last executing test programs: 1m1.203203992s ago: executing program 3 (id=649): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc00c5512, &(0x7f0000000000)={0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') close_range(r4, 0xffffffffffffffff, 0x0) 54.914528512s ago: executing program 3 (id=659): r0 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 54.870125967s ago: executing program 2 (id=661): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbff, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_NH_ID={0x8, 0x1e, 0x401}]}, 0x2c}}, 0x0) 54.803901237s ago: executing program 2 (id=663): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000280)={0x18, 0x0, 0x57, 0x0, 0x0}) 54.730485398s ago: executing program 2 (id=664): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0xff, 0x0}}}}}}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, 0x0, 0x4004800) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 53.711131622s ago: executing program 2 (id=667): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x33e6, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x2}, 0xfc1e) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$9p(&(0x7f0000000140), 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x2100, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r4 = creat(0x0, 0x0) timerfd_gettime(r4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x50) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000980)) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 52.582107115s ago: executing program 2 (id=670): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"cb02c6d8cb00fc18137f1cad3e48018b251f7320a0e800", r1, 0xffffffffffffffff}) close_range(r0, r2, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) io_submit(r5, 0x0, 0x0) 51.867369486s ago: executing program 2 (id=672): syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4) syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040083) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$VT_RELDISP(r2, 0x5605) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x4, 0x0, 0xc8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f00000005c0), 0x200005d8) 45.146483656s ago: executing program 3 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x767974b3f79ca291}}], 0x4000359, 0x0, 0x0) 43.838133402s ago: executing program 3 (id=682): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"cb02c6d8cb00fc18137f1cad3e48018b251f7320a0e800", r1, 0xffffffffffffffff}) close_range(r0, r2, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) io_submit(r5, 0x0, 0x0) 43.554006225s ago: executing program 1 (id=683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f0000000080)="e3", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0xda8c) accept4(r2, &(0x7f0000000100)=@nfc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030601030000000046000002000000000500010007"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) 41.090807909s ago: executing program 3 (id=689): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="057d857b0d00"/21, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000001800)=[@rthdr_2292={{0x64, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @remote, @mcast2, @local]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x8c, 0x29, 0x37, {0x4, 0xe, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x18, 0x54, "71ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6fe803bcce07416117150d84bf14d30917fc37ed858a"}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0xbac, [0x9]}}]}}}, @rthdr={{0x84, 0x29, 0x39, {0x87, 0xe, 0x0, 0xf2, 0x0, [@mcast2, @mcast1, @remote, @mcast2, @empty, @mcast1, @mcast1]}}}, @tclass={{0x10}}, @tclass={{0x10, 0x29, 0x43, 0x1}}, @hopopts={{0x2c, 0x29, 0x36, {0x3c, 0x3, '\x00', [@padn, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xd}]}}}, @dstopts={{0x1ac, 0x29, 0x37, {0x0, 0x32, '\x00', [@generic={0x2, 0xd8, "2643e36b1785875b125a39346cb47490823d0f43653d5824b2ce66c6313092b2d672351681192365913f18d34f2aa5941179ff2c7f302f34b43fdd92552b21ce960cbc968128ba2be5be098cc20dc01ee6b02a87764aa7a1dc5e382785f40d81635fe5aa027d1e00940d3c65c2dc0ece79d641bb2400d72a832a6ab1d047114b2568c53779571f44f9b0869dd91c1fbaf9ee2b54e58c54bb0bc69aa8acc08b1f37e377261ad28b0b559f966c5597c385fcb4fef68e7c8ca093373f1f358df9e2b199dd67c297cb0113a46d16c0bf0e26dd8c0e18c4dd2275"}, @enc_lim={0x4, 0x1, 0xdb}, @generic={0x0, 0xb4, "e60a04df37a74fc72c6f2a751999de0c8117fae0b6ce8431ad66fe5ed9c4292083ccee155ccaf67e134652f071999d91b50294d4998cb5ec3002b4cb32098c9a6e88bcd9a67308cab5bb459129b7e315d93675f40be53752909070be64ac7e969fe2b6443398ad53e0eea8995d73ae68b95c94a0958d0eef3cb622f501d14d5c0c77dca6d307a580054ba35c59b7d4139f556cfb023e0c945708499ef764a794afff9ffce920cda12f14047778f500aaeae2684f"}]}}}], 0x37c}, 0x4000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x161101, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0xffffffff, {0x2}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x2c}}, 0x0) 40.591518321s ago: executing program 1 (id=690): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x28048814}, 0x0) 39.690604566s ago: executing program 1 (id=691): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) 36.828015571s ago: executing program 3 (id=696): syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4) syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040083) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x4, 0x0, 0xc8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f00000005c0), 0x200005d8) 36.194624701s ago: executing program 1 (id=700): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc0046209, 0xfffffffffffffffe) 35.79384975s ago: executing program 1 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x767974b3f79ca291}}], 0x4000359, 0x0, 0x0) 33.804081547s ago: executing program 1 (id=704): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000180000000800000040"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) 7.928442648s ago: executing program 4 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000300)='./file1\x00', r2, &(0x7f0000000400)='./file0\x00', 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) 7.55499813s ago: executing program 4 (id=750): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x0}) r2 = syz_io_uring_setup(0x238, &(0x7f0000000380)={0x0, 0x200000, 0x10100, 0x3, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000200)={{@my=0x0, 0x7ff}, 0x0, 0x2, 0x8}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000240)=[{0x424, 0xf, 0x5, 0x6}]}) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000280)={0x2, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f00000005c0)=""/54, 0x36}], &(0x7f0000000600)=[0x1, 0x3, 0x8, 0x40000000000005, 0x9541, 0x3, 0x0]}, 0x20) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='quoVa,\x00']) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x18b) syz_io_uring_setup(0x4919, &(0x7f0000000540)={0x0, 0x8724, 0xa, 0x0, 0x321}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x28011, 0xffffffffffffffff, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 7.031399025s ago: executing program 4 (id=751): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="d7c24c9c", 0x4}], 0x1, 0x0) 6.742652861s ago: executing program 4 (id=752): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000002c0)="be", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='D', 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.574501396s ago: executing program 0 (id=757): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, 0x0, 0x0) 4.408693876s ago: executing program 0 (id=758): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_4={0x3, 0x1, 0x5, "f07d6043"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, 'p1'}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_012={0x2, 0x0, 0x8, "49ba"}, @main=@item_4={0x3, 0x0, 0x9, "93cb2eba"}]}}, 0x0}, 0x0) 3.338645309s ago: executing program 4 (id=759): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x41, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20080080) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@any, 0xf6, 0x6, 0x89, "d8ed54", 0xfffa, 0x5c}, {@none, 0x5, 0xf8, 0x9, "5197bb", 0x6, 0xfd}, {@none, 0xf0, 0x3, 0x4, "4cd6f2", 0x8, 0x10}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb, 0x3, 0x48, "c976a2", 0x3, 0x52}]}}}, 0x40) 3.022481261s ago: executing program 4 (id=760): bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0xc3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902b1000201000000000006240600013b05240000000d240f010000000000000000ff0624"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x4}, 0x9c) 2.328516453s ago: executing program 0 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791090000000000061000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925ab06dcde9fe4ee40405e10326cb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffdff01000000000000d375c71938d9faa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed5790000000b8fc3b5fd11e6ca750a6dc5dba2b8b8cd1d9fed1fb63bafef7d7bdd5bad81e40379623de900000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x15, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r4, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000080)={0x28, 0x5, r2, r4, 0x1e}) write$binfmt_elf64(r1, 0x0, 0x9f3) syz_emit_ethernet(0x126e, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x2, [@restrict={0x2}, @const={0x2000008, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0xf, 0x1}, {0xe, 0x5}]}, @func={0x0, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb, 0x2}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x7a, 0x0, 0xa, 0x6}, @struct={0x2, 0x0, 0x0, 0x4, 0x1}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x1}, @volatile={0x3}]}}, &(0x7f0000000640)=""/93, 0xc6, 0x5d, 0x0, 0x100, 0x0, @void, @value}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file2\x00', 0x2000, 0x0) syz_io_uring_setup(0x3a6b, 0x0, 0x0, &(0x7f00000005c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.685828526s ago: executing program 0 (id=762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setrlimit(0x0, &(0x7f0000000280)={0x89c}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000009f95cb9450000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffff9c, &(0x7f0000000380)='./file0\x00', 0x64a4c1, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {}, 0x23, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x800200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x4], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x45c) r5 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r5, 0x300, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 613.888799ms ago: executing program 0 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) renameat2(r1, &(0x7f0000000440)='./bus\x00', r1, &(0x7f0000000480)='./file0\x00', 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10010, r4, 0xa9bfb000) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=764): r0 = creat(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x10c045f55bed3d0e, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/68, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000018000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b4000000000600004802c0001800c000100636f756e746572001c0002800c00014000000000000000000c0002400000000000000076240001800b0001007470726f7879000014000280080002400000000008000140000000b30c00018007000100727400000900010073797a30"], 0xfc}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="5aee41dea43e63a3f75e64fb7ff20700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x6, 0x603) kernel console output (not intermixed with test programs): _slave_0 [ 226.325778][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.333348][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.345945][ T11] hsr_slave_0: left promiscuous mode [ 226.351986][ T11] hsr_slave_1: left promiscuous mode [ 226.362003][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.369621][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.384010][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.391619][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.433947][ T11] veth1_macvtap: left promiscuous mode [ 226.439706][ T11] veth0_macvtap: left promiscuous mode [ 226.445255][ T11] veth1_vlan: left promiscuous mode [ 226.450624][ T11] veth0_vlan: left promiscuous mode [ 226.462589][ T11] veth1_macvtap: left promiscuous mode [ 226.469172][ T11] veth0_macvtap: left promiscuous mode [ 226.474787][ T11] veth1_vlan: left promiscuous mode [ 226.481371][ T11] veth0_vlan: left promiscuous mode [ 226.489934][ T11] veth1_macvtap: left promiscuous mode [ 226.496044][ T11] veth0_macvtap: left promiscuous mode [ 226.501731][ T11] veth1_vlan: left promiscuous mode [ 226.507235][ T11] veth0_vlan: left promiscuous mode [ 227.094055][ T11] team0 (unregistering): Port device team_slave_1 removed [ 227.144739][ T11] team0 (unregistering): Port device team_slave_0 removed [ 227.612636][ T11] team0 (unregistering): Port device team_slave_1 removed [ 227.642651][ T11] team0 (unregistering): Port device team_slave_0 removed [ 228.130330][ T11] team0 (unregistering): Port device team_slave_1 removed [ 228.174333][ T11] team0 (unregistering): Port device team_slave_0 removed [ 228.870815][ T11] team0 (unregistering): Port device team_slave_1 removed [ 228.916000][ T11] team0 (unregistering): Port device team_slave_0 removed [ 229.222110][ T5391] udevd (5391) used greatest stack depth: 20704 bytes left [ 229.640884][ T11] team0 (unregistering): Port device team_slave_1 removed [ 229.684862][ T11] team0 (unregistering): Port device team_slave_0 removed [ 230.082677][ T6666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.097867][ T6666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.129755][ T6661] veth0_vlan: entered promiscuous mode [ 230.181195][ T6661] veth1_vlan: entered promiscuous mode [ 230.351660][ T6661] veth0_macvtap: entered promiscuous mode [ 230.397782][ T6658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.430002][ T6658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.460048][ T6658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.518969][ T6658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.543431][ T6661] veth1_macvtap: entered promiscuous mode [ 230.565551][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.679109][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.714301][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.771823][ T6661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.790017][ T6661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.799576][ T6661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.808723][ T6661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.862497][ T6660] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.902814][ T6660] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.963933][ T6660] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.981382][ T6660] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.247342][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.252304][ T6658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.255182][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.303407][ T6664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.370890][ T6664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.398051][ T6664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.454235][ T6658] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.481735][ T6664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.524929][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.552553][ T6666] veth0_vlan: entered promiscuous mode [ 231.563534][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.590039][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.597199][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.665078][ T6666] veth1_vlan: entered promiscuous mode [ 231.701920][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.709076][ T6652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.816023][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.883457][ T6660] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.921938][ T6666] veth0_macvtap: entered promiscuous mode [ 231.950980][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.958163][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.015282][ T6666] veth1_macvtap: entered promiscuous mode [ 232.114254][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.121420][ T2579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.197222][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.217621][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.234559][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.258358][ T6660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.304169][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.333987][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.367503][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.435058][ T6666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.454256][ T6666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.471167][ T6666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.480777][ T6666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.604603][ T6664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.644833][ T6664] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.692065][ T6658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.724321][ T6660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.744137][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.751349][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.771580][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.775069][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.778885][ T6652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.802279][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.898667][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.923392][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.942186][ T6660] veth0_vlan: entered promiscuous mode [ 232.967128][ T6658] veth0_vlan: entered promiscuous mode [ 233.031559][ T6660] veth1_vlan: entered promiscuous mode [ 233.058848][ T6660] veth0_macvtap: entered promiscuous mode [ 233.067886][ T6660] veth1_macvtap: entered promiscuous mode [ 233.083314][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.093858][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.104329][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.114959][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.126180][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.135924][ T6658] veth1_vlan: entered promiscuous mode [ 233.171791][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.185328][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.206035][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.224572][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.243876][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.672919][ T6660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.719159][ T6660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.755420][ T6660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.796165][ T6660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.945851][ T6658] veth0_macvtap: entered promiscuous mode [ 234.063205][ T6664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.084775][ T6658] veth1_macvtap: entered promiscuous mode [ 234.144676][ T2579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.178870][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 234.205638][ T2579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.814299][ T6658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.856463][ T6658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.876414][ T6658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.916477][ T6658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.960035][ T6658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.970560][ T6658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.981976][ T6658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.998288][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.016801][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.119177][ T6658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.139892][ T6658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.180943][ T6658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.225062][ T6658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.307254][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 235.316412][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 57, changing to 4 [ 235.423448][ T6658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.445532][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 235.467228][ T6658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.493137][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.547708][ T6658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.586668][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.594723][ T8] usb 2-1: Product: syz [ 235.668673][ T8] usb 2-1: Manufacturer: syz [ 235.698004][ T6658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.736982][ T8] usb 2-1: SerialNumber: syz [ 235.776354][ T6658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.831820][ T6658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.882261][ T6658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.938429][ T6914] netlink: 'syz.2.409': attribute type 9 has an invalid length. [ 236.037063][ T6914] netlink: 'syz.2.409': attribute type 7 has an invalid length. [ 236.072856][ T6914] netlink: 'syz.2.409': attribute type 8 has an invalid length. [ 236.081675][ T8] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 236.122335][ T6664] veth0_vlan: entered promiscuous mode [ 236.205989][ T8] usb 2-1: USB disconnect, device number 5 [ 236.250026][ T6664] veth1_vlan: entered promiscuous mode [ 236.477694][ T6822] udevd[6822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.266356][ T2579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.226879][ T6925] warning: `syz.2.416' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 239.276356][ T2579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.402250][ T6664] veth0_macvtap: entered promiscuous mode [ 239.430159][ T6664] veth1_macvtap: entered promiscuous mode [ 239.457121][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.468386][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.478261][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.488795][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.498650][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.509160][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.519022][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.529498][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.541890][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.679141][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.699178][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.712340][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.725788][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.125473][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.154182][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.164294][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.179059][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.268287][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.321594][ T6953] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 240.369773][ T6664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.393504][ T6664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.402701][ T6664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.417247][ T6664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.610472][ T6652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.391886][ T6652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.586546][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.594412][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.008336][ T6652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.016332][ T6652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.956322][ T29] audit: type=1400 audit(1728536827.399:316): avc: denied { ioctl } for pid=6988 comm="syz.4.428" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 244.293561][ T29] audit: type=1326 audit(1728536827.739:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6971 comm="syz.1.425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46eb57dff9 code=0x0 [ 244.530808][ T7003] overlayfs: missing 'lowerdir' [ 244.565789][ T29] audit: type=1400 audit(1728536828.009:318): avc: denied { read } for pid=7000 comm="syz.0.407" name="ppp" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.009474][ T7021] nbd: nbd1 already in use [ 246.255983][ T29] audit: type=1400 audit(1728536829.699:319): avc: denied { bind } for pid=7026 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 247.417304][ T29] audit: type=1400 audit(1728536830.849:320): avc: denied { read } for pid=7039 comm="syz.3.439" name="usbmon3" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 247.464916][ T29] audit: type=1400 audit(1728536830.859:321): avc: denied { open } for pid=7039 comm="syz.3.439" path="/dev/usbmon3" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 247.886386][ T5304] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 249.666682][ T4613] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 249.847163][ T4613] Bluetooth: hci1: Injecting HCI hardware error event [ 249.868846][ T4613] Bluetooth: hci1: hardware error 0x00 [ 250.080302][ T5304] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.091591][ T5304] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.135251][ T5304] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.552332][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.337728][ T29] audit: type=1400 audit(1728536833.769:322): avc: denied { write } for pid=7052 comm="syz.3.445" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.459641][ T29] audit: type=1400 audit(1728536833.769:323): avc: denied { ioctl } for pid=7052 comm="syz.3.445" path="/dev/ptp0" dev="devtmpfs" ino=1073 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.976425][ T4613] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 253.333421][ T29] audit: type=1400 audit(1728536836.779:324): avc: denied { setopt } for pid=7074 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.769811][ T4613] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 254.785587][ T4613] Bluetooth: hci7: Injecting HCI hardware error event [ 254.838981][ T4613] Bluetooth: hci7: hardware error 0x00 [ 255.426429][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.438775][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.446711][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.454787][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.462783][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.471334][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.342625][ T29] audit: type=1400 audit(1728536839.289:325): avc: denied { setopt } for pid=7096 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.363457][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.377190][ T5304] usb 3-1: can't set config #27, error -110 [ 256.696193][ T7098] chnl_net:caif_netlink_parms(): no params data found [ 256.752490][ T29] audit: type=1400 audit(1728536840.199:326): avc: denied { block_suspend } for pid=7107 comm="syz.3.461" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.936784][ T4613] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 257.667576][ T4613] Bluetooth: hci2: command tx timeout [ 257.713310][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.786465][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.793723][ T7098] bridge_slave_0: entered allmulticast mode [ 258.695713][ T7098] bridge_slave_0: entered promiscuous mode [ 258.755465][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.793196][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.824137][ T7098] bridge_slave_1: entered allmulticast mode [ 258.850897][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.853561][ T29] audit: type=1400 audit(1728536842.299:327): avc: denied { getopt } for pid=7125 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.881747][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.882407][ T7098] bridge_slave_1: entered promiscuous mode [ 258.896890][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.912061][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.920478][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 258.927876][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.067357][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.098195][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.234216][ T7098] team0: Port device team_slave_0 added [ 259.327545][ T7098] team0: Port device team_slave_1 added [ 259.462143][ T4613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.472783][ T4613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.480630][ T4613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.499774][ T4613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.517246][ T4613] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 259.532759][ T4613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.747012][ T5230] Bluetooth: hci2: command tx timeout [ 259.872544][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.887344][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.926441][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.962374][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.994981][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.040281][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.096472][ T5311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 260.148241][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.278536][ T5311] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.288023][ T5311] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 260.299499][ T5311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.310709][ T5311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 260.323462][ T5311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 