last executing test programs: 10m31.102031574s ago: executing program 32 (id=1679): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0xec, 0x0, 0x0, 0x0}) 9m28.715278975s ago: executing program 2 (id=3352): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 9m28.60788639s ago: executing program 2 (id=3354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48040) 9m28.586151173s ago: executing program 2 (id=3355): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9m28.435706032s ago: executing program 2 (id=3356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000070601010000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24044894) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x22, 0x0) 9m28.351401344s ago: executing program 2 (id=3357): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) 9m28.293136183s ago: executing program 2 (id=3359): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') timer_create(0x0, 0x0, &(0x7f0000000100)) 9m25.236859632s ago: executing program 33 (id=3161): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x2000}, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 9m24.456639864s ago: executing program 0 (id=3401): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'ovf\x00', 0xe, 0xa, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcd, 0x7b, 0xc60e}}, 0x44) 9m24.272274586s ago: executing program 0 (id=3403): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x9, 0x6, 0x8cc5, 0x6, 0x8, "d7c1ed55e1ae00ba994409ef44039c19e2c6be"}) 9m23.920122617s ago: executing program 0 (id=3407): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 9m23.741886145s ago: executing program 0 (id=3410): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c0002"], 0x9c}, 0x1, 0xba01}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) 9m23.58054376s ago: executing program 0 (id=3411): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) 9m23.451455792s ago: executing program 0 (id=3413): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x1062200) 9m13.266729296s ago: executing program 34 (id=3359): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') timer_create(0x0, 0x0, &(0x7f0000000100)) 9m8.265890579s ago: executing program 35 (id=3413): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x1062200) 6m42.610896147s ago: executing program 5 (id=6257): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 6m41.629424568s ago: executing program 5 (id=6266): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x9, 0x3e, 0x8f, 0x6, 0x6, 0x4, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0xc, 0x8, 0x4, 0x1, 0x8], [0x9, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x6c9, 0x1, 0xfffffffc, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0xea4, 0x0, 0x4, 0x80000001, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xa, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93698, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffff15e, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x9, 0x5, 0x1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x5, 0xce7, 0x1fd, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x5c, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x144382e8, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x1, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0x1001]}, 0x45c) 6m41.495231758s ago: executing program 5 (id=6270): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCFLSH(r1, 0x541b, 0x69de07c74d7effff) 6m41.321964595s ago: executing program 5 (id=6273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 6m41.17020084s ago: executing program 5 (id=6277): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 6m40.856521499s ago: executing program 5 (id=6282): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [{0x8, 0x4, r2}], {0x10, 0x4}, {0x20, 0x5}}, 0x2c, 0x1) 6m40.629698987s ago: executing program 36 (id=6282): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [{0x8, 0x4, r2}], {0x10, 0x4}, {0x20, 0x5}}, 0x2c, 0x1) 5m12.533691156s ago: executing program 6 (id=7926): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) 5m12.502082469s ago: executing program 6 (id=7927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}]]}, 0x24}}, 0x4010) 5m12.4505071s ago: executing program 6 (id=7929): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x5, 0x3, 0x0, 0x1, 0xfffffffffffffffe, 0x3ff, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x99}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 5m12.407758459s ago: executing program 6 (id=7931): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5m12.35639689s ago: executing program 6 (id=7932): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="2700000014000707030e0000120f0a0011004ad75147a2c01f52ea064d13620100f5fe0012ff00", 0x27) 5m12.267092419s ago: executing program 9 (id=7944): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x210cfa, 0x3, 0x8000008, 0x3, 0x0, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000500)={0x800080, 0x10000, 0x2, 0x0, 0x40, 0x558}) close(0x3) 5m12.206978872s ago: executing program 9 (id=7935): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 5m12.156345673s ago: executing program 9 (id=7936): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x880) 5m12.05949462s ago: executing program 6 (id=7938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40044) 5m12.041824495s ago: executing program 9 (id=7939): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 5m11.858548528s ago: executing program 37 (id=7938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40044) 5m11.855231707s ago: executing program 9 (id=7941): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) 5m11.020481038s ago: executing program 9 (id=7947): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_COPY(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000548000/0x1000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x1000}) 5m10.798210797s ago: executing program 38 (id=7947): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_COPY(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000548000/0x1000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x1000}) 1m29.093398691s ago: executing program 7 (id=9601): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.073177031s ago: executing program 3 (id=9123): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0xc5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m12.369369287s ago: executing program 7 (id=9601): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.939099377s ago: executing program 3 (id=9123): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0xc5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 52.640393423s ago: executing program 7 (id=9601): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 51.198614506s ago: executing program 3 (id=9123): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0xc5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 35.911158995s ago: executing program 7 (id=9601): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 35.268380578s ago: executing program 3 (id=9123): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0xc5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 20.920330237s ago: executing program 7 (id=9601): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 19.630034048s ago: executing program 3 (id=9123): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0xc5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.936282453s ago: executing program 3 (id=9123): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0xc5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.316371779s ago: executing program 7 (id=9601): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.736496133s ago: executing program 4 (id=10424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1.686753008s ago: executing program 1 (id=10425): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r1, 0x0, 0x0, 0x800, 0x0, 0x0) 1.665103475s ago: executing program 8 (id=10426): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.655841761s ago: executing program 1 (id=10427): socket$inet6(0xa, 0x3, 0x8000000003c) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 1.459656038s ago: executing program 1 (id=10428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x6}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)) 1.393859176s ago: executing program 8 (id=10429): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1.278439157s ago: executing program 8 (id=10430): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000800)={0x0, 0x0, r2, r3, 0xdea2, 0x5ba, 0x8, 0x7, {0xd9, 0xad, 0x5, 0x8, 0xa990, 0x5, 0x6, 0x4, 0x2, 0x401, 0x8, 0x2, 0x1, 0x0, "2e6ab935ea9b765b46180b35a691c27b23964080912441e3a00fcb8ec5f1e011"}}) 1.23733466s ago: executing program 4 (id=10431): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.1645022s ago: executing program 1 (id=10432): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0x2020) 1.151003645s ago: executing program 8 (id=10433): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x26, 0x200, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @uid=0xee01}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 965.864819ms ago: executing program 4 (id=10434): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 961.747073ms ago: executing program 1 (id=10435): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x2141, 0x0) 808.640662ms ago: executing program 1 (id=10436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x54, 0x67, 0x0, 0x81, 0x6, 0x0, @broadcast, @remote}, {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x20, 0x0, 0x0, 0x5, {[@md5sig={0x13, 0x12, "f24a7ffe859af824e7ce652e56a1aaf2"}, @fastopen={0x22, 0xd, "bcbff9e372c3c85bce35b3"}, @timestamp={0x8, 0xa, 0x10001, 0x3}]}}}}}}}}, 0x66) 608.198149ms ago: executing program 4 (id=10437): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100010000000000040002000000000008000100", @ANYRES32=0x0, @ANYBLOB="100007000000000020"], 0x2c, 0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 490.695492ms ago: executing program 4 (id=10438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "801b2b", 0x0, 0x2f, 0x0, @private0, @local}}}}}}}, 0x0) 110.135162ms ago: executing program 8 (id=10439): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101}}}], 0x20}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002200)="8510", 0x2}], 0x1}, 0x800) 25.738256ms ago: executing program 4 (id=10440): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) 0s ago: executing program 8 (id=10441): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): 6.365283][T29778] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.390567][T29778] bridge_slave_1: entered allmulticast mode [ 716.398825][T29778] bridge_slave_1: entered promiscuous mode [ 716.555280][T29778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.639157][T29778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.721595][T29809] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.729715][T29809] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.738275][T29809] bridge_slave_0: entered allmulticast mode [ 716.746072][ T30] audit: type=1400 audit(1745526283.193:1720): avc: denied { getopt } for pid=29918 comm="syz.8.10015" lport=33445 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 716.749357][T29809] bridge_slave_0: entered promiscuous mode [ 716.823712][ T5824] Bluetooth: hci2: command tx timeout [ 716.839690][T29809] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.850713][ T47] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 716.868162][T29809] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.883703][T29809] bridge_slave_1: entered allmulticast mode [ 716.891732][T29809] bridge_slave_1: entered promiscuous mode [ 716.907246][T29778] team0: Port device team_slave_0 added [ 716.928113][T29778] team0: Port device team_slave_1 added [ 716.936681][T29921] syzkaller1: entered promiscuous mode [ 716.947003][T29921] syzkaller1: entered allmulticast mode [ 717.034704][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.052929][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.068394][ T47] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 717.096051][T29809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.122113][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.142120][ T47] usb 2-1: config 0 descriptor?? [ 717.172593][T29778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.191401][T29778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.229487][T29778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.250594][T29809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.304850][T29778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.327124][T29778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.363720][T29778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.425588][T29809] team0: Port device team_slave_0 added [ 717.447927][ T30] audit: type=1400 audit(1745526283.893:1721): avc: denied { execute } for pid=29928 comm="syz.4.10020" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 717.508311][T29809] team0: Port device team_slave_1 added [ 717.580274][T29778] hsr_slave_0: entered promiscuous mode [ 717.596610][T29778] hsr_slave_1: entered promiscuous mode [ 717.609712][T29809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.620487][T29809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.651589][T29809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.693572][T29809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.702181][T29809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.740913][T29809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.895136][T29809] hsr_slave_0: entered promiscuous mode [ 717.903444][T29809] hsr_slave_1: entered promiscuous mode [ 717.910275][T29809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.918645][T29809] Cannot create hsr debugfs directory [ 718.191994][ T47] uclogic 0003:256C:006D.0093: failed retrieving string descriptor #200: -71 [ 718.225162][ T47] uclogic 0003:256C:006D.0093: failed retrieving pen parameters: -71 [ 718.270499][ T47] uclogic 0003:256C:006D.0093: failed probing pen v2 parameters: -71 [ 718.297454][ T47] uclogic 0003:256C:006D.0093: failed probing parameters: -71 [ 718.333872][ T47] uclogic 0003:256C:006D.0093: probe with driver uclogic failed with error -71 [ 718.373835][ T47] usb 2-1: USB disconnect, device number 45 [ 718.536229][T29778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.610276][T29778] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.698265][T29305] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.705836][T29305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.739010][T29305] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.746543][T29305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.858628][T29809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.904498][ T5824] Bluetooth: hci2: command tx timeout [ 718.967188][T29809] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.045381][T26767] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.053172][T26767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.071130][T26767] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.078853][T26767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.187563][T29958] netlink: 'syz.4.10032': attribute type 2 has an invalid length. [ 719.224214][T29958] netlink: 'syz.4.10032': attribute type 1 has an invalid length. [ 719.254597][T29958] nbd: illegal input index 65544 [ 719.273527][ T5933] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 719.445334][ T5933] usb 9-1: Using ep0 maxpacket: 16 [ 719.484237][ T5933] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 719.526467][ T5933] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 719.579973][ T5933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.586937][T29969] io-wq is not configured for unbound workers [ 719.618127][ T5933] usb 9-1: config 0 descriptor?? [ 719.660451][ T5933] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input116 [ 719.751982][T29778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.818607][T29974] Bluetooth: MGMT ver 1.23 [ 719.927130][ T5183] bcm5974 9-1:0.0: could not read from device [ 719.939741][ T5933] bcm5974 9-1:0.0: could not read from device [ 719.971594][ T5183] bcm5974 9-1:0.0: could not read from device [ 719.971921][T29809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.027531][ T5933] input: failed to attach handler mousedev to device input116, error: -5 [ 720.060153][ T5183] bcm5974 9-1:0.0: