [ 113.872396][ T7081] __fput+0x351/0xb70 [ 113.878100][ T7081] task_work_run+0x150/0x240 [ 113.884409][ T7081] syscall_exit_to_user_mode+0x27b/0x2a0 [ 113.891775][ T7081] do_syscall_64+0xda/0x260 [ 113.898006][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.905625][ T7081] INITIAL READ USE at: [ 113.910022][ T7081] lock_acquire+0x179/0x350 [ 113.916687][ T7081] _raw_read_lock_irqsave+0x74/0x90 [ 113.924044][ T7081] kill_fasync+0x138/0x510 [ 113.930617][ T7081] lease_break_callback+0x23/0x30 [ 113.937797][ T7081] __break_lease+0x671/0x1810 [ 113.944631][ T7081] do_dentry_open+0x6e1/0x1c10 [ 113.951557][ T7081] vfs_open+0x82/0x3f0 [ 113.957781][ T7081] path_openat+0x1e5e/0x2d40 [ 113.964523][ T7081] do_filp_open+0x20b/0x470 [ 113.971180][ T7081] do_sys_openat2+0x11b/0x1d0 [ 113.978015][ T7081] __x64_sys_open+0x153/0x1e0 [ 113.984845][ T7081] do_syscall_64+0xcd/0x260 [ 113.991508][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.999564][ T7081] } [ 114.002138][ T7081] ... key at: [] __key.0+0x0/0x40 [ 114.009328][ T7081] ... acquired at: [ 114.013199][ T7081] _raw_read_lock_irqsave+0x74/0x90 [ 114.018560][ T7081] kill_fasync+0x138/0x510 [ 114.023139][ T7081] evdev_pass_values+0x619/0x9b0 [ 114.028243][ T7081] evdev_events+0x1bb/0x390 [ 114.032908][ T7081] input_pass_values+0x6c4/0x890 [ 114.038008][ T7081] input_handle_event+0xf00/0x14d0 [ 114.043283][ T7081] input_inject_event+0x1cd/0x390 [ 114.048470][ T7081] evdev_write+0x457/0x750 [ 114.053050][ T7081] vfs_write+0x25c/0x1180 [ 114.057554][ T7081] ksys_write+0x205/0x240 [ 114.062143][ T7081] do_syscall_64+0xcd/0x260 [ 114.066817][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.072879][ T7081] [ 114.075187][ T7081] -> (&f_owner->lock){....}-{3:3} { [ 114.080387][ T7081] INITIAL USE at: [ 114.084262][ T7081] lock_acquire+0x179/0x350 [ 114.090327][ T7081] _raw_write_lock_irq+0x36/0x50 [ 114.096823][ T7081] __f_setown+0x61/0x3c0 [ 114.102618][ T7081] generic_setlease+0xeef/0x1300 [ 114.109111][ T7081] kernel_setlease+0x106/0x140 [ 114.115426][ T7081] vfs_setlease+0x258/0x2d0 [ 114.121486][ T7081] fcntl_setlease+0x3ed/0x5a0 [ 114.127715][ T7081] do_fcntl+0x75a/0x1590 [ 114.133504][ T7081] __x64_sys_fcntl+0x170/0x200 [ 114.139814][ T7081] do_syscall_64+0xcd/0x260 [ 114.145867][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.153306][ T7081] INITIAL READ USE at: [ 114.157615][ T7081] lock_acquire+0x179/0x350 [ 114.164106][ T7081] _raw_read_lock_irqsave+0x74/0x90 [ 114.171307][ T7081] send_sigio+0x31/0x3e0 [ 114.177529][ T7081] kill_fasync+0x214/0x510 [ 114.183924][ T7081] lease_break_callback+0x23/0x30 [ 114.190928][ T7081] __break_lease+0x671/0x1810 [ 114.197588][ T7081] do_dentry_open+0x6e1/0x1c10 [ 114.204338][ T7081] vfs_open+0x82/0x3f0 [ 114.210388][ T7081] path_openat+0x1e5e/0x2d40 [ 114.216953][ T7081] do_filp_open+0x20b/0x470 [ 114.223438][ T7081] do_sys_openat2+0x11b/0x1d0 [ 114.230096][ T7081] __x64_sys_open+0x153/0x1e0 [ 114.236755][ T7081] do_syscall_64+0xcd/0x260 [ 114.243243][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.251116][ T7081] } [ 114.253595][ T7081] ... key at: [] __key.1+0x0/0x40 [ 114.260688][ T7081] ... acquired at: [ 114.264471][ T7081] _raw_read_lock_irqsave+0x74/0x90 [ 114.269829][ T7081] send_sigio+0x31/0x3e0 [ 114.274227][ T7081] kill_fasync+0x214/0x510 [ 114.278799][ T7081] lease_break_callback+0x23/0x30 [ 114.283979][ T7081] __break_lease+0x671/0x1810 [ 114.288818][ T7081] do_dentry_open+0x6e1/0x1c10 [ 114.293745][ T7081] vfs_open+0x82/0x3f0 [ 114.297970][ T7081] path_openat+0x1e5e/0x2d40 [ 114.302720][ T7081] do_filp_open+0x20b/0x470 [ 114.307376][ T7081] do_sys_openat2+0x11b/0x1d0 [ 114.312212][ T7081] __x64_sys_open+0x153/0x1e0 [ 114.317049][ T7081] do_syscall_64+0xcd/0x260 [ 114.321713][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.327766][ T7081] [ 114.330071][ T7081] [ 114.330071][ T7081] the dependencies between the lock to be acquired [ 114.330078][ T7081] and SOFTIRQ-irq-unsafe lock: [ 114.343549][ T7081] -> (tasklist_lock){.+.