260.338289][ T5311] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.347574][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.355676][ T5311] usb 2-1: Product: syz [ 260.360736][ T5311] usb 2-1: Manufacturer: syz [ 260.387998][ T5311] cdc_wdm 2-1:1.0: skipping garbage [ 260.397324][ T25] usb 3-1: USB disconnect, device number 7 [ 260.426118][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.437147][ T5311] cdc_wdm 2-1:1.0: skipping garbage [ 260.447794][ T5311] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 260.453815][ T5311] cdc_wdm 2-1:1.0: Unknown control protocol [ 260.527069][ T7098] hsr_slave_0: entered promiscuous mode [ 260.533402][ T7098] hsr_slave_1: entered promiscuous mode [ 260.607198][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.761561][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.942946][ T7127] chnl_net:caif_netlink_parms(): no params data found [ 261.016419][ T5230] Bluetooth: hci3: command tx timeout [ 261.181555][ T25] usb 2-1: USB disconnect, device number 6 [ 261.272227][ T144] bridge_slave_1: left allmulticast mode [ 261.279791][ T144] bridge_slave_1: left promiscuous mode [ 261.285584][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.335063][ T144] bridge_slave_0: left allmulticast mode [ 261.343309][ T144] bridge_slave_0: left promiscuous mode [ 261.360148][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.586378][ T5230] Bluetooth: hci4: command tx timeout [ 261.748206][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 261.816848][ T5230] Bluetooth: hci2: command tx timeout [ 261.926442][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.937711][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.948893][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.976393][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.096715][ T7154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 262.177607][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.498202][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.555053][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.596166][ T144] bond0 (unregistering): Released all slaves [ 262.858606][ T29] audit: type=1400 audit(1728536846.299:328): avc: denied { read } for pid=7158 comm="syz.3.473" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 263.003374][ T29] audit: type=1400 audit(1728536846.299:329): avc: denied { open } for pid=7158 comm="syz.3.473" path="/18/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 263.100032][ T5230] Bluetooth: hci3: command tx timeout [ 263.242080][ T29] audit: type=1400 audit(1728536846.469:330): avc: denied { ioctl } for pid=7158 comm="syz.3.473" path="/18/file0/file0" dev="fuse" ino=0 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 263.632439][ T25] usb 2-1: USB disconnect, device number 7 [ 263.659075][ T5230] Bluetooth: hci4: command tx timeout [ 263.689881][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.737333][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.748628][ T7127] bridge_slave_0: entered allmulticast mode [ 263.770333][ T7127] bridge_slave_0: entered promiscuous mode [ 263.855288][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.872355][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.896897][ T5230] Bluetooth: hci2: command tx timeout [ 263.906960][ T7127] bridge_slave_1: entered allmulticast mode [ 263.922520][ T7127] bridge_slave_1: entered promiscuous mode [ 264.145210][ T7127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.171509][ T7127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.184209][ T144] hsr_slave_0: left promiscuous mode [ 264.190361][ T144] hsr_slave_1: left promiscuous mode [ 264.206670][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.215593][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.224887][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.232939][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.272068][ T144] veth1_macvtap: left promiscuous mode [ 264.283305][ T144] veth0_macvtap: left promiscuous mode [ 264.289950][ T144] veth1_vlan: left promiscuous mode [ 264.295352][ T144] veth0_vlan: left promiscuous mode [ 264.428014][ T29] audit: type=1400 audit(1728536847.869:331): avc: denied { write } for pid=7184 comm="syz.1.476" path="socket:[21373]" dev="sockfs" ino=21373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.206363][ T5230] Bluetooth: hci3: command tx timeout [ 265.736390][ T5230] Bluetooth: hci4: command tx timeout [ 266.235093][ T144] team0 (unregistering): Port device team_slave_1 removed [ 266.315661][ T144] team0 (unregistering): Port device team_slave_0 removed [ 267.276437][ T5230] Bluetooth: hci3: command tx timeout [ 267.826765][ T5230] Bluetooth: hci4: command tx timeout [ 268.014613][ T7206] nbd: nbd3 already in use [ 268.446729][ T7136] chnl_net:caif_netlink_parms(): no params data found [ 268.492336][ T7127] team0: Port device team_slave_0 added [ 268.539356][ T7127] team0: Port device team_slave_1 added [ 268.621663][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.646428][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.682920][ T7127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.735443][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.745852][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.796744][ T7127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.016406][ T5311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 269.042926][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.050751][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.058227][ T7136] bridge_slave_0: entered allmulticast mode [ 269.066364][ T7136] bridge_slave_0: entered promiscuous mode [ 269.076226][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.083524][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.090814][ T7136] bridge_slave_1: entered allmulticast mode [ 269.097984][ T7136] bridge_slave_1: entered promiscuous mode [ 269.126767][ T7098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.141259][ T7098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.198519][ T5311] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.223315][ T7136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.232518][ T5311] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.232672][ T5311] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.232753][ T5311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.274900][ T7098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.275397][ T7214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.292082][ T7098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.296110][ T5311] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.377159][ T7127] hsr_slave_0: entered promiscuous mode [ 269.406645][ T7127] hsr_slave_1: entered promiscuous mode [ 269.416084][ T7127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.434246][ T7127] Cannot create hsr debugfs directory [ 269.448142][ T7136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.504069][ T7221] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 269.695090][ T7136] team0: Port device team_slave_0 added [ 269.948191][ T7136] team0: Port device team_slave_1 added [ 270.076693][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.106475][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.144404][ T7136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.718126][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.874019][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.902831][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.948179][ T7136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.148989][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.238579][ T25] usb 2-1: USB disconnect, device number 8 [ 272.011787][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.255669][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.923389][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.027250][ T7136] hsr_slave_0: entered promiscuous mode [ 273.045469][ T7136] hsr_slave_1: entered promiscuous mode [ 273.076609][ T7136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.084211][ T7136] Cannot create hsr debugfs directory [ 273.249811][ T7098] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.402477][ T7127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.565149][ T7098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.575696][ T7098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.613406][ T2579] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.620577][ T2579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.661031][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.668208][ T2579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.920045][ T7127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.363045][ T7127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.451076][ T7127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.540912][ T7098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.576684][ T5270] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 274.600692][ T144] bridge_slave_1: left allmulticast mode [ 274.611866][ T144] bridge_slave_1: left promiscuous mode [ 274.627816][ T5304] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 274.629183][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.650973][ T144] bridge_slave_0: left allmulticast mode [ 274.665650][ T144] bridge_slave_0: left promiscuous mode [ 274.673006][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.710938][ T144] bridge_slave_1: left allmulticast mode [ 274.722341][ T144] bridge_slave_1: left promiscuous mode [ 274.732799][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.741924][ T5270] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 274.752420][ T5270] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 274.766175][ T144] bridge_slave_0: left allmulticast mode [ 274.772227][ T144] bridge_slave_0: left promiscuous mode [ 274.778557][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.796637][ T5270] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 274.808782][ T5270] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 274.827006][ T5304] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.838446][ T5304] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.849976][ T5304] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.861021][ T5270] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 274.874432][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.884050][ T5270] usb 2-1: config 0 interface 0 has no altsetting 0 [ 274.897218][ T7285] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 274.909684][ T5270] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 274.926323][ T5270] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 274.939741][ T5304] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.958607][ T5270] usb 2-1: Product: syz [ 274.964083][ T5270] usb 2-1: Manufacturer: syz [ 274.987355][ T5270] usb 2-1: SerialNumber: syz [ 275.048417][ T5270] usb 2-1: config 0 descriptor?? [ 275.098152][ T7284] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.129253][ T5270] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 275.157209][ T5270] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 275.401839][ T5270] usb 2-1: USB disconnect, device number 9 [ 275.401997][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 275.923730][ T5320] usb 4-1: USB disconnect, device number 10 [ 276.069090][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.082496][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.093745][ T144] bond0 (unregistering): Released all slaves [ 276.198296][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.210269][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.221819][ T144] bond0 (unregistering): Released all slaves [ 276.377601][ T7098] veth0_vlan: entered promiscuous mode [ 276.409081][ T7098] veth1_vlan: entered promiscuous mode [ 276.751176][ T7312] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 277.497379][ T5270] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 277.641267][ T7098] veth0_macvtap: entered promiscuous mode [ 277.781353][ T7098] veth1_macvtap: entered promiscuous mode [ 277.803310][ T7316] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 278.128480][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.141200][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.151229][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.161704][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.171631][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.182138][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.192004][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.202533][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.213826][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.225823][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.236358][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.246723][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.257755][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.267639][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.278120][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.288081][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.298710][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.309833][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.324389][ T7098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.333288][ T7098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.342621][ T7098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.351885][ T7098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.388193][ T7136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.465354][ T7136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.480738][ T7136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.575378][ T7136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.615549][ T144] hsr_slave_0: left promiscuous mode [ 278.635056][ T144] hsr_slave_1: left promiscuous mode [ 278.645138][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.660396][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.675144][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.684834][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.722686][ T144] hsr_slave_0: left promiscuous mode [ 278.774566][ T144] hsr_slave_1: left promiscuous mode [ 278.785011][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.798138][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.814940][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.823288][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.999707][ T144] veth1_macvtap: left promiscuous mode [ 279.005486][ T144] veth0_macvtap: left promiscuous mode [ 279.023036][ T144] veth1_vlan: left promiscuous mode [ 279.028660][ T144] veth0_vlan: left promiscuous mode [ 279.046848][ T144] veth1_macvtap: left promiscuous mode [ 279.052452][ T144] veth0_macvtap: left promiscuous mode [ 279.063251][ T144] veth1_vlan: left promiscuous mode [ 279.069106][ T144] veth0_vlan: left promiscuous mode [ 279.748028][ T5304] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 