could not read from device [ 720.066121][ T5933] usb 9-1: USB disconnect, device number 65 [ 720.084405][ T5183] bcm5974 9-1:0.0: could not read from device [ 720.435963][T29778] veth0_vlan: entered promiscuous mode [ 720.452685][T29778] veth1_vlan: entered promiscuous mode [ 720.512720][T29778] veth0_macvtap: entered promiscuous mode [ 720.530162][T29778] veth1_macvtap: entered promiscuous mode [ 720.580806][T29809] veth0_vlan: entered promiscuous mode [ 720.607287][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.621247][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.633180][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.644878][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.658607][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.677415][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.705627][T29778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.757335][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.771750][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.789930][ T30] audit: type=1400 audit(1745526287.243:1722): avc: denied { getopt } for pid=30000 comm="syz.1.10041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 720.790014][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.837027][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.847644][T29778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.868554][T29778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.881826][T29778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.893426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #104!!! [ 720.923523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 720.965307][T29809] veth1_vlan: entered promiscuous mode [ 721.167132][T29809] veth0_macvtap: entered promiscuous mode [ 721.222732][T29809] veth1_macvtap: entered promiscuous mode [ 721.252328][ T30] audit: type=1400 audit(1745526287.703:1723): avc: denied { write } for pid=30011 comm="syz.1.10046" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 721.275767][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.385367][T29809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.410803][T29809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.413389][T30017] kernel read not supported for file /rmdF¼ì (pid: 30017 comm: syz.1.10048) [ 721.436985][T29809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.449459][T29809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.462337][ T30] audit: type=1800 audit(1745526287.923:1724): pid=30017 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.10048" name=726D64461716BCEC dev="mqueue" ino=123529 res=0 errno=0 [ 721.484889][T29809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.484940][T29809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.485040][T29809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.485053][T29809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.487049][T29809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.546995][ T30] audit: type=1400 audit(1745526288.003:1725): avc: denied { create } for pid=30018 comm="syz.8.10049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 721.593610][T26761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.602113][T26761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.615240][T29809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.635939][T29809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.647060][T29809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.673098][T29809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.686862][ T30] audit: type=1400 audit(1745526288.123:1726): avc: denied { write } for pid=30018 comm="syz.8.10049" path="socket:[122398]" dev="sockfs" ino=122398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 721.708789][T29809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.711031][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.743709][T29809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.772986][T29809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.791895][T29809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.815757][T29809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.931462][ T30] audit: type=1400 audit(1745526288.383:1727): avc: denied { append } for pid=30026 comm="syz.4.10051" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 721.979490][T29294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.036833][ T30] audit: type=1400 audit(1745526288.413:1728): avc: denied { ioctl } for pid=30026 comm="syz.4.10051" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 722.046199][T29294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.061906][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.504225][T26787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.512678][T26787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.714265][T26780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.738184][T26780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.883019][ T5878] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 722.944217][T26761] bridge_slave_1: left allmulticast mode [ 722.950206][T26761] bridge_slave_1: left promiscuous mode [ 723.003384][T26761] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.072959][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 723.103746][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.146748][T26761] bridge_slave_0: left allmulticast mode [ 723.159882][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.172268][T26761] bridge_slave_0: left promiscuous mode [ 723.183330][ T5878] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 723.195407][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.206563][ T5878] usb 5-1: config 0 descriptor?? [ 723.224997][T26761] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.629854][ T5878] kye 0003:0458:5016.0094: control desc unexpectedly large [ 723.646735][ T5878] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0094/input/input117 [ 723.740254][ T5878] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0094/input/input118 [ 723.870530][ T5878] kye 0003:0458:5016.0094: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 723.911276][ T5878] usb 5-1: USB disconnect, device number 113 [ 724.001465][T26761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.017003][T26761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.029778][T26761] bond0 (unregistering): Released all slaves [ 724.885250][T26761] hsr_slave_0: left promiscuous mode [ 724.898040][T26761] hsr_slave_1: left promiscuous mode [ 724.907179][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.920663][T26761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.927124][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 724.940636][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.943265][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 724.949728][T26761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.966809][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 724.976153][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 724.995552][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 725.038073][T26761] veth1_macvtap: left promiscuous mode [ 725.044237][T26761] veth0_macvtap: left promiscuous mode [ 725.050156][T26761] veth1_vlan: left promiscuous mode [ 725.055886][T26761] veth0_vlan: left promiscuous mode [ 725.769957][T26761] team0 (unregistering): Port device team_slave_1 removed [ 725.852665][T26761] team0 (unregistering): Port device team_slave_0 removed [ 726.174460][ T30] audit: type=1400 audit(1745526292.633:1729): avc: denied { read } for pid=30061 comm="syz.4.10065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 726.638317][T30075] xt_hashlimit: size too large, truncated to 1048576 [ 726.744635][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 726.763492][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 726.774101][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 726.833269][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 726.852530][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.083450][ T55] Bluetooth: hci0: command tx timeout [ 727.272901][ T30] audit: type=1400 audit(1745526293.723:1730): avc: denied { connect } for pid=30080 comm="syz.4.10069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 727.490810][T30058] lo speed is unknown, defaulting to 1000 [ 727.898711][T30077] lo speed is unknown, defaulting to 1000 [ 728.077831][T26761] bridge_slave_1: left allmulticast mode [ 728.097534][T26761] bridge_slave_1: left promiscuous mode [ 728.167970][T26761] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.313926][T26761] bridge_slave_0: left allmulticast mode [ 728.319924][T26761] bridge_slave_0: left promiscuous mode [ 728.340489][T26761] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.474297][ T30] audit: type=1400 audit(1745526294.923:1731): avc: denied { accept } for pid=30105 comm="syz.4.10081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 728.987995][ T55] Bluetooth: hci2: command tx timeout [ 729.143250][ T55] Bluetooth: hci0: command tx timeout [ 729.692314][T26761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.715996][T26761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.728858][T26761] bond0 (unregistering): Released all slaves [ 729.791794][T30126] syzkaller1: entered promiscuous mode [ 729.835821][T30126] syzkaller1: entered allmulticast mode [ 730.220460][T30058] chnl_net:caif_netlink_parms(): no params data found [ 730.248839][T30137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10091'. [ 730.760605][T30152] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 730.762549][ T30] audit: type=1400 audit(1745526297.183:1732): avc: denied { bind } for pid=30151 comm="syz.8.10097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 730.873008][ T30] audit: type=1400 audit(1745526297.213:1733): avc: denied { read } for pid=30151 comm="syz.8.10097" path="socket:[124223]" dev="sockfs" ino=124223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 730.946990][ T30] audit: type=1800 audit(1745526297.293:1734): pid=30154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.10096" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 730.968780][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.983108][ T30] audit: type=1400 audit(1745526297.363:1735): avc: denied { mount } for pid=30155 comm="syz.8.10098" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 731.073019][ T55] Bluetooth: hci2: command tx timeout [ 731.123717][ T30] audit: type=1400 audit(1745526297.373:1736): avc: denied { mounton } for pid=30155 comm="syz.8.10098" path="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 731.181353][ T30] audit: type=1400 audit(1745526297.473:1737): avc: denied { unmount } for pid=13747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 731.223724][ T55] Bluetooth: hci0: command tx timeout [ 731.240782][T26761] hsr_slave_0: left promiscuous mode [ 731.254638][T26761] hsr_slave_1: left promiscuous mode [ 731.261245][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.273154][T26761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.287412][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.296603][T26761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.327869][T26761] veth1_macvtap: left promiscuous mode [ 731.333911][T26761] veth0_macvtap: left promiscuous mode [ 731.340960][T26761] veth1_vlan: left promiscuous mode [ 731.347002][T26761] veth0_vlan: left promiscuous mode [ 731.414302][ T9] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 731.533639][ T5933] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 731.636632][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.658987][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.690999][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 731.718617][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 731.727639][ T9] usb 5-1: SerialNumber: syz [ 731.747453][ T5933] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 731.762170][ T5933] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 731.775710][ T5933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.794251][ T5933] usb 9-1: config 0 descriptor?? [ 731.801335][T30165] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 732.075171][ T9] usb 5-1: 0:2 : does not exist [ 732.081420][ T9] usb 5-1: usbmixer: too many channels (61) in unit 5 [ 732.121673][ T9] usb 5-1: USB disconnect, device number 114 [ 732.258420][T26761] team0 (unregistering): Port device team_slave_1 removed [ 732.305767][ T5933] elan 0003:04F3:0755.0095: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 732.346860][T26761] team0 (unregistering): Port device team_slave_0 removed [ 732.525702][ T5933] usb 9-1: USB disconnect, device number 66 [ 733.143595][ T55] Bluetooth: hci2: command tx timeout [ 733.305534][ T55] Bluetooth: hci0: command tx timeout [ 733.763222][T30077] chnl_net:caif_netlink_parms(): no params data found [ 733.787658][T30058] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.813482][T30058] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.830797][T30058] bridge_slave_0: entered allmulticast mode [ 733.863510][T30058] bridge_slave_0: entered promiscuous mode [ 733.942163][T30058] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.961125][T30058] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.975029][T30058] bridge_slave_1: entered allmulticast mode [ 733.984024][T30058] bridge_slave_1: entered promiscuous mode [ 734.319956][T30058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.380862][T30058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.493765][T30077] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.512422][T30077] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.523009][T30077] bridge_slave_0: entered allmulticast mode [ 734.553911][T30077] bridge_slave_0: entered promiscuous mode [ 734.592410][ T30] audit: type=1400 audit(1745526301.023:1738): avc: denied { read } for pid=30209 comm="syz.4.10117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 734.675439][T30077] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.703057][T30077] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.711087][T30077] bridge_slave_1: entered allmulticast mode [ 734.735432][T30077] bridge_slave_1: entered promiscuous mode [ 734.766008][ T30] audit: type=1400 audit(1745526301.223:1739): avc: denied { connect } for pid=30213 comm="syz.1.