+}-{3:3} { [ 114.348656][ T7081] HARDIRQ-ON-R at: [ 114.352615][ T7081] lock_acquire+0x179/0x350 [ 114.358756][ T7081] _raw_read_lock+0x5f/0x70 [ 114.364895][ T7081] __do_wait+0x105/0x890 [ 114.371211][ T7081] do_wait+0x21e/0x5a0 [ 114.376923][ T7081] kernel_wait+0x9f/0x160 [ 114.382883][ T7081] call_usermodehelper_exec_work+0xf1/0x170 [ 114.390412][ T7081] process_one_work+0x9cf/0x1b70 [ 114.396987][ T7081] worker_thread+0x6c8/0xf10 [ 114.403207][ T7081] kthread+0x3c2/0x780 [ 114.408922][ T7081] ret_from_fork+0x45/0x80 [ 114.414971][ T7081] ret_from_fork_asm+0x1a/0x30 [ 114.421372][ T7081] SOFTIRQ-ON-R at: [ 114.425336][ T7081] lock_acquire+0x179/0x350 [ 114.431483][ T7081] _raw_read_lock+0x5f/0x70 [ 114.437619][ T7081] __do_wait+0x105/0x890 [ 114.443503][ T7081] do_wait+0x21e/0x5a0 [ 114.449645][ T7081] kernel_wait+0x9f/0x160 [ 114.455604][ T7081] call_usermodehelper_exec_work+0xf1/0x170 [ 114.463131][ T7081] process_one_work+0x9cf/0x1b70 [ 114.469702][ T7081] worker_thread+0x6c8/0xf10 [ 114.475923][ T7081] kthread+0x3c2/0x780 [ 114.481624][ T7081] ret_from_fork+0x45/0x80 [ 114.487670][ T7081] ret_from_fork_asm+0x1a/0x30 [ 114.494073][ T7081] INITIAL USE at: [ 114.497948][ T7081] lock_acquire+0x179/0x350 [ 114.504003][ T7081] _raw_write_lock_irq+0x36/0x50 [ 114.510489][ T7081] copy_process+0x3f09/0x91b0 [ 114.516716][ T7081] kernel_clone+0xfc/0x960 [ 114.522680][ T7081] user_mode_thread+0xc7/0x110 [ 114.528993][ T7081] rest_init+0x23/0x2b0 [ 114.534696][ T7081] start_kernel+0x3e9/0x4d0 [ 114.540743][ T7081] x86_64_start_reservations+0x18/0x30 [ 114.547745][ T7081] x86_64_start_kernel+0xb0/0xc0 [ 114.554230][ T7081] common_startup_64+0x13e/0x148 [ 114.560716][ T7081] INITIAL READ USE at: [ 114.565025][ T7081] lock_acquire+0x179/0x350 [ 114.571513][ T7081] _raw_read_lock+0x5f/0x70 [ 114.578003][ T7081] __do_wait+0x105/0x890 [ 114.584242][ T7081] do_wait+0x21e/0x5a0 [ 114.590301][ T7081] kernel_wait+0x9f/0x160 [ 114.596611][ T7081] call_usermodehelper_exec_work+0xf1/0x170 [ 114.604485][ T7081] process_one_work+0x9cf/0x1b70 [ 114.611402][ T7081] worker_thread+0x6c8/0xf10 [ 114.617975][ T7081] kthread+0x3c2/0x780 [ 114.624023][ T7081] ret_from_fork+0x45/0x80 [ 114.630418][ T7081] ret_from_fork_asm+0x1a/0x30 [ 114.637174][ T7081] } [ 114.639653][ T7081] ... key at: [] tasklist_lock+0x18/0x40 [ 114.647360][ T7081] ... acquired at: [ 114.651145][ T7081] lock_acquire+0x179/0x350 [ 114.655810][ T7081] _raw_read_lock+0x5f/0x70 [ 114.660471][ T7081] send_sigurg+0xed/0xc80 [ 114.664957][ T7081] sk_send_sigurg+0x76/0x360 [ 114.669699][ T7081] unix_stream_sendmsg+0xe77/0x1160 [ 114.675061][ T7081] ____sys_sendmsg+0xa95/0xc70 [ 114.679984][ T7081] ___sys_sendmsg+0x134/0x1d0 [ 114.684815][ T7081] __sys_sendmsg+0x16d/0x220 [ 114.689559][ T7081] do_syscall_64+0xcd/0x260 [ 114.694225][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.700273][ T7081] [ 114.702575][ T7081] [ 114.702575][ T7081] stack backtrace: [ 114.708451][ T7081] CPU: 1 UID: 60928 PID: 7081 Comm: syz.3.369 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 114.708471][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.708480][ T7081] Call Trace: [ 114.708484][ T7081] [ 114.708492][ T7081] dump_stack_lvl+0x116/0x1f0 [ 114.708513][ T7081] check_irq_usage+0x7dc/0x920 [ 114.708538][ T7081] ? check_path.constprop.0+0x24/0x50 [ 114.708561][ T7081] ? __lock_acquire+0x1189/0x1ba0 [ 114.708582][ T7081] __lock_acquire+0x1189/0x1ba0 [ 114.708608][ T7081] lock_acquire+0x179/0x350 [ 114.708629][ T7081] ? send_sigurg+0xed/0xc80 [ 114.708648][ T7081] _raw_read_lock+0x5f/0x70 [ 114.708665][ T7081] ? send_sigurg+0xed/0xc80 [ 114.708680][ T7081] send_sigurg+0xed/0xc80 [ 114.708697][ T7081] ? find_held_lock+0x2b/0x80 [ 114.708715][ T7081] sk_send_sigurg+0x76/0x360 [ 114.708729][ T7081] unix_stream_sendmsg+0xe77/0x1160 [ 114.708752][ T7081] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 114.708777][ T7081] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 114.708803][ T7081] ____sys_sendmsg+0xa95/0xc70 [ 114.708823][ T7081] ? copy_msghdr_from_user+0x10a/0x160 [ 114.708839][ T7081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.708860][ T7081] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 114.708881][ T7081] ___sys_sendmsg+0x134/0x1d0 [ 114.708897][ T7081] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.708924][ T7081] __sys_sendmsg+0x16d/0x220 [ 114.708939][ T7081] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.708954][ T7081] ? __x64_sys_futex+0x1e0/0x4c0 [ 114.708977][ T7081] ? rcu_is_watching+0x12/0xc0 [ 114.708996][ T7081] do_syscall_64+0xcd/0x260 [ 114.709017][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.709032][ T7081] RIP: 