279.867566][ T29] audit: type=1400 audit(1728536863.319:332): avc: denied { bind } for pid=7347 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.898586][ T29] audit: type=1400 audit(1728536863.319:333): avc: denied { write } for pid=7347 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.921216][ T5304] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.932914][ T5304] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.943476][ T5304] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.952868][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.976032][ T7343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.003655][ T5304] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.394579][ T144] team0 (unregistering): Port device team_slave_1 removed [ 280.447287][ T144] team0 (unregistering): Port device team_slave_0 removed [ 281.141750][ T5304] usb 4-1: USB disconnect, device number 11 [ 281.348018][ T144] team0 (unregistering): Port device team_slave_1 removed [ 281.384224][ T144] team0 (unregistering): Port device team_slave_0 removed [ 281.769920][ T29] audit: type=1400 audit(1728536865.219:334): avc: denied { unlink } for pid=7351 comm="syz.3.508" name="#1" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 281.809411][ T29] audit: type=1400 audit(1728536865.259:335): avc: denied { mount } for pid=7351 comm="syz.3.508" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 281.833621][ T29] audit: type=1400 audit(1728536865.259:336): avc: denied { create } for pid=7351 comm="syz.3.508" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 281.854760][ T29] audit: type=1400 audit(1728536865.259:337): avc: denied { link } for pid=7351 comm="syz.3.508" name="#3" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 281.885213][ T29] audit: type=1400 audit(1728536865.259:338): avc: denied { rename } for pid=7351 comm="syz.3.508" name="#4" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 282.034811][ T7127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.084835][ T7127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.169187][ T7136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.187648][ T7136] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.205441][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.212604][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.229501][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.236680][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.270546][ T7127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.363828][ T7127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.453680][ T2579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.477110][ T2579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.535722][ T6652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.570149][ T6652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.746781][ T29] audit: type=1400 audit(1728536866.189:339): avc: denied { append } for pid=7374 comm="syz.1.512" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 282.973387][ T7127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.779140][ T7127] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.823465][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.830639][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.847513][ T29] audit: type=1400 audit(1728536867.299:340): avc: denied { search } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.850891][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.870153][ T5320] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 283.876134][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.035062][ T7136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.044752][ T5320] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.077356][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.117279][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.132685][ T5320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.152147][ T5320] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.163762][ T5320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.223793][ T5320] usb 2-1: config 0 descriptor?? [ 284.304531][ T7136] veth0_vlan: entered promiscuous mode [ 284.349758][ T7136] veth1_vlan: entered promiscuous mode [ 284.440083][ T7136] veth0_macvtap: entered promiscuous mode [ 284.470997][ T7136] veth1_macvtap: entered promiscuous mode [ 284.533631][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.554734][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.568999][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.582025][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.600669][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.613065][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.652650][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.674080][ T5320] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 284.682488][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.716933][ T5320] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 284.719761][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.724356][ T5320] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 284.744521][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.774077][ T5320] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 284.775657][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.806349][ T5320] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 284.825060][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.833926][ T5320] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 284.841742][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.880422][ T5320] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 284.899931][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.986764][ T7136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.989098][ T5320] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 284.995729][ T7136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.995775][ T7136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.995815][ T7136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.049797][ T7127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.016956][ T5320] usb 2-1: USB disconnect, device number 10 [ 286.237918][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.245796][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.415823][ T7117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.480133][ T7117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.655887][ T7127] veth0_vlan: entered promiscuous mode [ 287.705767][ T7127] veth1_vlan: entered promiscuous mode [ 287.834521][ T7127] veth0_macvtap: entered promiscuous mode [ 287.869577][ T7127] veth1_macvtap: entered promiscuous mode [ 287.917959][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.948773][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.967392][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.982693][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.002216][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.031226][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.068263][ T29] audit: type=1400 audit(1728536871.519:341): avc: denied { write } for pid=7433 comm="syz.3.520" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.105451][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.132490][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.167739][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.187107][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.216349][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.226210][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.227036][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 288.238803][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.558961][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.765612][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.855702][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.885984][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.940509][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.069511][ T7127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.106376][ T7127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.116433][ T7127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.125168][ T7127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.176658][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 289.205950][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.239585][ T25] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 289.264552][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.304199][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.327809][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.363754][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.375272][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.391945][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.423756][ T25] usb 3-1: Product: syz [ 289.447292][ T25] usb 3-1: Manufacturer: syz [ 289.456641][ T25] usb 3-1: SerialNumber: syz [ 289.722702][ T7491] xt_limit: Overflow, try lower: 0/0 [ 290.001397][ T5270] usb 3-1: USB disconnect, device number 8 [ 290.118052][ T7495] input: syz0 as /devices/virtual/input/input14 [ 292.159902][ T29] audit: type=1326 audit(1728536874.939:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.4.536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x0 [ 292.565439][ T7522] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 292.799637][ T7522] netlink: 224 bytes leftover after parsing attributes in process `syz.4.538'. [ 294.472638][ T7536] xt_limit: Overflow, try lower: 0/0 [ 296.151754][ T29] audit: type=1400 audit(1728536879.599:343): avc: denied { create } for pid=7543 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 297.006411][ T5311] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 297.402306][ T5311] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 297.411658][ T5311] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 297.431595][ T5311] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 297.456341][ T5311] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 297.474581][ T5311] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 297.509585][ T5311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 297.562690][ T5311] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 297.572000][ T5311] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 297.604568][ T5311] usb 4-1: Product: syz [ 297.617642][ T5311] usb 4-1: Manufacturer: syz [ 297.630003][ T5311] usb 4-1: SerialNumber: syz [ 297.662456][ T5311] usb 4-1: config 0 descriptor?? [ 297.681802][ T7553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.712692][ T5311] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 297.767406][ T5311] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 298.538368][ T5311] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 299.014128][ T5311] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 299.022592][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 299.047925][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 299.059312][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 299.072135][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 299.088961][ T5311] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 299.097729][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 299.123771][ T25] usb 4-1: USB disconnect, device number 12 [ 299.136867][ T25] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 299.186467][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 299.248642][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 299.279993][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 299.299860][ T5311] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 299.308134][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 299.322040][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 299.333683][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 299.360548][ T5311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 299.377557][ T5311] usb 3-1: string descriptor 0 read error: -22 [ 299.383825][ T5311] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 299.400136][ T5311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.451854][ T5311] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 299.857195][ T4613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.866308][ T5311] usb 3-1: USB disconnect, device number 9 [ 300.585914][ T4613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.594044][ T4613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.602101][ T4613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.610635][ T4613] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 300.619473][ T4613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.764548][ T29] audit: type=1326 audit(1728536885.079:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 301.966900][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.052319][ T29] audit: type=1326 audit(1728536885.079:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.172742][ T29] audit: type=1326 audit(1728536885.089:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.226924][ T29] audit: type=1326 audit(1728536885.099:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.328164][ T29] audit: type=1326 audit(1728536885.099:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.375210][ T29] audit: type=1326 audit(1728536885.099:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.398668][ T29] audit: type=1326 audit(1728536885.109:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.422387][ T29] audit: type=1326 audit(1728536885.119:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.468548][ T29] audit: type=1326 audit(1728536885.119:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.507044][ T5272] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 302.518703][ T29] audit: type=1326 audit(1728536885.119:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f1d32f7dff9 code=0x7ffc0000 [ 302.698369][ T5272] usb 4-1: Using ep0 maxpacket: 16 [ 302.735674][ T7578] chnl_net:caif_netlink_parms(): no params data found [ 302.784100][ T7608] process 'syz.0.563' launched './file2' with NULL argv: empty string added [ 302.846372][ T4613] Bluetooth: hci1: command tx timeout [ 302.900703][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.948813][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.958845][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.974746][ T5272] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.027308][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.042492][ T5272] usb 4-1: config 0 descriptor?? [ 303.839294][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.916453][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.923704][ T7578] bridge_slave_0: entered allmulticast mode [ 303.980812][ T7578] bridge_slave_0: entered promiscuous mode [ 304.021645][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.048477][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.066488][ T5272] usbhid 4-1:0.0: can't add hid device: -71 [ 304.072576][ T5272] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 