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 734.921315][T30058] team0: Port device team_slave_0 added [ 734.948917][T30077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.989007][T30077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.015751][T30058] team0: Port device team_slave_1 added [ 735.243051][ T55] Bluetooth: hci2: command tx timeout [ 735.320904][T30058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.362559][T30058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.373729][ T30] audit: type=1400 audit(1745526301.813:1740): avc: denied { accept } for pid=30229 comm="syz.1.10125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 735.442437][T30058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.480020][T30077] team0: Port device team_slave_0 added [ 735.554361][T30058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.573161][T30058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.639984][T30058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.708710][T30077] team0: Port device team_slave_1 added [ 736.015046][T30077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.022372][T30077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.115966][T30077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.175344][T30077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.214567][T30077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.272119][T30248] Bluetooth: MGMT ver 1.23 [ 736.301970][T30077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.369613][T30058] hsr_slave_0: entered promiscuous mode [ 736.393666][T30058] hsr_slave_1: entered promiscuous mode [ 736.670670][T30077] hsr_slave_0: entered promiscuous mode [ 736.690166][T30077] hsr_slave_1: entered promiscuous mode [ 736.714277][T30077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.743464][T30077] Cannot create hsr debugfs directory [ 737.051070][ T30] audit: type=1400 audit(1745526303.503:1741): avc: denied { create } for pid=30271 comm="syz.4.10142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 737.114384][ T30] audit: type=1400 audit(1745526303.553:1742): avc: denied { write } for pid=30271 comm="syz.4.10142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 737.174462][T30272] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 737.203755][T30272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 737.622497][T30058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.754159][ T30] audit: type=1400 audit(1745526304.203:1743): avc: denied { execute } for pid=30282 comm="syz.8.10148" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 737.777666][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.824402][T30283] bond0: (slave bridge0): Releasing backup interface [ 737.850639][T30283] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.860584][T30283] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.892661][T30283] bridge_slave_0: left allmulticast mode [ 737.899841][T30283] bridge_slave_0: left promiscuous mode [ 737.921114][T30283] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.947426][T30283] bridge_slave_1: left allmulticast mode [ 737.956263][T30283] bridge_slave_1: left promiscuous mode [ 737.962372][T30283] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.980205][T30283] bond0: (slave bond_slave_0): Releasing backup interface [ 738.008064][T30283] bond0: (slave bond_slave_1): Releasing backup interface [ 738.057987][T30283] team0: Port device team_slave_0 removed [ 738.092602][T30283] team0: Port device team_slave_1 removed [ 738.168805][T30058] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.190183][ T30] audit: type=1400 audit(1745526304.643:1744): avc: denied { ioctl } for pid=30282 comm="syz.8.10148" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 738.214915][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.248495][T30285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.292344][T30285] team0: Port device bond0 added [ 738.326201][T30077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.357161][T29305] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.364729][T29305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.441364][T26780] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.448866][T26780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.519398][T30077] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.550079][T26778] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.557920][T26778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.650498][T26761] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.658197][T26761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.796742][T30058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.842776][T30077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 738.861727][T30077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.897461][T30300] lo speed is unknown, defaulting to 1000 [ 739.417434][T30058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.994107][T30077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.162698][ T30] audit: type=1400 audit(1745526306.613:1745): avc: denied { read } for pid=30339 comm="syz.1.10165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 740.446168][T30058] veth0_vlan: entered promiscuous mode [ 740.481892][T30058] veth1_vlan: entered promiscuous mode [ 740.617345][T30058] veth0_macvtap: entered promiscuous mode [ 740.667036][T30058] veth1_macvtap: entered promiscuous mode [ 740.736729][T30058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.772916][T30058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.784149][T30058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.795487][T30058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.808109][T30058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.819692][T30058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.833516][ T5878] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 740.834487][T30058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.939161][T30058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.956993][T30058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.971177][T30058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.983569][T30058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.995599][T30058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.009436][T30058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.019385][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.019434][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.019470][ T5878] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 741.019520][ T5878] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 741.019538][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.022060][ T5878] usb 9-1: config 0 descriptor?? [ 741.033962][T30058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.244953][ T30] audit: type=1400 audit(1745526307.693:1746): avc: denied { connect } for pid=30369 comm="syz.1.10173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 741.257249][T30077] veth0_vlan: entered promiscuous mode [ 741.322756][T30077] veth1_vlan: entered promiscuous mode [ 741.418084][T26780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.443511][T26780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.481480][T30077] veth0_macvtap: entered promiscuous mode [ 741.486342][ T5878] plantronics 0003:047F:FFFF.0096: No inputs registered, leaving [ 741.512592][ T5878] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 741.530670][T30077] veth1_macvtap: entered promiscuous mode [ 741.594037][T26778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.598862][T30077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.602266][T26778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.662917][T30077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.683426][T30077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.715271][T30374] input: syz0 as /devices/virtual/input/input119 [ 741.737531][T30077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.784114][T30077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.812944][T30077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.825082][ T5878] usb 9-1: USB disconnect, device number 67 [ 741.835168][T30077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.848798][T30077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.877320][T30077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.911248][T30077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.950580][T30077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.973405][T30077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.008441][T30077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.037241][T30077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.049159][T30077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.094913][T30077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.106127][T30077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.124985][T30077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.484745][T26778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.536207][T26778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.601069][T26761] bridge_slave_1: left allmulticast mode [ 742.614179][T26761] bridge_slave_1: left promiscuous mode [ 742.650103][T26761] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.661700][T26761] bridge_slave_0: left allmulticast mode [ 742.668728][T26761] bridge_slave_0: left promiscuous mode [ 742.675017][T26761] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.903540][ T5878] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 743.070463][ T5878] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 743.080841][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.111576][ T5878] usb 2-1: config 0 descriptor?? [ 743.360094][ T5878] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 743.368093][T26761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.369145][ T5878] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 743.390781][T26761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.406393][ T5878] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 743.411287][T26761] bond0 (unregistering): Released all slaves [ 743.416710][ T5878] [drm] Initialized udl on minor 2 [ 743.512174][T26778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.553308][T26778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.594824][ T5878] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 743.620226][ T5878] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 743.666388][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 743.676697][ T5878] usb 2-1: USB disconnect, device number 46 [ 743.686540][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 744.497640][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.512493][T26761] hsr_slave_0: left promiscuous mode [ 744.523792][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.531888][T26761] hsr_slave_1: left promiscuous mode [ 744.538789][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.539822][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.556367][T26761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.567669][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 744.568777][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.590339][T26761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.600944][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.638113][T26761] veth1_macvtap: left promiscuous mode [ 744.644376][T26761] veth0_macvtap: left promiscuous mode [ 744.650481][T26761] veth1_vlan: left promiscuous mode [ 744.657447][T26761] veth0_vlan: left promiscuous mode [ 745.446349][T26761] team0 (unregistering): Port device team_slave_1 removed [ 745.528651][T26761] team0 (unregistering): Port device team_slave_0 removed [ 746.183465][ T5907] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 746.380715][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.397335][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.422857][ T5907] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 746.461510][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.505543][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.518163][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.538294][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.547282][ T5907] usb 5-1: config 0 descriptor?? [ 746.589434][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.627486][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 746.630320][T30425] loop8: detected capacity change from 0 to 8 [ 746.643647][T30425] Dev loop8: unable to read RDB block 8 [ 746.649742][T30425] loop8: unable to read partition table [ 746.673452][ T5824] Bluetooth: hci0: command tx timeout [ 746.680649][T30425] loop8: partition table beyond EOD, truncated [ 746.704272][T30425] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 746.888750][T30401] lo speed is unknown, defaulting to 1000 [ 747.000585][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.037427][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.057940][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.067607][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.083231][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.095820][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.106178][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.119868][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.137985][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.148126][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.178762][ T5907] lg-g15 0003:046D:C222.0097: unknown main item tag 0x0 [ 747.200176][ T5907] lg-g15 0003:046D:C222.0097: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 747.217473][ T5907] usb 5-1: USB disconnect, device number 115 [ 747.372675][T30421] lo speed is unknown, defaulting to 1000 [ 747.523097][ T5878] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 747.566797][T26761] bridge_slave_1: left allmulticast mode [ 747.572747][T26761] bridge_slave_1: left promiscuous mode [ 747.591743][T26761] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.626454][T26761] bridge_slave_0: left allmulticast mode [ 747.642626][T26761] bridge_slave_0: left promiscuous mode [ 747.661482][T26761] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.679594][ T30] audit: type=1400 audit(1745526314.133:1747): avc: denied { create } for pid=30433 comm="syz.1.10196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 747.702236][ T5878] usb 9-1: Using ep0 maxpacket: 32 [ 747.718310][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 747.733370][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 747.743808][ T5878] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 747.757310][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 747.769903][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 747.801128][ T5878] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 747.832912][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.861772][ T5878] usb 9-1: Product: syz [ 747.881954][ T5878] usb 9-1: Manufacturer: syz [ 747.892801][ T5878] usb 9-1: SerialNumber: syz [ 747.900544][ T5878] usb 9-1: config 0 descriptor?? [ 747.910967][T30431] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 747.931846][ T5878] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input120 [ 747.948809][ T5183] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 747.984695][ C1] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 748.016078][T24655] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 748.025069][ T5183] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 748.059415][ T5183] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 748.093027][ T5183] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 748.173206][T24655] usb 2-1: Using ep0 maxpacket: 16 [ 748.216236][T30431] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 748.216941][T24655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 748.260954][T24655] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 748.276315][T24655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 748.311515][ T5933] usb 9-1: USB disconnect, device number 68 [ 748.324383][T24655] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 748.366686][T24655] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 748.380068][T24655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.389866][T24655] usb 2-1: Product: syz [ 748.394553][T24655] usb 2-1: Manufacturer: syz [ 748.399586][T24655] usb 2-1: SerialNumber: syz [ 748.409653][T24655] usb 2-1: config 0 descriptor?? [ 748.416156][T30435] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 748.424568][T30435] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 748.446780][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 748.462451][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 748.472108][T24655] port100 2-1:0.0: NFC: Could not get supported command types [ 748.626767][T26761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.653705][T26761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.667729][T26761] bond0 (unregistering): Released all slaves [ 748.695970][ T5907] usb 2-1: USB disconnect, device number 47 [ 748.750739][ T5824] Bluetooth: hci0: command tx timeout [ 748.750766][ T55] Bluetooth: hci2: command tx timeout [ 748.792749][T30437] lo speed is unknown, defaulting to 1000 [ 749.011719][ T30] audit: type=1400 audit(1745526315.463:1748): avc: denied { setopt } for pid=30444 comm="syz.8.10199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 749.744525][ T30] audit: type=1400 audit(1745526316.203:1749): avc: denied { write } for pid=30463 comm="syz.8.10207" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 749.802648][T30401] chnl_net:caif_netlink_parms(): no params data found [ 749.905189][T26761] hsr_slave_0: left promiscuous mode [ 749.926940][T26761] hsr_slave_1: left promiscuous mode [ 749.944031][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.951926][T26761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.978830][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.990546][T26761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.056931][T26761] veth1_macvtap: left promiscuous mode [ 750.062810][T26761] veth0_macvtap: left promiscuous mode [ 750.090319][T26761] veth1_vlan: left promiscuous mode [ 750.100347][T26761] veth0_vlan: left promiscuous mode [ 750.832904][ T55] Bluetooth: hci2: command tx timeout [ 750.833212][T26000] Bluetooth: hci0: command tx timeout [ 751.139123][T30488] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 751.196155][T26761] team0 (unregistering): Port