0033:0x7f229218e969 [ 114.709044][ T7081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.709059][ T7081] RSP: 002b:00007f2293085038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.709073][ T7081] RAX: ffffffffffffffda RBX: 00007f22923b5fa0 RCX: 00007f229218e969 [ 114.709083][ T7081] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000003 [ 114.709092][ T7081] RBP: 00007f2292210ab1 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.709101][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.709110][ T7081] R13: 0000000000000000 R14: 00007f22923b5fa0 R15: 00007ffdd44ee038 [ 114.709123][ T7081] [ 114.976138][ T5821] Bluetooth: hci1: command tx timeout [ 114.997838][ T1203] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 115.004837][ T1203] f81604 1-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 115.013251][ T1203] f81604 1-1:0.0: probe with driver f81604 failed with error -110 [ 115.305539][ T61] bridge_slave_1: left allmulticast mode [ 115.321398][ T61] bridge_slave_1: left promiscuous mode [ 115.327085][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.344727][ T61] bridge_slave_0: left allmulticast mode [ 115.360304][ T81] usb 2-1: usb_control_msg returned -71 [ 115.365943][ T61] bridge_slave_0: left promiscuous mode [ 115.380219][ T81] usbtmc 2-1:16.0: can't read capabilities [ 115.389888][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.416643][ T81] usb 2-1: USB disconnect, device number 7 [ 115.442955][ T9] usb 1-1: USB disconnect, device number 10 [ 115.535235][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.544884][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.555847][ T61] bond0 (unregistering): Released all slaves [ 115.746100][ T61] hsr_slave_0: left promiscuous mode [ 115.752814][ T61] hsr_slave_1: left promiscuous mode [ 115.758850][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.774774][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.786554][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.793990][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.805075][ T61] veth1_macvtap: left promiscuous mode [ 115.810632][ T61] veth0_macvtap: left promiscuous mode [ 115.816117][ T61] veth1_vlan: left promiscuous mode [ 115.821381][ T61] veth0_vlan: left promiscuous mode [ 115.904639][ T61] team0 (unregistering): Port device team_slave_1 removed [ 115.921571][ T61] team0 (unregistering): Port device team_slave_0 removed [ 116.231581][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.286056][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.323696][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.375324][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.472637][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.483373][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.525057][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.536608][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.574319][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.585040][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.645024][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.655551][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.729856][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.763552][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.815079][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.874877][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.939736][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.975683][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.026012][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.063989][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.150599][ T61] bridge_slave_1: left allmulticast mode [ 117.156259][ T61] bridge_slave_1: left promiscuous mode [ 117.162637][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.175476][ T61] bridge_slave_0: left allmulticast mode [ 117.181245][ T61] bridge_slave_0: left promiscuous mode [ 117.186878][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.200791][ T61] bridge_slave_1: left allmulticast mode [ 117.206429][ T61] bridge_slave_1: left promiscuous mode [ 117.213730][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.221869][ T61] bridge_slave_0: left allmulticast mode [ 117.227507][ T61] bridge_slave_0: left promiscuous mode [ 