304.100800][ T7578] bridge_slave_1: entered allmulticast mode [ 304.102932][ T5272] usb 4-1: USB disconnect, device number 13 [ 304.134330][ T7578] bridge_slave_1: entered promiscuous mode [ 304.388475][ T7578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.496884][ T5311] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 304.916777][ T4613] Bluetooth: hci1: command tx timeout [ 305.150575][ T7578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.335930][ T7578] team0: Port device team_slave_0 added [ 305.348072][ T5311] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 305.363095][ T7578] team0: Port device team_slave_1 added [ 305.371122][ T5311] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 305.447900][ T5311] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 305.485973][ T5311] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 305.520971][ T5311] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.536316][ T5311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 305.555356][ T5282] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 305.608851][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.624070][ T5311] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 305.644706][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.679661][ T5311] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 305.716955][ T5311] usb 1-1: Product: syz [ 305.722951][ T5311] usb 1-1: Manufacturer: syz [ 305.733636][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 305.754229][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 305.769557][ T5311] usb 1-1: SerialNumber: syz [ 305.780929][ T7578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.805312][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.822485][ T5311] usb 1-1: config 0 descriptor?? [ 305.828839][ T7627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 305.838119][ T5311] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 305.856112][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 305.876552][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.891677][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.941904][ T5311] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 305.958414][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 306.034504][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 306.042081][ T7578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.068921][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 306.099725][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 306.117290][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 306.136316][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 306.210206][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 306.230074][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 306.252973][ T7640] bio_check_eod: 2 callbacks suppressed [ 306.252986][ T7640] syz.3.574: attempt to access beyond end of device [ 306.252986][ T7640] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 306.313650][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 306.369309][ T7640] syz.3.574: attempt to access beyond end of device [ 306.369309][ T7640] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 306.369637][ T7578] hsr_slave_0: entered promiscuous mode [ 306.389903][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 306.421262][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 306.455917][ T7640] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 306.469310][ T7578] hsr_slave_1: entered promiscuous mode [ 306.476061][ T5272] usb 1-1: USB disconnect, device number 9 [ 306.484538][ T5272] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 306.490210][ T5282] usb 5-1: string descriptor 0 read error: -22 [ 306.503879][ T5282] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 306.519419][ T7578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.527130][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.538934][ T7578] Cannot create hsr debugfs directory [ 306.564938][ T7640] syz.3.574: attempt to access beyond end of device [ 306.564938][ T7640] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 306.595049][ T7640] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 306.650557][ T7640] syz.3.574: attempt to access beyond end of device [ 306.650557][ T7640] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 306.656225][ T5282] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 306.675562][ T7640] syz.3.574: attempt to access beyond end of device [ 306.675562][ T7640] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 306.756843][ T7640] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 306.859968][ T5282] usb 5-1: USB disconnect, device number 11 [ 306.887983][ T7640] syz.3.574: attempt to access beyond end of device [ 306.887983][ T7640] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 306.916369][ T7640] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 306.937023][ T7640] syz.3.574: attempt to access beyond end of device [ 306.937023][ T7640] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 306.970419][ T7640] syz.3.574: attempt to access beyond end of device [ 306.970419][ T7640] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 306.993447][ T7640] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 307.113495][ T7578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.178011][ T4613] Bluetooth: hci1: command tx timeout [ 307.213762][ T7578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.297201][ T7640] syz.3.574: attempt to access beyond end of device [ 307.297201][ T7640] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 307.310470][ T7640] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 307.346584][ T7640] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 307.381997][ T7578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.154850][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 309.154863][ T29] audit: type=1400 audit(1728536892.599:358): avc: denied { execute } for pid=7646 comm="syz.2.577" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 309.397431][ T4613] Bluetooth: hci1: command tx timeout [ 309.505526][ T7578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.913387][ T7667] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 310.174572][ T7676] 9pnet_virtio: no channels available for device syz [ 310.506427][ T5320] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 310.680882][ T7578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.102510][ T7578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.598071][ T5320] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.618778][ T5320] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.738298][ T7578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.745261][ T5320] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.797961][ T5320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.856809][ T7677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 311.871488][ T5320] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.901235][ T7578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.087477][ T5270] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 312.202053][ T5320] usb 3-1: USB disconnect, device number 10 [ 312.410399][ T5270] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 312.428816][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 313.111649][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.121897][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 313.130504][ T7578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.133286][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.148889][ T7578] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.151129][ T5270] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 313.165650][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 313.175995][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.182933][ T7578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.186172][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 313.196696][ T7578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.228351][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.288376][ T5270] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 313.296056][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 313.306382][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.326322][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 313.342580][ T5270] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.350629][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.359611][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.369944][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.377095][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.489569][ T5270] usb 1-1: string descriptor 0 read error: -22 [ 313.495874][ T5270] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 313.506987][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.558957][ T5270] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 313.638699][ T29] audit: type=1400 audit(1728536897.079:359): avc: denied { listen } for pid=7707 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 313.904473][ T5311] usb 1-1: USB disconnect, device number 10 [ 313.983520][ T29] audit: type=1400 audit(1728536897.089:360): avc: denied { connect } for pid=7707 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 314.925168][ T29] audit: type=1400 audit(1728536897.089:361): avc: denied { name_connect } for pid=7707 comm="syz.3.592" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 314.961690][ T29] audit: type=1400 audit(1728536897.089:362): avc: denied { accept } for pid=7707 comm="syz.3.592" lport=57525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 314.972195][ T7578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.167427][ T29] audit: type=1400 audit(1728536898.619:363): avc: denied { create } for pid=7730 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 315.235797][ T7578] veth0_vlan: entered promiscuous mode [ 315.277815][ T7578] veth1_vlan: entered promiscuous mode [ 315.375795][ T7735] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 315.648130][ T7578] veth0_macvtap: entered promiscuous mode [ 315.707740][ T7578] veth1_macvtap: entered promiscuous mode [ 316.028988][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.082852][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.563989][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.624167][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.715854][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.728120][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.738207][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.749378][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.759888][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.770536][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.782492][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.791723][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.802307][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.812641][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.823423][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.833385][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.844417][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.854863][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.866643][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.877295][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.888774][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.930940][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.962558][ T29] audit: type=1400 audit(1728536900.309:364): avc: denied { write } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.984466][ T29] audit: type=1400 audit(1728536900.309:365): avc: denied { remove_name } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.007581][ T29] audit: type=1400 audit(1728536900.309:366): avc: denied { add_name } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.385841][ T7578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.421266][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.466427][ T29] audit: type=1400 audit(1728536900.679:367): avc: denied { setopt } for pid=7751 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 318.007674][ T7578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.061281][ T7578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.070420][ T7578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.495104][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.306971][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.330039][ T2579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.341414][ T2579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.874272][ T7782] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 329.552757][ T7808] xt_limit: Overflow, try lower: 0/0 [ 332.866480][ T7863] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 333.480017][ T7863] netlink: 224 bytes leftover after parsing attributes in process `syz.2.627'. [ 333.523787][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 333.734134][ T29] audit: type=1400 audit(1728536917.169:368): avc: denied { ioctl } for pid=7867 comm="syz.1.629" path="socket:[27084]" dev="sockfs" ino=27084 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.449694][ T7898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.572163][ T7903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.170567][ T29] audit: type=1400 audit(1728536919.619:369): avc: denied { ioctl } for pid=7897 comm="syz.3.638" path="/dev/sg0" dev="devtmpfs" ino=693 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 336.694748][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 337.720722][ T7913] nbd: nbd2 already in use [ 338.411357][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 338.576353][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 338.583657][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.645503][ T7929] input: syz0 as /devices/virtual/input/input16 [ 338.654988][ T8] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 338.701957][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.773859][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.839407][ T8] usb 1-1: Product: syz [ 338.851795][ T8] usb 1-1: Manufacturer: syz [ 338.871057][ T8] usb 1-1: SerialNumber: syz [ 338.998163][ T29] audit: type=1326 audit(1728536922.449:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.4.651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x0 [ 339.716426][ T1180] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 339.844678][ T8] usb 1-1: USB disconnect, device number 11 [ 339.877895][ T1180] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.910485][ T1180] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.948210][ T1180] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.981208][ T1180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.030520][ T7935] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 340.071995][ T1180] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.434866][ T1180] usb 