device team_slave_1 removed [ 751.277957][T26761] team0 (unregistering): Port device team_slave_0 removed [ 751.386338][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10218'. [ 751.396965][T30493] netlink: 'syz.1.10218': attribute type 18 has an invalid length. [ 751.406198][T30493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10218'. [ 752.136881][T30476] lo: entered allmulticast mode [ 752.142546][T30476] lo: left allmulticast mode [ 752.305996][T30421] chnl_net:caif_netlink_parms(): no params data found [ 752.486182][T30503] netlink: 'syz.8.10221': attribute type 1 has an invalid length. [ 752.762052][T30401] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.783115][T30401] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.802370][T30401] bridge_slave_0: entered allmulticast mode [ 752.860458][T30401] bridge_slave_0: entered promiscuous mode [ 752.904141][T26000] Bluetooth: hci0: command tx timeout [ 752.913159][T26000] Bluetooth: hci2: command tx timeout [ 752.942346][ T30] audit: type=1400 audit(1745526319.393:1750): avc: denied { create } for pid=30515 comm="syz.8.10225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 753.023325][ T30] audit: type=1400 audit(1745526319.403:1751): avc: denied { write } for pid=30515 comm="syz.8.10225" path="socket:[127640]" dev="sockfs" ino=127640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 753.079076][T30401] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.089440][T30401] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.098232][T30401] bridge_slave_1: entered allmulticast mode [ 753.108196][T30401] bridge_slave_1: entered promiscuous mode [ 753.252048][T30421] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.280098][T30421] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.295134][T30421] bridge_slave_0: entered allmulticast mode [ 753.309323][T30421] bridge_slave_0: entered promiscuous mode [ 753.420041][T30401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.432593][T30421] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.442586][T30421] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.451877][T30421] bridge_slave_1: entered allmulticast mode [ 753.476307][T30421] bridge_slave_1: entered promiscuous mode [ 753.527253][T30401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.640909][T30421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.682045][T30421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.834712][T30401] team0: Port device team_slave_0 added [ 753.850300][T30421] team0: Port device team_slave_0 added [ 753.880854][T30421] team0: Port device team_slave_1 added [ 753.897662][T30401] team0: Port device team_slave_1 added [ 753.950063][ T30] audit: type=1400 audit(1745526320.383:1752): avc: denied { append } for pid=30531 comm="syz.8.10230" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.982335][ T30] audit: type=1400 audit(1745526320.393:1753): avc: denied { map } for pid=30531 comm="syz.8.10230" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 754.043974][ T30] audit: type=1400 audit(1745526320.393:1754): avc: denied { execute } for pid=30531 comm="syz.8.10230" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 754.095916][T30401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.104926][T30401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.158657][T30401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.176427][T30401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.184779][T30401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.219583][T30401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.240456][T30421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.249363][T30421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.285468][T30421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.431949][T30421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.452558][T30421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.539072][T30421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.596011][T30401] hsr_slave_0: entered promiscuous mode [ 754.604086][T30401] hsr_slave_1: entered promiscuous mode [ 754.844373][T30421] hsr_slave_0: entered promiscuous mode [ 754.851966][T30421] hsr_slave_1: entered promiscuous mode [ 754.866916][T30421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.876058][T30421] Cannot create hsr debugfs directory [ 754.892925][ T30] audit: type=1400 audit(1745526321.343:1755): avc: denied { read } for pid=30561 comm="syz.8.10243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 754.989762][T26000] Bluetooth: hci2: command tx timeout [ 755.028817][ T30] audit: type=1400 audit(1745526321.473:1756): avc: denied { bind } for pid=30566 comm="syz.8.10244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 755.055456][ T30] audit: type=1400 audit(1745526321.513:1757): avc: denied { connect } for pid=30566 comm="syz.8.10244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 755.879736][T30421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.908570][ T30] audit: type=1400 audit(1745526322.363:1758): avc: denied { ioctl } for pid=30585 comm="syz.1.10253" path="socket:[127937]" dev="sockfs" ino=127937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 755.948261][T30401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.011297][T30421] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.036517][T30401] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.054418][T26761] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.061913][T26761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.096693][T26761] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.104224][T26761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.118312][T26761] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.125828][T26761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.167069][T26761] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.174602][T26761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.283643][T24655] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 756.457070][T24655] usb 2-1: Using ep0 maxpacket: 16 [ 756.480543][T24655] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.508887][T24655] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.543609][T24655] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.561120][T24655] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 756.576592][T30401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.584473][T24655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.612460][T24655] usb 2-1: config 0 descriptor?? [ 756.652810][T30421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.874462][ T5878] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 757.045287][ T5878] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 757.057825][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.061025][T24655] hid (null): unknown global tag 0xe [ 757.071843][ T5878] usb 9-1: config 0 descriptor?? [ 757.083666][ T5878] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 757.116245][T24655] cougar 0003:060B:500A.0098: unexpected long global item [ 757.125809][T24655] cougar 0003:060B:500A.0098: parse failed [ 757.132291][T24655] cougar 0003:060B:500A.0098: probe with driver cougar failed with error -22 [ 757.135107][T30401] veth0_vlan: entered promiscuous mode [ 757.164425][ T5907] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 757.188126][T30401] veth1_vlan: entered promiscuous mode [ 757.283736][T30421] veth0_vlan: entered promiscuous mode [ 757.297384][ T5878] gp8psk: usb in 128 operation failed. [ 757.314603][T30401] veth0_macvtap: entered promiscuous mode [ 757.321690][ T5878] gp8psk: usb in 137 operation failed. [ 757.332573][T30421] veth1_vlan: entered promiscuous mode [ 757.339417][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 757.339949][ T5876] usb 2-1: USB disconnect, device number 48 [ 757.359651][ T5878] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 757.369745][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 757.379264][T30401] veth1_macvtap: entered promiscuous mode [ 757.386863][ T5878] usb 9-1: media controller created [ 757.393476][ T5907] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 757.427160][ T5907] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 757.453515][ T5907] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 757.460174][T30421] veth0_macvtap: entered promiscuous mode [ 757.466925][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 757.477423][ T5907] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 757.502451][T30401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.513964][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 757.532151][ T5907] usb 5-1: config 0 has no interface number 0 [ 757.539742][ T5878] gp8psk_fe: Frontend attached [ 757.548000][T30401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.559250][ T5878] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 757.559416][T30401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.567873][ T5907] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 757.567904][ T5907] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 757.567939][ T5907] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 757.567966][ T5907] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.568005][ T5907] usb 5-1: config 0 interface 125 has no altsetting 0 [ 757.568020][ T5907] usb 5-1: config 0 interface 125 has no altsetting 2 [ 757.574164][ T5907] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 757.612997][T30401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.631293][ T5878] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 757.644816][T30401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.671615][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.678792][T30401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.702294][ T5907] usb 5-1: Product: syz [ 757.702330][ T5907] usb 5-1: Manufacturer: syz [ 757.702346][ T5907] usb 5-1: SerialNumber: syz [ 757.705128][ T5907] usb 5-1: config 0 descriptor?? [ 757.719311][T30401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.727094][ T5907] usb 5-1: selecting invalid altsetting 2 [ 757.738757][ T5878] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 757.741644][T30421] veth1_macvtap: entered promiscuous mode [ 757.750959][ T5878] gp8psk: found Genpix USB device pID = 203 (hex) [ 757.775221][T30401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.786831][T30401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.800046][T30401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.811483][T30401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.822394][T30401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.835030][T30401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.848937][T30401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.907170][T30421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.919001][T30421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.929617][T30421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.973293][T30421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.984170][T30421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.995628][T30421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.007293][T30421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.040491][T24655] usb 9-1: USB disconnect, device number 69 [ 758.049245][T30421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.082658][T30421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.091047][ T30] audit: type=1400 audit(1745526324.533:1759): avc: denied { getopt } for pid=30617 comm="syz.1.10258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 758.151895][T30421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.165246][T30421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.191848][T30421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.206840][T30421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.220096][T24655] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 758.226442][T30421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.243496][T30421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.254866][T30421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.267466][T30421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.283104][T30421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.305183][ T30] audit: type=1326 audit(1745526324.763:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.331758][ T30] audit: type=1326 audit(1745526324.763:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.359912][ T30] audit: type=1326 audit(1745526324.763:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.397229][ T30] audit: type=1326 audit(1745526324.763:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.463103][ T30] audit: type=1326 audit(1745526324.763:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.477797][T26778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.509819][ T30] audit: type=1326 audit(1745526324.763:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.546590][ T30] audit: type=1326 audit(1745526324.763:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.553020][T26778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.578238][ T30] audit: type=1326 audit(1745526324.763:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.666610][ T30] audit: type=1326 audit(1745526324.763:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30619 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x7fc00000 [ 758.670671][T26778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.753690][T26778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.762307][T26755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.792901][T26755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.898371][T26767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.932514][T26767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.936145][ T5933] usb 5-1: USB disconnect, device number 116 [ 759.027099][T30626] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 759.366245][T26767] bridge_slave_1: left allmulticast mode [ 759.374642][T26767] bridge_slave_1: left promiscuous mode [ 759.407204][T26767] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.709625][T26767] bridge_slave_0: left allmulticast mode [ 759.724064][T26767] bridge_slave_0: left promiscuous mode [ 759.730160][T26767] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.300442][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 760.323398][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 760.337135][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 760.346833][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 760.368260][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 760.475922][T26767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.490372][T26767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.502223][T26767] bond0 (unregistering): Released all slaves [ 760.549234][T30639] lo speed is unknown, defaulting to 1000 [ 761.097989][T26767] hsr_slave_0: left promiscuous mode [ 761.107003][T26767] hsr_slave_1: left promiscuous mode [ 761.113520][T26767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.121621][T26767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.135265][T26767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.144222][T26767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.169515][T26767] veth1_macvtap: left promiscuous mode [ 761.175388][T26767] veth0_macvtap: left promiscuous mode [ 761.181280][T26767] veth1_vlan: left promiscuous mode [ 761.187546][T26767] veth0_vlan: left promiscuous mode [ 762.001512][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 762.027407][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 762.037528][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 762.057099][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 762.069583][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.505709][T26000] Bluetooth: hci0: command tx timeout [ 762.620730][T26767] team0 (unregistering): Port device team_slave_1 removed [ 762.688832][T26767] team0 (unregistering): Port device team_slave_0 removed [ 763.552352][T30657] lo speed is unknown, defaulting to 1000 [ 763.650867][T30639] chnl_net:caif_netlink_parms(): no params data found [ 763.662237][T30678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.123353][T30639] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.147623][T30639] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.157818][T30639] bridge_slave_0: entered allmulticast mode [ 764.169325][T30639] bridge_slave_0: entered promiscuous mode [ 764.193493][T26000] Bluetooth: hci2: command tx timeout [ 764.245718][T30639] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.263952][T30639] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.280638][T30639] bridge_slave_1: entered allmulticast mode [ 764.327520][T30639] bridge_slave_1: entered promiscuous mode [ 764.384778][T30698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.430349][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 764.430379][ T30] audit: type=1400 audit(1745526330.883:1834): avc: denied { bind } for pid=30699 comm="syz.8.10288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.478777][T30639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.539370][T30639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.585145][T26000] Bluetooth: hci0: command tx timeout [ 764.708105][T30639] team0: Port device team_slave_0 added [ 764.735301][T30639] team0: Port device team_slave_1 added [ 764.854162][T30639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.862241][T30639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.890946][T30639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.905695][T30639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.913455][T30639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.941949][T30639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.959978][T26767] bridge_slave_1: left allmulticast mode [ 764.966374][T26767] bridge_slave_1: left promiscuous mode [ 764.972530][T26767] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.984106][T26767] bridge_slave_0: left allmulticast mode [ 764.990268][T26767] bridge_slave_0: left promiscuous mode [ 764.996726][T26767] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.852055][T26767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.868440][T26767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.884815][T26767] bond0 (unregistering): Released all slaves [ 765.976564][ T47] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 766.136913][ T47] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 766.146813][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.153316][ T5933] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 766.155694][ T47] usb 2-1: Product: syz [ 766.168229][ T47] usb 2-1: Manufacturer: syz [ 766.173546][ T47] usb 2-1: SerialNumber: syz [ 766.184861][ T47] usb 2-1: config 0 descriptor?? [ 766.202589][ T47] ch341 2-1:0.0: ch341-uart converter detected [ 766.222702][T30639] hsr_slave_0: entered promiscuous mode [ 766.229766][T30639] hsr_slave_1: entered promiscuous mode [ 766.266593][T26000] Bluetooth: hci2: command tx timeout [ 766.287826][T30657] chnl_net:caif_netlink_parms(): no params data found [ 766.343641][ T5933] usb 9-1: Using ep0 maxpacket: 16 [ 766.367255][ T5933] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 766.382962][ T5933] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.391677][ T5933] usb 9-1: Product: syz [ 766.396298][ T5933] usb 9-1: Manufacturer: syz [ 766.401374][ T5933] usb 9-1: SerialNumber: syz [ 766.418590][ T47] usb 2-1: failed to receive control message: -121 [ 766.425025][ T5933] usb 9-1: config 0 descriptor?? [ 766.428957][ T47] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 766.444822][ T5933] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 766.461316][ T5933] usb 9-1: Detected FT-X [ 766.663416][T26000] Bluetooth: hci0: command tx timeout [ 766.693017][ T5933] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 766.741199][ T47] usb 2-1: USB disconnect, device number 49 [ 766.749393][ T47] ch341 2-1:0.0: device disconnected [ 766.890362][T26767] hsr_slave_0: left promiscuous mode [ 766.900320][T26767] hsr_slave_1: left promiscuous mode [ 766.908155][T26767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.916578][T26767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.928233][T26767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.937215][T26767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.972343][T26767] veth1_macvtap: left promiscuous mode [ 766.978965][T26767] veth0_macvtap: left promiscuous mode [ 766.985238][T26767] veth1_vlan: left promiscuous mode [ 766.990787][T26767] veth0_vlan: left promiscuous mode [ 767.114957][ T5933] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 767.172012][ T30] audit: type=1400 audit(1745526333.633:1835): avc: denied { create } for pid=30739 comm="syz.4.10302" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 767.204617][ T30] audit: type=1400 audit(1745526333.663:1836): avc: denied { mounton } for pid=30739 comm="syz.4.10302" path="/2345/file0" dev="tmpfs" ino=11935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 767.205780][T30740] /dev/nullb0: Can't open blockdev [ 767.358686][ T5878] usb 9-1: USB disconnect, device number 70 [ 767.381346][ T30] audit: type=1400 audit(1745526333.823:1837): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=11935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 767.415672][ T5878] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 767.455364][ T5878] ftdi_sio 9-1:0.0: device disconnected [ 767.477321][ T30] audit: type=1400 audit(1745526333.933:1838): avc: denied { ioctl } for pid=30741 comm="syz.1.10303" path="socket:[129976]" dev="sockfs" ino=129976 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 767.502299][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.896592][ T24] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 767.974498][T26767] team0 (unregistering): Port device team_slave_1 removed [ 768.053043][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 768.061698][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.074138][T26767] team0 (unregistering): Port device team_slave_0 removed [ 768.079191][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 768.098373][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 768.110393][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 768.127022][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.146311][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 768.156117][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 768.165125][ T24] usb 5-1: Manufacturer: syz [ 768.193937][ T24] usb 5-1: config 0 descriptor?? [ 768.288152][ T30] audit: type=1400 audit(1745526334.743:1839): avc: denied { create } for pid=30753 comm="syz.8.10309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 768.331394][ T30] audit: type=1400 audit(1745526334.783:1840): avc: denied { write } for pid=30753 comm="syz.8.10309" path="socket:[130005]" dev="sockfs" ino=130005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 768.362428][T26000] Bluetooth: hci2: command tx timeout [ 768.542941][ T24] rc_core: IR keymap rc-hauppauge not found [ 768.549174][ T24] Registered IR keymap rc-empty [ 768.572160][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.619117][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.655348][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 768.682233][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input121 [ 768.700925][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.723800][ C1] mceusb 5-1:0.0: short-range (0x5a) receiver active [ 768.743173][T26000] Bluetooth: hci0: command tx timeout [ 768.759507][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.783451][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.803002][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.824737][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.843402][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.865759][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.900002][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.927383][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.957202][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.000415][ T24] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 769.010280][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x5a active) [ 769.039284][ T24] usb 5-1: USB disconnect, device number 117 [ 769.222142][T30657] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.231917][T30657] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.240895][T30657] bridge_slave_0: entered allmulticast mode [ 769.249308][T30657] bridge_slave_0: entered promiscuous mode [ 769.267579][T30764] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10313'. [ 769.328822][T30657] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.351433][T30657] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.367856][T30657] bridge_slave_1: entered allmulticast mode [ 769.377159][T30657] bridge_slave_1: entered promiscuous mode [ 769.498778][T30657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.537671][T30657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.772247][ T30] audit: type=1400 audit(1745526336.223:1841): avc: denied { execute } for pid=30774 comm="syz.1.10319" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=130051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 769.798711][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.801291][T30657] team0: Port device team_slave_0 added [ 769.882679][T30657] team0: Port device team_slave_1 added [ 769.912266][ T30] audit: type=1400 audit(1745526336.363:1842): avc: denied { write } for pid=30776 comm="syz.8.10318" path="socket:[130062]" dev="sockfs" ino=130062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 769.999276][ T5878] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 770.013561][T30657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.020833][T30657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.058756][T30657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.119630][T30657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.136661][T30657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.179578][T30657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.216402][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 770.238756][ T5878] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 770.249805][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.267060][ T5878] usb 5-1: config 0 descriptor?? [ 770.337330][T30657] hsr_slave_0: entered promiscuous mode [ 770.345047][T30657] hsr_slave_1: entered promiscuous mode [ 770.352308][T30657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.383015][T30657] Cannot create hsr debugfs directory [ 770.423245][T26000] Bluetooth: hci2: command tx timeout [ 770.495389][ T5878] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 770.514735][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 770.529861][ T5878] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 770.538470][ T5878] usb 5-1: media controller created [ 770.581058][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.619534][T30788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.801008][T30639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.860665][T30639] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.885932][T26778] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.893737][T26778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.952665][T26755] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.960157][T26755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.964928][T30796] input: syz0 as /devices/virtual/input/input122 [ 771.170721][T30657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.196112][T30800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.221083][T30657] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.263661][T26780] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.271137][T26780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.285250][T26780] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.292739][T26780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.318188][ T5878] az6027: usb out operation failed. (-71) [ 771.324472][ T5878] stb0899_attach: Driver disabled by Kconfig [ 771.330782][ T5878] az6027: no front-end attached [ 771.330782][ T5878] [ 771.382805][ T5878] az6027: usb out operation failed. (-71) [ 771.416896][ T5878] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 771.449435][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input123 [ 771.488104][ T5878] dvb-usb: schedule remote query interval to 400 msecs. [ 771.512139][ T5878] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 771.548259][ T5878] usb 5-1: USB disconnect, device number 118 [ 771.597236][T30639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.651965][ T5878] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 771.664009][T24655] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 771.765136][ T5933] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 771.815402][T30657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.854585][T24655] usb 9-1: Using ep0 maxpacket: 32 [ 771.872119][T24655] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 771.903841][T24655] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.931403][T24655] usb 9-1: config 0 descriptor?? [ 771.943171][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 771.969287][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 771.993857][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 772.033963][ T5933] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 772.057351][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 772.091105][ T5933] usb 2-1: Product: syz [ 772.117686][ T5933] usb 2-1: Manufacturer: syz [ 772.122791][ T5933] usb 2-1: SerialNumber: syz [ 772.157919][ T5933] usb 2-1: config 0 descriptor?? [ 772.185816][T24655] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 772.218343][T30639] veth0_vlan: entered promiscuous mode [ 772.226368][T24655] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 772.244664][T24655] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 772.252565][T24655] usb 9-1: media controller created [ 772.297943][T30639] veth1_vlan: entered promiscuous mode [ 772.327109][T24655] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 772.437047][T24655] az6027: usb out operation failed. (-71) [ 772.444515][T30657] veth0_vlan: entered promiscuous mode [ 772.460865][T24655] az6027: usb out operation failed. (-71) [ 772.476194][T24655] stb0899_attach: Driver disabled by Kconfig [ 772.502226][T24655] az6027: no front-end attached [ 772.502226][T24655] [ 772.506750][T30657] veth1_vlan: entered promiscuous mode [ 772.532230][T24655] az6027: usb out operation failed. (-71) [ 772.541834][T30639] veth0_macvtap: entered promiscuous mode [ 772.554256][T24655] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 772.571263][T24655] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input124 [ 772.584957][T30639] veth1_macvtap: entered promiscuous mode [ 772.594959][ T5933] usb 2-1: USB disconnect, device number 50 [ 772.623854][T24655] dvb-usb: schedule remote query interval to 400 msecs. [ 772.631623][T24655] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 772.658364][T30657] veth0_macvtap: entered promiscuous mode [ 772.668091][T24655] usb 9-1: USB disconnect, device number 71 [ 772.689214][T30657] veth1_macvtap: entered promiscuous mode [ 772.710943][T30639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.729787][T30639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.742267][T30639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.754758][T30639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.783264][T30639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.802988][T30639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.835691][T30639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.874960][T24655] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 