117.234972][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.243686][ T61] bridge_slave_1: left allmulticast mode [ 117.249318][ T61] bridge_slave_1: left promiscuous mode [ 117.255109][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.264906][ T61] bridge_slave_0: left allmulticast mode [ 117.271810][ T61] bridge_slave_0: left promiscuous mode [ 117.277382][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.285860][ T61] bridge_slave_1: left allmulticast mode [ 117.291583][ T61] bridge_slave_1: left promiscuous mode [ 117.297500][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.305136][ T61] bridge_slave_0: left allmulticast mode [ 117.310924][ T61] bridge_slave_0: left promiscuous mode [ 117.316545][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.703947][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.713227][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.722298][ T61] bond0 (unregistering): Released all slaves [ 117.731967][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.741629][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.751005][ T61] bond0 (unregistering): Released all slaves [ 117.760082][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.770075][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.779105][ T61] bond0 (unregistering): Released all slaves [ 117.787589][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.796837][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.807180][ T61] bond0 (unregistering): Released all slaves [ 117.855625][ T61] bond0 (unregistering): Released all slaves [ 117.903361][ T61] bond1 (unregistering): Released all slaves [ 118.399569][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.409997][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.422342][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.429725][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.439240][ T61] hsr_slave_0: left promiscuous mode [ 118.445915][ T61] hsr_slave_1: left promiscuous mode [ 118.452348][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.459745][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.468594][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.476100][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.486287][ T61] hsr_slave_0: left promiscuous mode [ 118.492218][ T61] hsr_slave_1: left promiscuous mode [ 118.497811][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.505358][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.515021][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.522416][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.529767][ T61] hsr_slave_0: left promiscuous mode [ 118.535419][ T61] hsr_slave_1: left promiscuous mode [ 118.540912][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.548204][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.557642][ T61] hsr_slave_0: left promiscuous mode [ 118.568550][ T61] veth1_macvtap: left promiscuous mode [ 118.574091][ T61] veth0_macvtap: left promiscuous mode [ 118.579575][ T61] veth1_vlan: left promiscuous mode [ 118.585039][ T61] veth0_vlan: left promiscuous mode [ 118.590803][ T61] veth1_macvtap: left promiscuous mode [ 118.596259][ T61] veth0_macvtap: left promiscuous mode [ 118.601780][ T61] veth1_vlan: left promiscuous mode [ 118.606993][ T61] veth0_vlan: left promiscuous mode [ 118.612933][ T61] veth1_macvtap: left promiscuous mode [ 118.618387][ T61] veth0_macvtap: left promiscuous mode [ 118.623932][ T61] veth1_vlan: left promiscuous mode [ 118.629150][ T61] veth0_vlan: left promiscuous mode [ 118.634858][ T61] veth1_macvtap: left promiscuous mode [ 118.640331][ T61] veth0_macvtap: left promiscuous mode [ 118.645802][ T61] veth1_vlan: left promiscuous mode [ 118.651116][ T61] veth0_vlan: left promiscuous mode [ 118.798383][ T61] team0 (unregistering): Port device team_slave_1 removed [ 118.808623][ T61] team0 (unregistering): Port device team_slave_0 removed [ 118.902149][ T61] team0 (unregistering): Port device team_slave_1 removed [ 118.917641][ T61] team0 (unregistering): Port device team_slave_0 removed [ 119.009539][ T61] team0 (unregistering): Port device team_slave_1 removed [ 119.024883][ T61] team0 (unregistering): Port device team_slave_0 removed [ 119.089827][ T61] team0 (unregistering): Port device team_slave_1 removed [ 119.111466][ T61] team0 (unregistering): Port device team_slave_0 removed