2-1: USB disconnect, device number 11 [ 342.537854][ T29] audit: type=1400 audit(1728536925.939:371): avc: denied { map } for pid=7952 comm="syz.1.655" path="/dev/sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 342.561506][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.472130][ T29] audit: type=1326 audit(1728536928.919:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7974 comm="syz.4.662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d32f7dff9 code=0x0 [ 346.730561][ T5282] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 347.288356][ T5282] usb 1-1: Using ep0 maxpacket: 32 [ 347.317615][ T5282] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 347.325834][ T5282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.375575][ T5282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 347.421219][ T5282] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 347.438558][ T5282] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 347.468184][ T5282] usb 1-1: Product: syz [ 347.472380][ T5282] usb 1-1: Manufacturer: syz [ 347.502546][ T5282] usb 1-1: SerialNumber: syz [ 347.547242][ T5282] usb 1-1: config 0 descriptor?? [ 347.574348][ T5282] ldusb 1-1:0.0: Interrupt in endpoint not found [ 347.766417][ T5311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 347.953610][ T8016] input: syz0 as /devices/virtual/input/input17 [ 347.975010][ T5311] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.150789][ T5311] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 348.901319][ T5311] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 348.916487][ T5311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.974981][ T7991] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 349.023422][ T8] usb 1-1: USB disconnect, device number 12 [ 349.394335][ T29] audit: type=1400 audit(1728536932.839:373): avc: denied { ioctl } for pid=8036 comm="syz.0.675" path="socket:[27503]" dev="sockfs" ino=27503 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.418779][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.710457][ T29] audit: type=1400 audit(1728536932.909:374): avc: denied { bind } for pid=8036 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.729504][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.966468][ T29] audit: type=1400 audit(1728536932.919:375): avc: denied { bind } for pid=8036 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 350.033964][ T29] audit: type=1400 audit(1728536932.949:376): avc: denied { setopt } for pid=8036 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.924603][ T5311] usb 2-1: can't set config #27, error -71 [ 351.941748][ T5311] usb 2-1: USB disconnect, device number 12 [ 355.776443][ T29] audit: type=1400 audit(1728536938.489:377): avc: denied { read } for pid=8068 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.897846][ T8075] nbd: nbd4 already in use [ 358.296444][ T5311] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 358.491287][ T5311] usb 5-1: Using ep0 maxpacket: 32 [ 358.588797][ T5311] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 358.615735][ T5311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.644420][ T5311] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 358.698082][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.712567][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.725035][ T5311] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 358.725130][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.750974][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.763851][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.772202][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.851158][ T5311] usb 5-1: config 0 interface 0 has no altsetting 0 [ 358.866906][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 359.110219][ T5311] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 359.142754][ T5311] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 359.151873][ T5311] usb 5-1: Product: syz [ 359.156119][ T5311] usb 5-1: Manufacturer: syz [ 359.161210][ T5311] usb 5-1: SerialNumber: syz [ 359.190517][ T5311] usb 5-1: config 0 descriptor?? [ 359.212306][ T5311] ldusb 5-1:0.0: Interrupt in endpoint not found [ 359.220505][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 359.246948][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 359.290815][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.311398][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.362609][ T8090] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 359.389442][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.487595][ T2525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.593290][ T25] usb 1-1: USB disconnect, device number 13 [ 359.671928][ T2525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.792455][ T2525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.998422][ T2525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.661908][ T5230] Bluetooth: hci5: command tx timeout [ 361.735772][ T25] usb 5-1: USB disconnect, device number 12 [ 361.878823][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 361.892875][ T2525] bridge_slave_1: left allmulticast mode [ 361.900645][ T2525] bridge_slave_1: left promiscuous mode [ 361.917524][ T2525] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.961894][ T8113] 9pnet_virtio: no channels available for device syz [ 362.042330][ T2525] bridge_slave_0: left allmulticast mode [ 362.058944][ T29] audit: type=1400 audit(1728536945.509:378): avc: denied { create } for pid=8112 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 362.099701][ T2525] bridge_slave_0: left promiscuous mode [ 362.127198][ T8113] overlayfs: missing 'workdir' [ 362.132212][ T2525] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.140944][ T29] audit: type=1400 audit(1728536945.539:379): avc: denied { map } for pid=8112 comm="syz.4.694" path="socket:[28683]" dev="sockfs" ino=28683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 362.351502][ T29] audit: type=1400 audit(1728536945.539:380): avc: denied { read } for pid=8112 comm="syz.4.694" path="socket:[28683]" dev="sockfs" ino=28683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 363.284140][ T8134] input: syz0 as /devices/virtual/input/input18 [ 363.737197][ T5230] Bluetooth: hci5: command tx timeout [ 365.816383][ T5230] Bluetooth: hci5: command tx timeout [ 365.916453][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 366.176722][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 366.188119][ T25] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 366.196644][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.896715][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 366.915436][ T25] usb 1-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 366.935494][ T2525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.983402][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 366.999543][ T2525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.010364][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 367.041394][ T25] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 367.061112][ T2525] bond0 (unregistering): Released all slaves [ 367.080130][ T25] usb 1-1: Product: syz [ 367.092690][ T25] usb 1-1: Manufacturer: syz [ 367.102412][ T25] usb 1-1: SerialNumber: syz [ 367.111528][ T25] usb 1-1: config 0 descriptor?? [ 367.127115][ T25] ldusb 1-1:0.0: Interrupt in endpoint not found [ 367.322796][ T8] usb 1-1: USB disconnect, device number 14 [ 367.613021][ T25] libceph: connect (1)[c::]:6789 error -101 [ 367.826405][ T8161] ceph: No mds server is up or the cluster is laggy [ 367.836540][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 367.896659][ T5230] Bluetooth: hci5: command tx timeout [ 372.212685][ T8193] xt_limit: Overflow, try lower: 0/0 [ 373.066083][ T29] audit: type=1400 audit(1728536956.449:381): avc: denied { map } for pid=8191 comm="syz.0.715" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 373.100675][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.140826][ T2525] hsr_slave_0: left promiscuous mode [ 373.222850][ T2525] hsr_slave_1: left promiscuous mode [ 373.238733][ T29] audit: type=1326 audit(1728536956.509:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 373.324134][ T2525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.344293][ T2525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.361850][ T29] audit: type=1326 audit(1728536956.509:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 373.388322][ T2525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.403427][ T2525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.412778][ T4613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.430170][ T4613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.432873][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 373.450068][ T4613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.460343][ T4613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.472248][ T4613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 373.480906][ T4613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.512336][ T29] audit: type=1326 audit(1728536956.509:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 373.517309][ T2525] veth1_macvtap: left promiscuous mode [ 373.547551][ T2525] veth0_macvtap: left promiscuous mode [ 373.553169][ T2525] veth1_vlan: left promiscuous mode [ 373.559827][ T2525] veth0_vlan: left promiscuous mode [ 373.611700][ T29] audit: type=1326 audit(1728536956.509:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 373.656498][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 373.715744][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 373.746342][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.769476][ T29] audit: type=1326 audit(1728536956.509:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 373.811288][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 373.866699][ T8] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 373.891302][ T29] audit: type=1326 audit(1728536956.509:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 373.935526][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 373.965370][ T29] audit: type=1326 audit(1728536956.509:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 374.003139][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 374.019852][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 374.036480][ T29] audit: type=1326 audit(1728536956.509:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 374.076349][ T8] usb 5-1: Product: syz [ 374.077282][ T29] audit: type=1326 audit(1728536956.549:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fbbbef7dff9 code=0x7ffc0000 [ 374.105756][ T8] usb 5-1: Manufacturer: syz [ 374.110838][ T8] usb 5-1: SerialNumber: syz [ 374.126101][ T8] usb 5-1: config 0 descriptor?? [ 374.134905][ T8] ldusb 5-1:0.0: Interrupt in endpoint not found [ 374.257179][ T5272] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 374.406488][ T5272] usb 1-1: Using ep0 maxpacket: 32 [ 374.419757][ T5272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.436316][ T5272] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 374.500151][ T5272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.513155][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.526384][ T5272] usb 1-1: Product: syz [ 374.530657][ T5272] usb 1-1: Manufacturer: syz [ 374.544752][ T5272] usb 1-1: SerialNumber: syz [ 374.807526][ T8220] sctp: [Deprecated]: syz.0.718 (pid 8220) Use of int in max_burst socket option deprecated. [ 374.807526][ T8220] Use struct sctp_assoc_value instead [ 374.845099][ T25] usb 1-1: USB disconnect, device number 15 [ 374.882949][ T2525] team0 (unregistering): Port device team_slave_1 removed [ 374.948186][ T2525] team0 (unregistering): Port device team_slave_0 removed [ 375.584955][ T4613] Bluetooth: hci0: command tx timeout [ 376.005992][ T5272] usb 5-1: USB disconnect, device number 13 [ 376.197408][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.204659][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.227472][ T8093] bridge_slave_0: entered allmulticast mode [ 376.292796][ T8093] bridge_slave_0: entered promiscuous mode [ 376.476960][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.542984][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.581923][ T8093] bridge_slave_1: entered allmulticast mode [ 376.641726][ T8093] bridge_slave_1: entered promiscuous mode [ 376.831994][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.882047][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.892726][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.901374][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.909255][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.921107][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 376.928917][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.953207][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.088846][ T8093] team0: Port device team_slave_0 added [ 377.206849][ T8093] team0: Port device team_slave_1 added [ 377.640178][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.735345][ T5230] Bluetooth: hci0: command tx timeout [ 378.379956][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.405963][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.505713][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.607071][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.614024][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.709555][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.859039][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.902167][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 378.902181][ T29] audit: type=1400 audit(1728536962.339:393): avc: denied { mount } for pid=8239 comm="syz.4.724" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 379.075330][ T5230] Bluetooth: hci4: command tx timeout [ 379.817561][ T5230] Bluetooth: hci0: command tx timeout [ 380.063139][ T8093] hsr_slave_0: entered promiscuous mode [ 380.085517][ T8093] hsr_slave_1: entered promiscuous mode [ 380.147133][ T5319] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 380.167921][ T8093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.194199][ T8093] Cannot create hsr debugfs directory [ 380.336569][ T5319] usb 1-1: Using ep0 maxpacket: 32 [ 380.384521][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.386871][ T5319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.423801][ T5319] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 380.519737][ T5319] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.557656][ T5319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.558359][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 380.600882][ T5319] usb 1-1: Product: syz [ 380.608868][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.612048][ T5319] usb 1-1: Manufacturer: syz [ 380.633352][ T5319] usb 1-1: SerialNumber: syz [ 380.673497][ T8213] chnl_net:caif_netlink_parms(): no params data found [ 380.737231][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 380.749962][ T25] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 