772.898431][T30639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.910194][T30639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.926908][T30639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.938105][T30639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.949356][T30639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.961675][T30639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.985445][T30639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.027759][T30657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.042244][T30657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.073110][T30657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.084656][T30657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.095784][T30657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.107312][T30657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.118229][T30657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.154034][T30657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.184832][T30657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.233661][T30657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.297755][T30657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.332894][T30657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.355505][T30657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.358821][T30847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.385644][T30657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.417560][T30657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.430961][T30657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.442560][T30657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.456981][T30657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.678972][T26767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.695308][T26767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.763159][ T5878] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 773.851113][T26767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.883675][T26767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.924621][T29304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.952438][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 773.971895][T29304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.996426][ T5878] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 774.024921][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.059514][ T5878] usb 5-1: Product: syz [ 774.070468][T26767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.082770][ T5878] usb 5-1: Manufacturer: syz [ 774.089648][ T5878] usb 5-1: SerialNumber: syz [ 774.095689][T26767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.113561][ T5878] usb 5-1: config 0 descriptor?? [ 774.113981][T30861] KVM: debugfs: duplicate directory 30861-4 [ 774.122197][ T5878] gspca_main: sq930x-2.14.0 probing 2770:930c [ 774.300449][T29304] bridge_slave_1: left allmulticast mode [ 774.324925][T29304] bridge_slave_1: left promiscuous mode [ 774.331101][T29304] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.365525][T29304] bridge_slave_0: left allmulticast mode [ 774.371501][T29304] bridge_slave_0: left promiscuous mode [ 774.390583][T29304] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.042264][T29304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.054867][T29304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.069235][T29304] bond0 (unregistering): Released all slaves [ 775.225395][ T5878] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 775.243321][ T5878] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 775.313312][ T5878] usb 5-1: USB disconnect, device number 119 [ 775.569118][T30867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10351'. [ 775.811846][T29304] hsr_slave_0: left promiscuous mode [ 775.824883][T29304] hsr_slave_1: left promiscuous mode [ 775.832094][T29304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.840417][T29304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.850981][T29304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.859915][T29304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.892096][T29304] veth1_macvtap: left promiscuous mode [ 775.898825][T29304] veth0_macvtap: left promiscuous mode [ 775.905607][T29304] veth1_vlan: left promiscuous mode [ 775.913105][T29304] veth0_vlan: left promiscuous mode [ 775.932568][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 775.948362][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 775.961431][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 775.978513][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 775.989426][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 776.692060][T29304] team0 (unregistering): Port device team_slave_1 removed [ 776.762848][T29304] team0 (unregistering): Port device team_slave_0 removed [ 777.486390][ T5933] kernel write not supported for file /5073/coredump_filter (pid: 5933 comm: kworker/0:8) [ 777.657928][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 777.692895][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 777.717398][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 777.758258][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 777.769304][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 778.030541][T26000] Bluetooth: hci0: command tx timeout [ 778.248274][ T30] audit: type=1400 audit(1745526344.703:1843): avc: denied { ioctl } for pid=30892 comm="syz.4.10359" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 778.250947][T30885] lo speed is unknown, defaulting to 1000 [ 778.443707][ T30] audit: type=1400 audit(1745526344.893:1844): avc: denied { setopt } for pid=30896 comm="syz.4.10362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 778.811714][T29304] bridge_slave_1: left allmulticast mode [ 778.821627][T29304] bridge_slave_1: left promiscuous mode [ 778.835984][T30908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.843501][T29304] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.877506][T29304] bridge_slave_0: left allmulticast mode [ 778.891969][T29304] bridge_slave_0: left promiscuous mode [ 778.904013][T29304] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.152936][ T5878] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 779.213433][T30916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.372944][ T5878] usb 9-1: Using ep0 maxpacket: 16 [ 779.397686][ T5878] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 779.426912][ T5878] usb 9-1: config 0 has no interface number 0 [ 779.443407][ T5878] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 779.485434][ T5878] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 779.512202][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.520706][ T5878] usb 9-1: Product: syz [ 779.525219][ T5878] usb 9-1: Manufacturer: syz [ 779.530023][ T5878] usb 9-1: SerialNumber: syz [ 779.537980][ T5878] usb 9-1: config 0 descriptor?? [ 779.730958][T29304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.744396][T29304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.754528][T24655] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 779.777358][T29304] bond0 (unregistering): Released all slaves [ 779.803149][T30868] lo speed is unknown, defaulting to 1000 [ 779.863318][T26000] Bluetooth: hci2: command tx timeout [ 779.928802][T24655] usb 2-1: Using ep0 maxpacket: 32 [ 779.937307][T24655] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 779.947168][T24655] usb 2-1: config 0 has no interface number 0 [ 779.961487][T24655] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 779.974236][T24655] usb 2-1: config 0 interface 85 has no altsetting 0 [ 779.985999][T24655] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 779.996388][T24655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.005917][T24655] usb 2-1: Product: syz [ 780.010677][T24655] usb 2-1: Manufacturer: syz [ 780.015876][T24655] usb 2-1: SerialNumber: syz [ 780.024673][T24655] usb 2-1: config 0 descriptor?? [ 780.103557][T26000] Bluetooth: hci0: command tx timeout [ 780.185615][ T5878] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.214/input/input125 [ 780.253305][ T5878] input: failed to attach handler mousedev to device input125, error: -5 [ 780.455256][ T5878] usb 9-1: USB disconnect, device number 72 [ 780.618162][T30885] chnl_net:caif_netlink_parms(): no params data found [ 780.649968][T24655] appletouch 2-1:0.85: Geyser mode initialized. [ 780.693032][T24655] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input126 [ 780.793397][ T24] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 780.839659][T29304] hsr_slave_0: left promiscuous mode [ 780.846200][T29304] hsr_slave_1: left promiscuous mode [ 780.854282][T29304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.862159][T29304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.870823][T29304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.880175][T29304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.899473][ T5878] usb 2-1: USB disconnect, device number 51 [ 780.923842][ T5878] appletouch 2-1:0.85: input: appletouch disconnected [ 780.935652][T29304] veth1_macvtap: left promiscuous mode [ 780.941450][T29304] veth0_macvtap: left promiscuous mode [ 780.956567][T29304] veth1_vlan: left promiscuous mode [ 780.962489][T29304] veth0_vlan: left promiscuous mode [ 780.962990][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 780.975688][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 780.986158][ T24] usb 5-1: config 0 has no interface number 0 [ 780.995178][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 781.006044][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.032774][ T24] usb 5-1: Product: syz [ 781.037797][ T24] usb 5-1: Manufacturer: syz [ 781.042622][ T24] usb 5-1: SerialNumber: syz [ 781.059954][ T24] usb 5-1: config 0 descriptor?? [ 781.078463][ T24] smsc95xx v2.0.0 [ 781.811271][T29304] team0 (unregistering): Port device team_slave_1 removed [ 781.918258][T29304] team0 (unregistering): Port device team_slave_0 removed [ 781.951370][T26000] Bluetooth: hci2: command tx timeout [ 782.125309][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 782.140275][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 782.150902][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 782.171511][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 782.184117][T26000] Bluetooth: hci0: command tx timeout [ 782.201906][ T24] usb 5-1: USB disconnect, device number 120 [ 782.274313][T24655] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 782.460340][T24655] usb 2-1: Using ep0 maxpacket: 32 [ 782.469542][T24655] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 782.479025][T24655] usb 2-1: config 0 has no interface number 0 [ 782.485735][T24655] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.512959][T24655] usb 2-1: config 0 interface 85 has no altsetting 0 [ 782.546132][T24655] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 782.569289][T24655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.578548][T24655] usb 2-1: Product: syz [ 782.583313][T24655] usb 2-1: Manufacturer: syz [ 782.594075][T24655] usb 2-1: SerialNumber: syz [ 782.616382][T24655] usb 2-1: config 0 descriptor?? [ 782.906189][ T30] audit: type=1400 audit(1745526349.363:1845): avc: denied { bind } for pid=30949 comm="syz.4.10381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 782.941816][ T30] audit: type=1400 audit(1745526349.363:1846): avc: denied { name_bind } for pid=30949 comm="syz.4.10381" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 782.968938][ T30] audit: type=1400 audit(1745526349.363:1847): avc: denied { node_bind } for pid=30949 comm="syz.4.10381" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 782.992164][ T30] audit: type=1400 audit(1745526349.363:1848): avc: denied { connect } for pid=30949 comm="syz.4.10381" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 783.019173][ T30] audit: type=1400 audit(1745526349.363:1849): avc: denied { name_connect } for pid=30949 comm="syz.4.10381" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 783.061367][T30885] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.072210][T30885] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.091424][T30885] bridge_slave_0: entered allmulticast mode [ 783.105828][T30885] bridge_slave_0: entered promiscuous mode [ 783.126574][T30885] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.138939][T30885] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.147344][T30885] bridge_slave_1: entered allmulticast mode [ 783.157138][T30885] bridge_slave_1: entered promiscuous mode [ 783.249689][T24655] appletouch 2-1:0.85: Geyser mode initialized. [ 783.280946][T30885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.295660][T24655] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input127 [ 783.311990][T30885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.475865][T30885] team0: Port device team_slave_0 added [ 783.483003][ T24] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 783.486462][ T5933] usb 2-1: USB disconnect, device number 52 [ 783.499862][T30868] chnl_net:caif_netlink_parms(): no params data found [ 783.514122][ T5933] appletouch 2-1:0.85: input: appletouch disconnected [ 783.536647][T30885] team0: Port device team_slave_1 added [ 783.611048][T30885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.619222][T30885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.651684][T30885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.667833][T30885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.680780][T30885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.712616][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 783.720948][T30885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.744302][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 783.769976][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 783.800938][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 783.814840][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.828092][ T24] usb 9-1: Product: syz [ 783.832495][ T24] usb 9-1: Manufacturer: syz [ 783.839286][ T24] usb 9-1: SerialNumber: syz [ 783.849538][ T24] usb 9-1: config 0 descriptor?? [ 783.879788][ T24] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 783.890765][ T24] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 783.957942][T30885] hsr_slave_0: entered promiscuous mode [ 783.967435][T30885] hsr_slave_1: entered promiscuous mode [ 784.023114][T26000] Bluetooth: hci2: command tx timeout [ 784.121744][T30868] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.139940][T30868] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.149968][T30868] bridge_slave_0: entered allmulticast mode [ 784.159551][T30868] bridge_slave_0: entered promiscuous mode [ 784.219752][T30868] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.249800][T30868] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.258814][T30868] bridge_slave_1: entered allmulticast mode [ 784.269471][T30868] bridge_slave_1: entered promiscuous mode [ 784.274107][T26000] Bluetooth: hci0: command tx timeout [ 784.327156][T26767] Bluetooth: hci5: Frame reassembly failed (-84) [ 784.369379][T30868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.374837][ T5878] kernel read not supported for file /adsp1 (pid: 5878 comm: kworker/1:4) [ 784.417975][T30868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.505337][ T24] em28xx 9-1:0.0: unknown em28xx chip ID (61) [ 784.522514][T30868] team0: Port device team_slave_0 added [ 784.585098][T30868] team0: Port device team_slave_1 added [ 784.627255][ T5933] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5933 comm: kworker/0:8) [ 784.707218][T30868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.716504][ T24] em28xx 9-1:0.0: Config register raw data: 0x3d [ 784.726001][T30868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.754138][ T24] em28xx 9-1:0.0: I2S Audio (5 sample rate(s)) [ 784.761084][ T24] em28xx 9-1:0.0: No AC97 audio processor [ 784.769348][T30868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.788437][T30868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.796739][T30868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.828893][T30868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.917315][T30868] hsr_slave_0: entered promiscuous mode [ 784.927211][ T24] usb 9-1: USB disconnect, device number 73 [ 784.949824][T30868] hsr_slave_1: entered promiscuous mode [ 784.963946][T30868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.971881][T30868] Cannot create hsr debugfs directory [ 785.259683][T30885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.318697][T30868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.331965][T30885] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.357337][T29304] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.364784][T29304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.390066][T26761] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.397567][T26761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.420445][T30868] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.441050][T26761] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.448568][T26761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.476316][T26761] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.483826][T26761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.824224][ T24] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 785.876409][T30885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.904596][T30868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.999652][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.020820][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.040232][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 786.059289][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 786.090119][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.113346][ T5824] Bluetooth: hci2: command tx timeout [ 786.137677][ T24] usb 9-1: config 0 descriptor?? [ 786.338005][T30868] veth0_vlan: entered promiscuous mode [ 786.343976][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 786.345469][T26000] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 786.400104][T30868] veth1_vlan: entered promiscuous mode [ 786.441714][T30885] veth0_vlan: entered promiscuous mode [ 786.458036][T30885] veth1_vlan: entered promiscuous mode [ 786.501032][T30868] veth0_macvtap: entered promiscuous mode [ 786.527725][T30868] veth1_macvtap: entered promiscuous mode [ 786.539473][T30885] veth0_macvtap: entered promiscuous mode [ 786.560825][T30885] veth1_macvtap: entered promiscuous mode [ 786.578719][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.598088][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.609363][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.622240][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.624828][ T24] plantronics 0003:047F:FFFF.0099: unknown main item tag 0x0 [ 786.633476][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.646978][ T24] plantronics 0003:047F:FFFF.0099: No inputs registered, leaving [ 786.652777][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.675389][T30868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.687059][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.698955][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.699200][ T24] plantronics 0003:047F:FFFF.0099: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 786.716348][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.734929][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.746145][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.757501][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.770421][T30868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.799739][T30885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.812348][T30885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.823158][T26000] Bluetooth: hci6: command 0xfc11 tx timeout [ 786.823789][ T55] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 786.830876][T30885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.877198][T30885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.888418][T30885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.903912][T30885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.945023][T30885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.973022][T30885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.018619][T30885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.119692][T30885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.135348][T30885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.152023][T30885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.168447][T30885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.178989][T30885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.194937][T30885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.209049][T30885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.222499][T30885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.239877][T30885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.562718][T26787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.582368][T26787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.607475][T26761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.628687][T26761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.741163][T26767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.771014][T26767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.781791][T26761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.815354][T26761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.289860][ T30] audit: type=1326 audit(1745526354.743:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31010 comm="syz.1.10395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb08d8e969 code=0x0 [ 788.316473][T29304] bridge_slave_1: left allmulticast mode [ 788.322373][T29304] bridge_slave_1: left promiscuous mode [ 788.363340][T29304] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.403977][T29304] bridge_slave_0: left allmulticast mode [ 788.411606][T29304] bridge_slave_0: left promiscuous mode [ 788.442014][T29304] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.825060][ T5933] usb 9-1: USB disconnect, device number 74 [ 789.261369][T26000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 789.296571][T26000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 789.308954][T26000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 789.317937][T26000] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 789.342534][T26000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 789.396356][T29304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.411950][T29304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.424956][T29304] bond0 (unregistering): Released all slaves [ 789.590533][T31022] lo speed is unknown, defaulting to 1000 [ 790.370035][T29304] hsr_slave_0: left promiscuous mode [ 790.409431][T29304] hsr_slave_1: left promiscuous mode [ 790.451004][T29304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.480444][T29304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.507285][T29304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.523707][T31044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.539181][T29304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.609758][T29304] veth1_macvtap: left promiscuous mode [ 790.630671][T29304] veth0_macvtap: left promiscuous mode [ 790.646823][T29304] veth1_vlan: left promiscuous mode [ 790.652467][T29304] veth0_vlan: left promiscuous mode [ 790.682344][T26000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 790.699675][T26000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 790.711493][T26000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 790.719192][ T5933] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 790.730999][T26000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 790.740556][T26000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 790.863758][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 790.882075][ T5933] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 790.893421][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.902300][ T5933] usb 5-1: Product: syz [ 790.907546][ T5933] usb 5-1: Manufacturer: syz [ 790.912686][ T5933] usb 5-1: SerialNumber: syz [ 790.921857][ T5933] usb 5-1: config 0 descriptor?? [ 790.934167][ T5933] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 791.358254][ T5933] gspca_ov534_9: reg_w failed -71 [ 791.383290][T26000] Bluetooth: hci0: command tx timeout [ 791.408848][T31054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31054 comm=syz.1.10408 [ 791.574036][T29304] team0 (unregistering): Port device team_slave_1 removed [ 791.583597][T31056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10409'. [ 791.642102][T29304] team0 (unregistering): Port device team_slave_0 removed [ 791.803619][ T5933] gspca_ov534_9: Unknown sensor 0000 [ 791.803767][ T5933] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 791.821509][ T5933] usb 5-1: USB disconnect, device number 121 [ 792.141354][T31061] netlink: 'syz.4.10411': attribute type 4 has an invalid length. [ 792.432469][T31046] batadv_slave_1: entered promiscuous mode [ 792.466476][T31050] batadv_slave_1: left promiscuous mode [ 792.590894][T31047] lo speed is unknown, defaulting to 1000 [ 792.832984][T26000] Bluetooth: hci2: command tx timeout [ 792.941049][T31022] chnl_net:caif_netlink_parms(): no params data found [ 793.300388][ T30] audit: type=1400 audit(1745526359.713:1851): avc: denied { mount } for pid=31083 comm="syz.8.10421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 793.415001][T31090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.449285][ T30] audit: type=1400 audit(1745526359.783:1852): avc: denied { search } for pid=31083 comm="syz.8.10421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 793.473419][T26000] Bluetooth: hci0: command tx timeout [ 793.590341][ T30] audit: type=1400 audit(1745526359.783:1853): avc: denied { remount } for pid=31083 comm="syz.8.10421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 793.622490][ T30] audit: type=1400 audit(1745526359.793:1854): avc: denied { write } for pid=31082 comm="syz.4.10420" name="file0" dev="tmpfs" ino=12148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 793.647603][ T30] audit: type=1400 audit(1745526359.793:1855): avc: denied { open } for pid=31082 comm="syz.4.10420" path="/2387/file0" dev="tmpfs" ino=12148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 793.673012][ T30] audit: type=1400 audit(1745526359.803:1856): avc: denied { ioctl } for pid=31082 comm="syz.4.10420" path="/2387/file0" dev="tmpfs" ino=12148 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 793.700482][ T30] audit: type=1400 audit(1745526359.953:1857): avc: denied { unmount } for pid=13747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 793.725684][ T30] audit: type=1400 audit(1745526360.073:1858): avc: denied { ioctl } for pid=31098 comm="syz.8.10426" path="socket:[133250]" dev="sockfs" ino=133250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 793.849247][T31022] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.860274][T31022] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.871493][T31022] bridge_slave_0: entered allmulticast mode [ 793.910458][T31022] bridge_slave_0: entered promiscuous mode [ 793.940067][T31022] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.958683][T31022] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.968768][T31022] bridge_slave_1: entered allmulticast mode [ 793.979584][T31022] bridge_slave_1: entered promiscuous mode [ 794.073451][T29304] bridge_slave_1: left allmulticast mode [ 794.077109][T24655] kernel write not supported for file /snd/seq (pid: 24655 comm: kworker/0:3) [ 794.079415][T29304] bridge_slave_1: left promiscuous mode [ 794.096929][T29304] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.108914][T29304] bridge_slave_0: left allmulticast mode [ 794.119897][T29304] bridge_slave_0: left promiscuous mode [ 794.127313][T29304] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.167756][T31114] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10433'. [ 794.256630][T31116] loop8: detected capacity change from 0 to 7 [ 794.273526][T31116] Dev loop8: unable to read RDB block 7 [ 794.293065][T31116] loop8: unable to read partition table [ 794.299544][T31116] loop8: partition table beyond EOD, truncated [ 794.309439][T31116] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 794.410772][T31119] Dev loop8: unable to read RDB block 7 [ 794.433035][T31119] loop8: unable to read partition table [ 794.439573][T31119] loop8: partition table beyond EOD, truncated [ 794.901751][T29304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.911525][T26000] Bluetooth: hci2: command tx timeout [ 794.920718][T29304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.936046][T29304] bond0 (unregistering): Released all slaves [ 794.983514][T31022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.082576][T31022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.197627][T31134] [ 795.199998][T31134] ===================================================== [ 795.206939][T31134] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 795.214382][T31134] 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 Not tainted [ 795.221488][T31134] ----------------------------------------------------- [ 795.228428][T31134] syz.8.10441/31134 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 795.234989][ T30] audit: type=1400 audit(1745526361.653:1859): avc: denied { bind } for pid=31135 comm="syz.4.10440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 795.236232][T31134] ffff88807d943600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 795.236286][T31134] [ 795.236286][T31134] and this task is already holding: [ 795.236292][T31134] ffff88802aae9028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 795.236336][T31134] which would create a new lock dependency: [ 795.236342][T31134] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 795.236376][T31134] [ 795.236376][T31134] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 795.236384][T31134] (&dev->event_lock#2){..-.}-{3:3} [ 795.236404][T31134] [ 795.236404][T31134] ... which became SOFTIRQ-irq-safe at: [ 795.317693][T31134] lock_acquire+0x179/0x350 [ 795.322277][T31134] _raw_spin_lock_irqsave+0x3a/0x60 [ 795.327548][T31134] input_event+0x70/0xb0 [ 795.331868][T31134] atp_complete_geyser_3_4+0xca9/0x16f0 [ 795.337484][T31134] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 795.342931][T31134] usb_hcd_giveback_urb+0x39b/0x450 [ 795.348199][T31134] dummy_timer+0x180e/0x3a20 [ 795.352864][T31134] __hrtimer_run_queues+0x1ff/0xad0 [ 795.358133][T31134] hrtimer_run_softirq+0x17d/0x350 [ 795.363334][T31134] handle_softirqs+0x216/0x8e0 [ 795.368174][T31134] __irq_exit_rcu+0x109/0x170 [ 795.372925][T31134] irq_exit_rcu+0x9/0x30 [ 795.377243][T31134] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 795.382950][T31134] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 795.389001][T31134] d_alloc+0x0/0x1e0 [ 795.392970][T31134] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 795.399108][T31134] lookup_one_qstr_excl+0x3e/0x120 [ 795.404292][T31134] filename_create+0x1e7/0x4a0 [ 795.409131][T31134] kern_path_create+0x35/0x50 [ 795.413883][T31134] devtmpfs_work_loop+0x118/0x900 [ 795.418982][T31134] devtmpfsd+0x4c/0x50 [ 795.423125][T31134] kthread+0x3c2/0x780 [ 795.427261][T31134] ret_from_fork+0x45/0x80 [ 795.431749][T31134] ret_from_fork_asm+0x1a/0x30 [ 795.436609][T31134] [ 795.436609][T31134] to a SOFTIRQ-irq-unsafe lock: [ 795.443611][T31134] (tasklist_lock){.+.+}-{3:3} [ 795.443634][T31134] [ 795.443634][T31134] ... which became SOFTIRQ-irq-unsafe at: [ 795.456228][T31134] ... [ 795.456234][T31134] lock_acquire+0x179/0x350 [ 795.463369][T31134] _raw_read_lock+0x5f/0x70 [ 795.467947][T31134] __do_wait+0x105/0x890 [ 795.472257][T31134] do_wait+0x21e/0x5a0 [ 795.476396][T31134] kernel_wait+0x9f/0x160 [ 795.480793][T31134] call_usermodehelper_exec_work+0xf1/0x170 [ 795.486761][T31134] process_one_work+0x9cc/0x1b70 [ 795.491770][T31134] worker_thread+0x6c8/0xf10 [ 795.496430][T31134] kthread+0x3c2/0x780 [ 795.500572][T31134] ret_from_fork+0x45/0x80 [ 795.505058][T31134] ret_from_fork_asm+0x1a/0x30 [ 795.509900][T31134] [ 795.509900][T31134] other info that might help us debug this: [ 795.509900][T31134] [ 795.520111][T31134] Chain exists of: [ 795.520111][T31134] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 795.520111][T31134] [ 795.533654][T31134] Possible interrupt unsafe locking scenario: [ 795.533654][T31134] [ 795.541952][T31134] CPU0 CPU1 [ 795.547301][T31134] ---- ---- [ 795.552648][T31134] lock(tasklist_lock); [ 795.556873][T31134] local_irq_disable(); [ 795.563610][T31134] lock(&dev->event_lock#2); [ 795.570808][T31134] lock(&client->buffer_lock); [ 795.578160][T31134] [ 795.581596][T31134] lock(&dev->event_lock#2); [ 795.586443][T31134] [ 795.586443][T31134] *** DEADLOCK *** [ 795.586443][T31134] [ 795.594567][T31134] 7 locks held by syz.8.10441/31134: [ 795.599827][T31134] #0: ffff888146ffd118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 795.608957][T31134] #1: ffff8881472a5230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 795.619044][T31134] #2: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 795.628692][T31134] #3: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 795.638247][T31134] #4: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 795.647373][T31134] #5: ffff88802aae9028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 795.657640][T31134] #6: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 795.666677][T31134] [ 795.666677][T31134] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 795.677063][T31134] -> (&dev->event_lock#2){..