380.763068][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 380.802568][ T25] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 380.828189][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.838810][ T25] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 380.875044][ T8228] chnl_net:caif_netlink_parms(): no params data found [ 380.888135][ T8257] sctp: [Deprecated]: syz.0.727 (pid 8257) Use of int in max_burst socket option deprecated. [ 380.888135][ T8257] Use struct sctp_assoc_value instead [ 380.914020][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 380.929121][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 380.941191][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 380.947627][ T25] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 380.956168][ T25] usb 5-1: Product: syz [ 380.966910][ T25] usb 5-1: Manufacturer: syz [ 380.971582][ T25] usb 5-1: SerialNumber: syz [ 380.982618][ T25] usb 5-1: config 0 descriptor?? [ 380.986425][ T8] usb 1-1: USB disconnect, device number 16 [ 380.998762][ T25] ldusb 5-1:0.0: Interrupt in endpoint not found [ 381.070878][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.106413][ T4613] Bluetooth: hci4: command tx timeout [ 381.674131][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.720457][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.780705][ T8213] bridge_slave_0: entered allmulticast mode [ 381.834110][ T8213] bridge_slave_0: entered promiscuous mode [ 381.853940][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.896486][ T4613] Bluetooth: hci0: command tx timeout [ 381.923873][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.957805][ T8213] bridge_slave_1: entered allmulticast mode [ 381.979661][ T8213] bridge_slave_1: entered promiscuous mode [ 382.193255][ T8213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.252370][ T144] bridge_slave_1: left allmulticast mode [ 382.262506][ T144] bridge_slave_1: left promiscuous mode [ 382.374379][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.797523][ T144] bridge_slave_0: left allmulticast mode [ 382.803295][ T144] bridge_slave_0: left promiscuous mode [ 382.816480][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.196538][ T4613] Bluetooth: hci4: command tx timeout [ 383.990998][ T25] usb 5-1: USB disconnect, device number 14 [ 385.256632][ T5230] Bluetooth: hci4: command tx timeout [ 385.500150][ T29] audit: type=1400 audit(1728536968.949:394): avc: denied { connect } for pid=8312 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.797105][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.820543][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.832182][ T144] bond0 (unregistering): Released all slaves [ 385.857268][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.870309][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.878567][ T8228] bridge_slave_0: entered allmulticast mode [ 385.905541][ T8228] bridge_slave_0: entered promiscuous mode [ 385.973698][ T8213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.049473][ T1180] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 386.059662][ T5230] Bluetooth: hci3: command 0x0406 tx timeout [ 386.155235][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.163860][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.176014][ T8228] bridge_slave_1: entered allmulticast mode [ 386.189060][ T8228] bridge_slave_1: entered promiscuous mode [ 386.246571][ T1180] usb 5-1: Using ep0 maxpacket: 32 [ 386.253681][ T1180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.276451][ T1180] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 386.355948][ T8213] team0: Port device team_slave_0 added [ 386.358621][ T1180] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.424272][ T1180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.559953][ T1180] usb 5-1: Product: syz [ 386.564174][ T1180] usb 5-1: Manufacturer: syz [ 386.572337][ T1180] usb 5-1: SerialNumber: syz [ 386.869642][ T8315] sctp: [Deprecated]: syz.4.736 (pid 8315) Use of int in max_burst socket option deprecated. [ 386.869642][ T8315] Use struct sctp_assoc_value instead [ 386.901444][ T1180] usb 5-1: USB disconnect, device number 15 [ 387.232894][ T8213] team0: Port device team_slave_1 added [ 387.261598][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 387.342322][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.379358][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.405586][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.422790][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.451414][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 387.458675][ T8213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.470934][ T25] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 387.479893][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 387.507836][ T25] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 387.586375][ T25] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 387.654823][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.702261][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 387.729606][ T144] hsr_slave_0: left promiscuous mode [ 387.737366][ T144] hsr_slave_1: left promiscuous mode [ 387.745775][ T25] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 387.745924][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.762415][ T25] usb 1-1: Product: syz [ 387.776463][ T25] usb 1-1: Manufacturer: syz [ 387.781083][ T25] usb 1-1: SerialNumber: syz [ 387.799379][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.800890][ T25] usb 1-1: config 0 descriptor?? [ 387.827295][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.828595][ T25] ldusb 1-1:0.0: Interrupt in endpoint not found [ 387.845165][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.944261][ T144] veth1_macvtap: left promiscuous mode [ 387.955767][ T144] veth0_macvtap: left promiscuous mode [ 387.970968][ T144] veth1_vlan: left promiscuous mode [ 387.982511][ T144] veth0_vlan: left promiscuous mode [ 390.065770][ T5319] usb 1-1: USB disconnect, device number 17 [ 390.157539][ T144] team0 (unregistering): Port device team_slave_1 removed [ 390.282175][ T144] team0 (unregistering): Port device team_slave_0 removed [ 390.351700][ T29] audit: type=1400 audit(1728536973.799:395): avc: denied { listen } for pid=8340 comm="syz.0.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 390.393138][ T29] audit: type=1400 audit(1728536973.819:396): avc: denied { accept } for pid=8340 comm="syz.0.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 391.093035][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.140945][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.179661][ T8213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.241144][ T8228] team0: Port device team_slave_0 added [ 391.249875][ T8228] team0: Port device team_slave_1 added [ 391.616913][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 391.711292][ T8213] hsr_slave_0: entered promiscuous mode [ 391.717925][ T8213] hsr_slave_1: entered promiscuous mode [ 391.729804][ T8213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.745997][ T8213] Cannot create hsr debugfs directory [ 391.753411][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.773779][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.816423][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 391.846714][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.858403][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.907894][ T8] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 391.922001][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.957112][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.967447][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.986418][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.007946][ T8] usb 1-1: Product: syz [ 392.018819][ T8] usb 1-1: Manufacturer: syz [ 392.023543][ T8] usb 1-1: SerialNumber: syz [ 392.031112][ T29] audit: type=1400 audit(1728536975.459:397): avc: denied { sqpoll } for pid=8351 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 392.061194][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.277202][ T8346] sctp: [Deprecated]: syz.0.747 (pid 8346) Use of int in max_burst socket option deprecated. [ 392.277202][ T8346] Use struct sctp_assoc_value instead [ 392.305036][ T1180] usb 1-1: USB disconnect, device number 18 [ 392.423309][ T8093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.458747][ T8093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.490631][ T8228] hsr_slave_0: entered promiscuous mode [ 392.504353][ T8228] hsr_slave_1: entered promiscuous mode [ 392.514199][ T8228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.528494][ T8228] Cannot create hsr debugfs directory [ 392.554559][ T8093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.584675][ T8093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.955864][ T8213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.046425][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 393.207063][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 393.214040][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 393.284768][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 393.340971][ T8213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.346540][ T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 393.381879][ T8] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 393.504114][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.560185][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 393.590035][ T8213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.596742][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 393.659913][ T8] usb 5-1: Product: syz [ 393.664201][ T8] usb 5-1: Manufacturer: syz [ 393.720073][ T8213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.735002][ T8] usb 5-1: SerialNumber: syz [ 393.767715][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.794127][ T8] usb 5-1: config 0 descriptor?? [ 394.635801][ T8] ldusb 5-1:0.0: Interrupt in endpoint not found [ 394.652453][ T29] audit: type=1400 audit(1728536977.419:398): avc: denied { create } for pid=8379 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 394.777773][ T29] audit: type=1400 audit(1728536977.419:399): avc: denied { write } for pid=8379 comm="syz.0.756" path="socket:[29743]" dev="sockfs" ino=29743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 394.782102][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.964303][ T2579] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.971455][ T2579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.055950][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.063168][ T2579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.422524][ T8213] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 395.429736][ T5282] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 395.461555][ T8213] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.557510][ T8213] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.582674][ T8213] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.605730][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 395.616505][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.635975][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.686672][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.739858][ T5282] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.772161][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.832186][ T5282] usb 1-1: config 0 descriptor?? [ 395.903321][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.060031][ T5272] usb 5-1: USB disconnect, device number 16 [ 396.404831][ T8213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.427793][ T8093] veth0_vlan: entered promiscuous mode [ 396.480804][ T5282] usbhid 1-1:0.0: can't add hid device: -71 [ 396.523628][ T5282] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 396.546899][ T5282] usb 1-1: USB disconnect, device number 19 [ 396.632141][ T8228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 396.649349][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.676504][ T8228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 396.747473][ T8093] veth1_vlan: entered promiscuous mode [ 396.771102][ T8228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 396.786219][ T8228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 396.806018][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.813131][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.945969][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.953085][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.977553][ T5272] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 397.031711][ T8213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.128121][ T8093] veth0_macvtap: entered promiscuous mode [ 397.183009][ T8093] veth1_macvtap: entered promiscuous mode [ 397.189738][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 397.228907][ T5272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.423030][ T5272] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 397.499849][ T5272] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.746193][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.792158][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.793088][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.011441][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.246450][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.319958][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.493655][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.710283][ T5272] usb 5-1: Product: syz [ 398.714578][ T5272] usb 5-1: Manufacturer: syz [ 398.719366][ T5272] usb 5-1: SerialNumber: syz [ 398.836858][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.878137][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.894633][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.007170][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.026516][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.055713][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.097466][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.129568][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.166131][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.246470][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.257189][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.276580][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.357127][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.433228][ T8093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.447924][ T8409] sctp: [Deprecated]: syz.4.760 (pid 8409) Use of int in max_burst socket option deprecated. [ 399.447924][ T8409] Use struct sctp_assoc_value instead [ 399.467623][ T8093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.489581][ T8093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.508706][ T25] usb 5-1: USB disconnect, device number 17 [ 399.535762][ T8093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.597332][ T8213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.629413][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.667651][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.674807][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.766537][ T29] audit: type=1400 audit(1728536983.199:400): avc: denied { shutdown } for pid=8446 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 399.988349][ T8448] [ 399.990689][ T8448] ====================================================== [ 399.997691][ T8448] WARNING: possible circular locking dependency detected [ 400.004695][ T8448] 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 Not tainted [ 400.011780][ T8448] ------------------------------------------------------ [ 400.018774][ T8448] syz.0.764/8448 is trying to acquire lock: [ 400.024645][ T8448] ffffffff90173448 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5f/0x1a0 [ 400.033702][ T8448] [ 400.033702][ T8448] but task is already holding lock: [ 400.041060][ T8448] ffffffff90178408 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x905/0x1ca0 [ 400.050782][ T8448] [ 400.050782][ T8448] which lock already depends on the new lock. [ 400.050782][ T8448] [ 400.061163][ T8448] [ 400.061163][ T8448] the existing dependency chain (in reverse order) is: [ 400.070156][ T8448] [ 400.070156][ T8448] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 400.078043][ T8448] __mutex_lock+0x175/0x9c0 [ 400.083055][ T8448] rfcomm_dev_ioctl+0x905/0x1ca0 [ 400.088505][ T8448] rfcomm_sock_ioctl+0xb4/0xe0 [ 400.093775][ T8448] sock_do_ioctl+0x116/0x280 [ 400.098890][ T8448] sock_ioctl+0x228/0x6c0 [ 400.103725][ T8448] __x64_sys_ioctl+0x18f/0x220 [ 400.108995][ T8448] do_syscall_64+0xcd/0x250 [ 400.114008][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.120408][ T8448] [ 400.120408][ T8448] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 400.129791][ T8448] lock_sock_nested+0x3a/0xf0 [ 400.134975][ T8448] rfcomm_sk_state_change+0x6d/0x3b0 [ 400.140764][ T8448] __rfcomm_dlc_close+0x28c/0x700 [ 400.146305][ T8448] rfcomm_dlc_close+0x1eb/0x240 [ 400.151663][ T8448] __rfcomm_sock_close+0xa7/0x230 [ 400.157192][ T8448] rfcomm_sock_shutdown+0xd5/0x230 [ 400.162804][ T8448] rfcomm_sock_release+0x5d/0x140 [ 400.168331][ T8448] __sock_release+0xb0/0x270 [ 400.173422][ T8448] sock_close+0x1c/0x30 [ 400.178079][ T8448] __fput+0x3f6/0xb60 [ 400.182563][ T8448] task_work_run+0x14e/0x250 [ 400.187656][ T8448] get_signal+0x1ca/0x2770 [ 400.192575][ T8448] arch_do_signal_or_restart+0x90/0x7e0 [ 400.198634][ T8448] syscall_exit_to_user_mode+0x150/0x2a0 [ 400.204772][ T8448] do_syscall_64+0xda/0x250 [ 400.209782][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.216196][ T8448] [ 400.216196][ T8448] -> #1 (&d->lock){+.+.}-{3:3}: [ 400.223215][ T8448] __mutex_lock+0x175/0x9c0 [ 400.228227][ T8448] __rfcomm_dlc_close+0x235/0x700 [ 400.233758][ T8448] rfcomm_dlc_close+0x1eb/0x240 [ 400.239122][ T8448] __rfcomm_sock_close+0xa7/0x230 [ 400.244667][ T8448] rfcomm_sock_shutdown+0xd5/0x230 [ 400.250300][ T8448] rfcomm_sock_release+0x5d/0x140 [ 400.255826][ T8448] __sock_release+0xb0/0x270 [ 400.260917][ T8448] sock_close+0x1c/0x30 [ 400.265590][ T8448] __fput+0x3f6/0xb60 [ 400.270085][ T8448] task_work_run+0x14e/0x250 [ 400.275177][ T8448] get_signal+0x1ca/0x2770 [ 400.280096][ T8448] arch_do_signal_or_restart+0x90/0x7e0 [ 400.286149][ T8448] syscall_exit_to_user_mode+0x150/0x2a0 [ 400.292287][ T8448] do_syscall_64+0xda/0x250 [ 400.297297][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.303698][ T8448] [ 400.303698][ T8448] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 400.311066][ T8448] __lock_acquire+0x250b/0x3ce0 [ 400.316419][ T8448] lock_acquire.part.0+0x11b/0x380 [ 400.322032][ T8448] __mutex_lock+0x175/0x9c0 [ 400.327040][ T8448] rfcomm_dlc_exists+0x5f/0x1a0 [ 400.332402][ T8448] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 400.337846][ T8448] rfcomm_sock_ioctl+0xb4/0xe0 [ 400.343112][ T8448] sock_do_ioctl+0x116/0x280 [ 400.348225][ T8448] sock_ioctl+0x228/0x6c0 [ 400.353075][ T8448] __x64_sys_ioctl+0x18f/0x220 [ 400.358348][ T8448] do_syscall_64+0xcd/0x250 [ 400.363358][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.369756][ T8448] [ 400.369756][ T8448] other info that might help us debug this: [ 400.369756][ T8448] [ 400.379960][ T8448] Chain exists of: [ 400.379960][ T8448] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 400.379960][ T8448] [ 400.394715][ T8448] Possible unsafe locking scenario: [ 400.394715][ T8448] [ 400.402145][ T8448] CPU0 CPU1 [ 400.407491][ T8448] ---- ---- [ 400.412833][ T8448] lock(rfcomm_ioctl_mutex); [ 400.417494][ T8448] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 400.426163][ T8448] lock(rfcomm_ioctl_mutex); [ 400.433340][ T8448] lock(rfcomm_mutex); [ 400.437479][ T8448] [ 400.437479][ T8448] *** DEADLOCK *** [ 400.437479][ T8448] [ 400.445620][ T8448] 2 locks held by syz.0.764/8448: [ 400.450620][ T8448] #0: ffff88805a082258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0xa7/0xe0 [ 400.462001][ T8448] #1: ffffffff90178408 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x905/0x1ca0 [ 400.472075][ T8448] [ 400.472075][ T8448] stack backtrace: [ 400.477970][ T8448] CPU: 0 UID: 0 PID: 8448 Comm: syz.0.764 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 400.488540][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.498582][ T8448] Call Trace: [ 400.501844][ T8448] [ 400.504760][ T8448] dump_stack_lvl+0x116/0x1f0 [ 400.509433][ T8448] print_circular_bug+0x41c/0x610 [ 400.514447][ T8448] check_noncircular+0x31a/0x400 [ 400.519377][ T8448] ? __pfx_check_noncircular+0x10/0x10 [ 400.524824][ T8448] ? lockdep_lock+0xc6/0x200 [ 400.529399][ T8448] ? __pfx_lockdep_lock+0x10/0x10 [ 400.534411][ T8448] __lock_acquire+0x250b/0x3ce0 [ 400.539249][ T8448] ? __pfx___lock_acquire+0x10/0x10 [ 400.544431][ T8448] lock_acquire.part.0+0x11b/0x380 [ 400.549525][ T8448] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 400.554538][ T8448] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 400.560171][ T8448] ? rcu_is_watching+0x12/0xc0 [ 400.564921][ T8448] ? trace_lock_acquire+0x14a/0x1d0 [ 400.570105][ T8448] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 400.575116][ T8448] ? lock_acquire+0x2f/0xb0 [ 400.579598][ T8448] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 400.584610][ T8448] __mutex_lock+0x175/0x9c0 [ 400.589100][ T8448] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 400.594112][ T8448] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 400.599123][ T8448] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 400.605357][ T8448] ? __pfx___mutex_lock+0x10/0x10 [ 400.610368][ T8448] ? __pfx_lock_release+0x10/0x10 [ 400.615374][ T8448] ? trace_lock_acquire+0x14a/0x1d0 [ 400.620560][ T8448] ? lock_acquire+0x2f/0xb0 [ 400.625046][ T8448] ? __might_fault+0xe3/0x190 [ 400.629710][ T8448] ? cap_capable+0x1cf/0x240 [ 400.634288][ T8448] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 400.639301][ T8448] rfcomm_dlc_exists+0x5f/0x1a0 [ 400.644144][ T8448] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 400.649071][ T8448] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 400.654425][ T8448] ? __pfx_lock_release+0x10/0x10 [ 400.659433][ T8448] ? mark_held_locks+0x9f/0xe0 [ 400.664175][ T8448] ? rfcomm_sock_ioctl+0xa7/0xe0 [ 400.669094][ T8448] ? __local_bh_enable_ip+0xa4/0x120 [ 400.674362][ T8448] rfcomm_sock_ioctl+0xb4/0xe0 [ 400.679109][ T8448] sock_do_ioctl+0x116/0x280 [ 400.683689][ T8448] ? __pfx_sock_do_ioctl+0x10/0x10 [ 400.688788][ T8448] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 400.695271][ T8448] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 400.701757][ T8448] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 400.708592][ T8448] sock_ioctl+0x228/0x6c0 [ 400.712907][ T8448] ? __pfx_sock_ioctl+0x10/0x10 [ 400.717745][ T8448] ? selinux_file_ioctl+0x180/0x270 [ 400.722926][ T8448] ? selinux_file_ioctl+0xb4/0x270 [ 400.728020][ T8448] ? __pfx_sock_ioctl+0x10/0x10 [ 400.732856][ T8448] __x64_sys_ioctl+0x18f/0x220 [ 400.737613][ T8448] do_syscall_64+0xcd/0x250 [ 400.742107][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.747995][ T8448] RIP: 0033:0x7fbbbef7dff9 [ 400.752400][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.771990][ T8448] RSP: 002b:00007fbbbfd30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.780388][ T8448] RAX: ffffffffffffffda RBX: 00007fbbbf136058 RCX: 00007fbbbef7dff9 [ 400.788344][ T8448] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000009 [ 400.796308][ T8448] RBP: 00007fbbbeff0296 R08: 0000000000000000 R09: 0000000000000000 [ 400.804261][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.812215][ T8448] R13: 0000000000000000 R14: 00007fbbbf136058 R15: 00007ffe45744878 [ 400.820175][ T8448] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 401.633832][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.778421][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.882988][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.974964][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.089857][ T11] bridge_slave_1: left allmulticast mode [ 402.095511][ T11] bridge_slave_1: left promiscuous mode [ 402.104737][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.112703][ T11] bridge_slave_0: left allmulticast mode [ 402.120746][ T11] bridge_slave_0: left promiscuous mode [ 402.127151][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.311683][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.327202][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.344043][ T11] bond0 (unregistering): Released all slaves [ 402.557218][ T11] hsr_slave_0: left promiscuous mode [ 402.562789][ T11] hsr_slave_1: left promiscuous mode [ 402.569920][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.578460][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.586081][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.593851][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.610790][ T11] veth1_macvtap: left promiscuous mode [ 402.616606][ T11] veth0_macvtap: left promiscuous mode [ 402.627206][ T11] veth1_vlan: left promiscuous mode [ 402.639663][ T11] veth0_vlan: left promiscuous mode [ 402.893071][ T11] team0 (unregistering): Port device team_slave_1 removed [ 402.939342][ T11] team0 (unregistering): Port device team_slave_0 removed [ 403.462341][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.519853][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.579518][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.651196][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.258676][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.319005][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.381811][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.429348][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.515179][ T11] bridge_slave_1: left allmulticast mode [ 404.526180][ T11] bridge_slave_1: left promiscuous mode [ 404.533572][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.542318][ T11] bridge_slave_0: left allmulticast mode [ 404.549633][ T11] bridge_slave_0: left promiscuous mode [ 404.560709][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.570730][ T11] bridge_slave_1: left allmulticast mode [ 404.580402][ T11] bridge_slave_1: left promiscuous mode [ 404.586996][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.601748][ T11] bridge_slave_0: left allmulticast mode [ 404.607538][ T11] bridge_slave_0: left promiscuous mode [ 404.613131][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.623036][ T11] bridge_slave_1: left allmulticast mode [ 404.629052][ T11] bridge_slave_1: left promiscuous mode [ 404.634645][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.643895][ T11] bridge_slave_0: left allmulticast mode [ 404.650065][ T11] bridge_slave_0: left promiscuous mode [ 404.655660][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.665998][ T11] bridge_slave_1: left allmulticast mode [ 404.671962][ T11] bridge_slave_1: left promiscuous mode [ 404.679032][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.687285][ T11] bridge_slave_0: left allmulticast mode [ 404.692906][ T11] bridge_slave_0: left promiscuous mode [ 404.699553][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.039383][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.052697][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.062866][ T11] bond0 (unregistering): Released all slaves [ 405.076845][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.088121][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.099429][ T11] bond0 (unregistering): Released all slaves [ 405.115683][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.128954][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.139337][ T11] bond0 (unregistering): Released all slaves [ 405.152831][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.163582][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.174760][ T11] bond0 (unregistering): Released all slaves [ 405.426142][ T11] hsr_slave_0: left promiscuous mode [ 405.431955][ T11] hsr_slave_1: left promiscuous mode [ 405.439448][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.447755][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.457987][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.465376][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.484024][ T11] hsr_slave_0: left promiscuous mode [ 405.490317][ T11] hsr_slave_1: left promiscuous mode [ 405.496164][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.505105][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.515689][ T11] hsr_slave_0: left promiscuous mode [ 405.523272][ T11] hsr_slave_1: left promiscuous mode [ 405.529575][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.538236][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.549610][ T11] hsr_slave_0: left promiscuous mode [ 405.555454][ T11] hsr_slave_1: left promiscuous mode [ 405.562379][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.571723][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.580806][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.588369][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.599963][ T11] veth1_macvtap: left promiscuous mode [ 405.605431][ T11] veth0_macvtap: left promiscuous mode [ 405.611295][ T11] veth1_vlan: left promiscuous mode [ 405.616757][ T11] veth0_vlan: left promiscuous mode [ 405.624323][ T11] veth1_macvtap: left promiscuous mode [ 405.629952][ T11] veth0_macvtap: left promiscuous mode [ 405.635649][ T11] veth1_vlan: left promiscuous mode [ 405.640981][ T11] veth0_vlan: left promiscuous mode [ 405.833703][ T11] team0 (unregistering): Port device team_slave_1 removed [ 405.855618][ T11] team0 (unregistering): Port device team_slave_0 removed [ 406.005551][ T11] team0 (unregistering): Port device team_slave_1 removed [ 406.031085][ T11] team0 (unregistering): Port device team_slave_0 removed [ 406.180941][ T11] team0 (unregistering): Port device team_slave_1 removed [ 406.204645][ T11] team0 (unregistering): Port device team_slave_0 removed [ 406.359548][ T11] team0 (unregistering): Port device team_slave_1 removed [ 406.372550][ T11] team0 (unregistering): Port device team_slave_0 removed