-.}-{3:3} { [ 795.682697][T31134] IN-SOFTIRQ-W at: [ 795.686749][T31134] lock_acquire+0x179/0x350 [ 795.693063][T31134] _raw_spin_lock_irqsave+0x3a/0x60 [ 795.700070][T31134] input_event+0x70/0xb0 [ 795.706134][T31134] atp_complete_geyser_3_4+0xca9/0x16f0 [ 795.713488][T31134] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 795.720673][T31134] usb_hcd_giveback_urb+0x39b/0x450 [ 795.727683][T31134] dummy_timer+0x180e/0x3a20 [ 795.734086][T31134] __hrtimer_run_queues+0x1ff/0xad0 [ 795.741096][T31134] hrtimer_run_softirq+0x17d/0x350 [ 795.748017][T31134] handle_softirqs+0x216/0x8e0 [ 795.754593][T31134] __irq_exit_rcu+0x109/0x170 [ 795.761082][T31134] irq_exit_rcu+0x9/0x30 [ 795.767133][T31134] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 795.774593][T31134] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 795.782403][T31134] d_alloc+0x0/0x1e0 [ 795.788116][T31134] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 795.795995][T31134] lookup_one_qstr_excl+0x3e/0x120 [ 795.802916][T31134] filename_create+0x1e7/0x4a0 [ 795.809494][T31134] kern_path_create+0x35/0x50 [ 795.815985][T31134] devtmpfs_work_loop+0x118/0x900 [ 795.822823][T31134] devtmpfsd+0x4c/0x50 [ 795.828698][T31134] kthread+0x3c2/0x780 [ 795.834581][T31134] ret_from_fork+0x45/0x80 [ 795.840806][T31134] ret_from_fork_asm+0x1a/0x30 [ 795.847385][T31134] INITIAL USE at: [ 795.851351][T31134] lock_acquire+0x179/0x350 [ 795.857573][T31134] _raw_spin_lock_irqsave+0x3a/0x60 [ 795.864495][T31134] input_inject_event+0x9f/0x390 [ 795.871160][T31134] led_set_brightness+0x214/0x290 [ 795.877910][T31134] kbd_led_trigger_activate+0xcb/0x110 [ 795.885098][T31134] led_trigger_set+0x597/0xc50 [ 795.891589][T31134] led_trigger_set_default+0x1bd/0x2a0 [ 795.898779][T31134] led_classdev_register_ext+0x7b8/0xa10 [ 795.906153][T31134] input_leds_connect+0x552/0x8e0 [ 795.912905][T31134] input_attach_handler.isra.0+0x181/0x260 [ 795.920442][T31134] input_register_device+0xa84/0x1130 [ 795.927538][T31134] atkbd_connect+0x5da/0xa20 [ 795.933849][T31134] serio_driver_probe+0x74/0xb0 [ 795.940423][T31134] really_probe+0x23e/0xa90 [ 795.946652][T31134] __driver_probe_device+0x1de/0x440 [ 795.953661][T31134] driver_probe_device+0x4c/0x1b0 [ 795.960419][T31134] __driver_attach+0x283/0x580 [ 795.966931][T31134] bus_for_each_dev+0x13b/0x1d0 [ 795.973503][T31134] serio_handle_event+0x247/0xa50 [ 795.980252][T31134] process_one_work+0x9cc/0x1b70 [ 795.986912][T31134] worker_thread+0x6c8/0xf10 [ 795.993224][T31134] kthread+0x3c2/0x780 [ 795.999012][T31134] ret_from_fork+0x45/0x80 [ 796.005148][T31134] ret_from_fork_asm+0x1a/0x30 [ 796.011641][T31134] } [ 796.014211][T31134] ... key at: [] __key.7+0x0/0x40 [ 796.021395][T31134] -> (&client->buffer_lock){....}-{3:3} { [ 796.027114][T31134] INITIAL USE at: [ 796.030991][T31134] lock_acquire+0x179/0x350 [ 796.037040][T31134] _raw_spin_lock+0x2e/0x40 [ 796.043102][T31134] evdev_pass_values+0x10e/0x9b0 [ 796.049590][T31134] evdev_events+0x1bb/0x390 [ 796.055643][T31134] input_pass_values+0x6c4/0x890 [ 796.062132][T31134] input_handle_event+0xf00/0x14d0 [ 796.068795][T31134] input_inject_event+0x1cd/0x390 [ 796.075375][T31134] evdev_write+0x457/0x750 [ 796.081346][T31134] vfs_write+0x25c/0x1180 [ 796.087231][T31134] ksys_write+0x205/0x240 [ 796.093103][T31134] do_syscall_64+0xcd/0x260 [ 796.099160][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.106605][T31134] } [ 796.109090][T31134] ... key at: [] __key.1+0x0/0x40 [ 796.116183][T31134] ... acquired at: [ 796.119970][T31134] _raw_spin_lock+0x2e/0x40 [ 796.124633][T31134] evdev_pass_values+0x10e/0x9b0 [ 796.129733][T31134] evdev_events+0x1bb/0x390 [ 796.134396][T31134] input_pass_values+0x6c4/0x890 [ 796.139496][T31134] input_handle_event+0xf00/0x14d0 [ 796.144770][T31134] input_inject_event+0x1cd/0x390 [ 796.149957][T31134] evdev_write+0x457/0x750 [ 796.154538][T31134] vfs_write+0x25c/0x1180 [ 796.159035][T31134] ksys_write+0x205/0x240 [ 796.163538][T31134] do_syscall_64+0xcd/0x260 [ 796.168209][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.174264][T31134] [ 796.176567][T31134] [ 796.176567][T31134] the dependencies between the lock to be acquired [ 796.176575][T31134] and SOFTIRQ-irq-unsafe lock: [ 796.190052][T31134] -> (tasklist_lock){.+.+}-{3:3} { [ 796.195339][T31134] HARDIRQ-ON-R at: [ 796.199475][T31134] lock_acquire+0x179/0x350 [ 796.205962][T31134] _raw_read_lock+0x5f/0x70 [ 796.212449][T31134] __do_wait+0x105/0x890 [ 796.218676][T31134] do_wait+0x21e/0x5a0 [ 796.224729][T31134] kernel_wait+0x9f/0x160 [ 796.231038][T31134] call_usermodehelper_exec_work+0xf1/0x170 [ 796.238918][T31134] process_one_work+0x9cc/0x1b70 [ 796.245841][T31134] worker_thread+0x6c8/0xf10 [ 796.252416][T31134] kthread+0x3c2/0x780 [ 796.258467][T31134] ret_from_fork+0x45/0x80 [ 796.264869][T31134] ret_from_fork_asm+0x1a/0x30 [ 796.271623][T31134] SOFTIRQ-ON-R at: [ 796.275761][T31134] lock_acquire+0x179/0x350 [ 796.282246][T31134] _raw_read_lock+0x5f/0x70 [ 796.288735][T31134] __do_wait+0x105/0x890 [ 796.294960][T31134] do_wait+0x21e/0x5a0 [ 796.301009][T31134] kernel_wait+0x9f/0x160 [ 796.307321][T31134] call_usermodehelper_exec_work+0xf1/0x170 [ 796.315210][T31134] process_one_work+0x9cc/0x1b70 [ 796.322159][T31134] worker_thread+0x6c8/0xf10 [ 796.328738][T31134] kthread+0x3c2/0x780 [ 796.334791][T31134] ret_from_fork+0x45/0x80 [ 796.341191][T31134] ret_from_fork_asm+0x1a/0x30 [ 796.347944][T31134] INITIAL USE at: [ 796.351993][T31134] lock_acquire+0x179/0x350 [ 796.358392][T31134] _raw_write_lock_irq+0x36/0x50 [ 796.365235][T31134] copy_process+0x3f09/0x91a0 [ 796.371816][T31134] kernel_clone+0xfc/0x960 [ 796.378129][T31134] user_mode_thread+0xc7/0x110 [ 796.384796][T31134] rest_init+0x23/0x2b0 [ 796.390841][T31134] start_kernel+0x3e9/0x4d0 [ 796.397246][T31134] x86_64_start_reservations+0x18/0x30 [ 796.404605][T31134] x86_64_start_kernel+0xb0/0xc0 [ 796.411445][T31134] common_startup_64+0x13e/0x148 [ 796.418285][T31134] INITIAL READ USE at: [ 796.422770][T31134] lock_acquire+0x179/0x350 [ 796.429603][T31134] _raw_read_lock+0x5f/0x70 [ 796.436442][T31134] __do_wait+0x105/0x890 [ 796.443014][T31134] do_wait+0x21e/0x5a0 [ 796.449411][T31134] kernel_wait+0x9f/0x160 [ 796.456068][T31134] call_usermodehelper_exec_work+0xf1/0x170 [ 796.464295][T31134] process_one_work+0x9cc/0x1b70 [ 796.471584][T31134] worker_thread+0x6c8/0xf10 [ 796.478510][T31134] kthread+0x3c2/0x780 [ 796.484910][T31134] ret_from_fork+0x45/0x80 [ 796.491657][T31134] ret_from_fork_asm+0x1a/0x30 [ 796.498759][T31134] } [ 796.501429][T31134] ... key at: [] tasklist_lock+0x18/0x40 [ 796.509315][T31134] ... acquired at: [ 796.513274][T31134] _raw_read_lock+0x5f/0x70 [ 796.517943][T31134] send_sigurg+0xed/0xc80 [ 796.522433][T31134] sk_send_sigurg+0x76/0x360 [ 796.527183][T31134] unix_stream_sendmsg+0xe77/0x1160 [ 796.532545][T31134] ____sys_sendmsg+0xa95/0xc70 [ 796.537472][T31134] ___sys_sendmsg+0x134/0x1d0 [ 796.542309][T31134] __sys_sendmsg+0x16d/0x220 [ 796.547057][T31134] do_syscall_64+0xcd/0x260 [ 796.551722][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.557775][T31134] [ 796.560084][T31134] -> (&f_owner->lock){....}-{3:3} { [ 796.565374][T31134] INITIAL USE at: [ 796.569340][T31134] lock_acquire+0x179/0x350 [ 796.575566][T31134] _raw_write_lock_irq+0x36/0x50 [ 796.582230][T31134] __f_setown+0x61/0x3c0 [ 796.588201][T31134] do_fcntl+0x1096/0x1590 [ 796.594256][T31134] __x64_sys_fcntl+0x170/0x200 [ 796.600742][T31134] do_syscall_64+0xcd/0x260 [ 796.606973][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.614591][T31134] INITIAL READ USE at: [ 796.619006][T31134] lock_acquire+0x179/0x350 [ 796.625665][T31134] _raw_read_lock_irq+0x67/0x80 [ 796.632696][T31134] do_fcntl+0x4e2/0x1590 [ 796.639099][T31134] __x64_sys_fcntl+0x170/0x200 [ 796.646022][T31134] do_syscall_64+0xcd/0x260 [ 796.652687][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.660756][T31134] } [ 796.663325][T31134] ... key at: [] __key.1+0x0/0x40 [ 796.670509][T31134] ... acquired at: [ 796.674382][T31134] _raw_read_lock_irqsave+0x74/0x90 [ 796.679744][T31134] send_sigio+0x31/0x3e0 [ 796.684146][T31134] kill_fasync+0x214/0x510 [ 796.688726][T31134] lease_break_callback+0x23/0x30 [ 796.693925][T31134] __break_lease+0x671/0x1810 [ 796.698762][T31134] do_dentry_open+0x6e1/0x1c10 [ 796.703681][T31134] vfs_open+0x82/0x3f0 [ 796.707909][T31134] path_openat+0x1e5e/0x2d40 [ 796.712655][T31134] do_filp_open+0x20b/0x470 [ 796.717310][T31134] do_sys_openat2+0x11b/0x1d0 [ 796.722145][T31134] __x64_sys_openat+0x174/0x210 [ 796.727159][T31134] do_syscall_64+0xcd/0x260 [ 796.731828][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.737890][T31134] [ 796.740206][T31134] -> (&new->fa_lock){....}-{3:3} { [ 796.745315][T31134] INITIAL USE at: [ 796.749192][T31134] lock_acquire+0x179/0x350 [ 796.755244][T31134] _raw_write_lock_irq+0x36/0x50 [ 796.761731][T31134] fasync_remove_entry+0xb2/0x1e0 [ 796.768324][T31134] fasync_helper+0xaf/0xd0 [ 796.774291][T31134] lease_modify+0x232/0x500 [ 796.780362][T31134] locks_remove_file+0x29e/0x5b0 [ 796.786855][T31134] __fput+0x351/0xb70 [ 796.792402][T31134] task_work_run+0x14d/0x240 [ 796.798561][T31134] syscall_exit_to_user_mode+0x27b/0x2a0 [ 796.805769][T31134] do_syscall_64+0xda/0x260 [ 796.811836][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.819280][T31134] INITIAL READ USE at: [ 796.823592][T31134] lock_acquire+0x179/0x350 [ 796.830092][T31134] _raw_read_lock_irqsave+0x74/0x90 [ 796.837279][T31134] kill_fasync+0x138/0x510 [ 796.843680][T31134] sock_wake_async+0x132/0x160 [ 796.850432][T31134] unix_shutdown+0x4be/0xa50 [ 796.857010][T31134] __sys_shutdown+0x113/0x1a0 [ 796.863688][T31134] __x64_sys_shutdown+0x53/0x80 [ 796.870545][T31134] do_syscall_64+0xcd/0x260 [ 796.877049][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.884939][T31134] } [ 796.887445][T31134] ... key at: [] __key.0+0x0/0x40 [ 796.894557][T31134] ... acquired at: [ 796.898348][T31134] lock_acquire+0x179/0x350 [ 796.903010][T31134] _raw_read_lock_irqsave+0x74/0x90 [ 796.908370][T31134] kill_fasync+0x138/0x510 [ 796.912947][T31134] evdev_pass_values+0x619/0x9b0 [ 796.918054][T31134] evdev_events+0x1bb/0x390 [ 796.922720][T31134] input_pass_values+0x6c4/0x890 [ 796.927823][T31134] input_handle_event+0xf00/0x14d0 [ 796.933097][T31134] input_inject_event+0x1cd/0x390 [ 796.938282][T31134] evdev_write+0x457/0x750 [ 796.942860][T31134] vfs_write+0x25c/0x1180 [ 796.947353][T31134] ksys_write+0x205/0x240 [ 796.951837][T31134] do_syscall_64+0xcd/0x260 [ 796.956503][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.962553][T31134] [ 796.964879][T31134] [ 796.964879][T31134] stack backtrace: [ 796.970751][T31134] CPU: 1 UID: 0 PID: 31134 Comm: syz.8.10441 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 796.970772][T31134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 796.970781][T31134] Call Trace: [ 796.970789][T31134] [ 796.970796][T31134] dump_stack_lvl+0x116/0x1f0 [ 796.970818][T31134] check_irq_usage+0x7dc/0x920 [ 796.970844][T31134] ? check_path.constprop.0+0x24/0x50 [ 796.970867][T31134] ? __lock_acquire+0x1189/0x1ba0 [ 796.970880][T31134] __lock_acquire+0x1189/0x1ba0 [ 796.970896][T31134] lock_acquire+0x179/0x350 [ 796.970909][T31134] ? kill_fasync+0x138/0x510 [ 796.970929][T31134] _raw_read_lock_irqsave+0x74/0x90 [ 796.970947][T31134] ? kill_fasync+0x138/0x510 [ 796.970963][T31134] kill_fasync+0x138/0x510 [ 796.970982][T31134] evdev_pass_values+0x619/0x9b0 [ 796.971004][T31134] evdev_events+0x1bb/0x390 [ 796.971025][T31134] input_pass_values+0x6c4/0x890 [ 796.971047][T31134] input_handle_event+0xf00/0x14d0 [ 796.971067][T31134] ? _copy_from_user+0x59/0xd0 [ 796.971087][T31134] input_inject_event+0x1cd/0x390 [ 796.971109][T31134] evdev_write+0x457/0x750 [ 796.971130][T31134] ? __pfx_evdev_write+0x10/0x10 [ 796.971152][T31134] ? bpf_lsm_file_permission+0x9/0x10 [ 796.971173][T31134] ? security_file_permission+0x71/0x210 [ 796.971195][T31134] ? rw_verify_area+0xcf/0x680 [ 796.971216][T31134] vfs_write+0x25c/0x1180 [ 796.971236][T31134] ? __pfx_evdev_write+0x10/0x10 [ 796.971258][T31134] ? __pfx_vfs_write+0x10/0x10 [ 796.971279][T31134] ? find_held_lock+0x2b/0x80 [ 796.971295][T31134] ? __fget_files+0x204/0x3c0 [ 796.971311][T31134] ? __fget_files+0x20e/0x3c0 [ 796.971325][T31134] ksys_write+0x205/0x240 [ 796.971342][T31134] ? __pfx_ksys_write+0x10/0x10 [ 796.971353][T31134] ? rcu_is_watching+0x12/0xc0 [ 796.971374][T31134] do_syscall_64+0xcd/0x260 [ 796.971393][T31134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.971408][T31134] RIP: 0033:0x7f685f78e969 [ 796.971420][T31134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.971434][T31134] RSP: 002b:00007f6860555038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.971448][T31134] RAX: ffffffffffffffda RBX: 00007f685f9b5fa0 RCX: 00007f685f78e969 [ 796.971457][T31134] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 796.971466][T31134] RBP: 00007f685f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 796.971475][T31134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.971483][T31134] R13: 0000000000000000 R14: 00007f685f9b5fa0 R15: 00007ffdffad4808 [ 796.971497][T31134] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 797.272128][ T30] audit: type=1400 audit(1745526363.723:1860): avc: denied { write } for pid=5809 comm="syz-executor" path="pipe:[4637]" dev="pipefs" ino=4637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 797.299924][T26000] Bluetooth: hci0: command tx timeout [ 797.305357][T26000] Bluetooth: hci2: command tx timeout [ 798.034123][ T973] kworker/0:2 (973) used greatest stack depth: 18392 bytes left [ 798.257534][T29304] hsr_slave_0: left promiscuous mode [ 798.284395][T29304] hsr_slave_1: left promiscuous mode [ 798.290718][T29304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.308571][T29304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.319710][T29304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.347806][T29304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.360434][T29304] veth1_macvtap: left promiscuous mode [ 798.366684][T29304] veth0_macvtap: left promiscuous mode [ 798.372389][T29304] veth1_vlan: left promiscuous mode [ 798.377983][T29304] veth0_vlan: left promiscuous mode [ 798.579143][T29304] team0 (unregistering): Port device team_slave_1 removed [ 798.615122][T29304] team0 (unregistering): Port device team_slave_0 removed [ 799.190267][T29304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.269357][T29304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.309711][T29304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.368673][T29304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.638575][T29304] bridge_slave_1: left allmulticast mode [ 799.645167][T29304] bridge_slave_1: left promiscuous mode [ 799.650987][T29304] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.660518][T29304] bridge_slave_0: left allmulticast mode [ 799.667363][T29304] bridge_slave_0: left promiscuous mode [ 799.673682][T29304] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.683842][T29304] bridge_slave_1: left allmulticast mode [ 799.689747][T29304] bridge_slave_1: left promiscuous mode [ 799.696272][T29304] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.705156][T29304] bridge_slave_0: left allmulticast mode [ 799.711052][T29304] bridge_slave_0: left promiscuous mode [ 799.717839][T29304] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.355380][T29304] team0: Port device bond0 removed [ 800.362201][T29304] bond0 (unregistering): Released all slaves [ 800.373089][T29304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.384681][T29304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.395120][T29304] bond0 (unregistering): Released all slaves [ 800.560167][T29304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.571169][T29304] bond_slave_1: left promiscuous mode [ 800.577314][T29304] bond0 (unregistering): Released all slaves [ 800.588344][T29304] bond1 (unregistering): Released all slaves [ 800.708263][T29304] IPVS: stopping backup sync thread 24381 ... [ 801.189263][T29304] hsr_slave_0: left promiscuous mode [ 801.195173][T29304] hsr_slave_1: left promiscuous mode [ 801.202364][T29304] veth1_macvtap: left promiscuous mode [ 801.208362][T29304] veth0_macvtap: left promiscuous mode [ 801.214089][T29304] veth1_vlan: left promiscuous mode [ 801.219477][T29304] veth0_vlan: left promiscuous mode [ 803.155364][T29304] IPVS: stop unused estimator thread 0...