last executing test programs: 5m25.08183577s ago: executing program 4 (id=109): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0xfff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0xfffffffffffffea2}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001a00), 0x1, 0x0) write$nbd(r3, 0x0, 0x0) userfaultfd(0x801) 4m32.802706185s ago: executing program 3 (id=161): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000300)) 3m54.338555316s ago: executing program 3 (id=161): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000300)) 3m37.692611386s ago: executing program 4 (id=109): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0xfff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0xfffffffffffffea2}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001a00), 0x1, 0x0) write$nbd(r3, 0x0, 0x0) userfaultfd(0x801) 3m0.617493434s ago: executing program 3 (id=161): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000300)) 2m44.906205349s ago: executing program 4 (id=109): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0xfff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0xfffffffffffffea2}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001a00), 0x1, 0x0) write$nbd(r3, 0x0, 0x0) userfaultfd(0x801) 2m20.730664871s ago: executing program 3 (id=161): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000300)) 2m9.314549654s ago: executing program 4 (id=109): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0xfff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0xfffffffffffffea2}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001a00), 0x1, 0x0) write$nbd(r3, 0x0, 0x0) userfaultfd(0x801) 1m41.648119359s ago: executing program 3 (id=161): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000300)) 1m28.00824856s ago: executing program 4 (id=109): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0xfff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0xfffffffffffffea2}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001a00), 0x1, 0x0) write$nbd(r3, 0x0, 0x0) userfaultfd(0x801) 1m4.232957412s ago: executing program 1 (id=1053): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/206, 0xce}], 0x4, 0x0, 0x0) 1m0.394363191s ago: executing program 1 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 1m0.177281195s ago: executing program 1 (id=1060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed, 0x902}, 0xe) shutdown(r1, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000006c0)="e000000000000107ff82762f86dd1f1fba2dff09007ad265128380cf53be2749249d7687a200c778", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @empty, 0x5}, 0x1c) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 58.244159492s ago: executing program 1 (id=1063): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r3, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 47.123939826s ago: executing program 3 (id=161): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000300)) 35.01504691s ago: executing program 4 (id=109): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0xfff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0xfffffffffffffea2}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001a00), 0x1, 0x0) write$nbd(r3, 0x0, 0x0) userfaultfd(0x801) 23.973511908s ago: executing program 0 (id=1106): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000440)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000f00)=""/4079, &(0x7f00000000c0)=0xfef) 23.71884255s ago: executing program 0 (id=1107): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x4000000008, 0x0) 23.540883989s ago: executing program 0 (id=1108): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 22.954534817s ago: executing program 0 (id=1109): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) 22.662054807s ago: executing program 0 (id=1110): rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4087, 0xff7}], 0x1, 0x0, 0x0) socket(0x0, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/200, 0xc8}], 0x1, 0x14a, 0x0) 22.302662067s ago: executing program 0 (id=1111): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0x7f, 0x9, 0x20, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x9, 0x4, 0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0xf8, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000002c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, &(0x7f0000000240)={0x0, 0x0, 0x0, @lost_msgs}) 12.351118126s ago: executing program 2 (id=1120): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount$tmpfs(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0xa]}}}}]}) 12.123791101s ago: executing program 2 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xff}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200eef7ffffffb7030000feffffffb704000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) 8.632295602s ago: executing program 2 (id=1123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 4.891848563s ago: executing program 2 (id=1124): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0x541b, 0x0) 4.562450649s ago: executing program 2 (id=1125): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x4}, {0x8, 0x80, 0xc, 0xffff}, {0x7d, 0x80, 0x3, 0x7}]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x4) syz_usbip_server_init(0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04de220c"], 0x7) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000440)=0x82, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r1, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x20}}}, 0x7) r2 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="26b6869a6519a2c59a83a856cdd003f652ca7b0000", 0x15, 0x0) keyctl$describe(0x6, r2, &(0x7f0000000380)=""/46, 0x2e) keyctl$get_persistent(0x16, 0x0, 0x0) personality(0x400000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/rt_cache\x00') 527.001945ms ago: executing program 2 (id=1126): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000340)) r4 = open(&(0x7f00000002c0)='./bus\x00', 0xec902, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2105000000b80000000001000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) write$binfmt_elf64(r5, 0x0, 0xa78) splice(r5, 0x0, r4, 0x0, 0x600, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB, @ANYRES32=r9, @ANYBLOB="593d618a9b939147d49d5818ec743f9af4c7b2f6d265cb29a73416a73f126d09e89d7b5e63bbb959d060603536037de3a9ab9394eb852196ea7ab1311902dd6bec3540882c461525ee2004c53b57f124de02aab044d419773ebd1d8b6fa8b888a574351198b0f981a9a92dc5574adb890ee07f55e60343d778127bb2cb085f6dcf272d7463246e036bc42fc00700"/151], 0x1c}}, 0x0) syz_io_uring_setup(0x6c79, &(0x7f00000006c0)={0x0, 0x0, 0x2}, &(0x7f0000000280), &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x70, @tick=0x9, 0x0, {0x6, 0xff}, 0x2, 0x1, 0x2}) 173.730842ms ago: executing program 1 (id=1064): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x1000}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x31, &(0x7f0000000200)="b2111f170d816685c86c95c19dc6adeb9fe5af8ad7279fe360f2faae3cd7f3a2840ed6f5aad2dd197a177c1eedc9073dc90142a7429cbe7868de45ed3fc33719ca6df71ece5b4ba3c8a918beef2c10a1f8de1a5a6f4fe180e9cb9b21f9982230f575295d4888a9b6921796b2dd92fc9175680b37ba06002c15e6d7c91b8ed900ab006ddfb67869b51a2216114d000000", 0x90) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r1, &(0x7f00000004c0)=[{0x0}], 0x1) 0s ago: executing program 1 (id=1127): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r1, 0x4, r0}, 0x10) kernel console output (not intermixed with test programs): Interface activated: batadv_slave_0 [ 390.677890][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.733915][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.774100][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.810219][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.860009][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.890809][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.922763][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.961968][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.042638][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.096838][ T8017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.148263][ T8017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.183346][ T8017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.245479][ T8017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.588765][ T29] audit: type=1400 audit(1720736068.430:467): avc: denied { name_bind } for pid=8405 comm="syz.1.742" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 391.731086][ T29] audit: type=1400 audit(1720736068.510:468): avc: denied { name_connect } for pid=8405 comm="syz.1.742" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 392.765491][ T8414] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 392.775655][ T8414] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.743'. [ 392.785006][ T8414] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 392.915687][ T2442] bridge_slave_1: left allmulticast mode [ 392.921735][ T2442] bridge_slave_1: left promiscuous mode [ 392.930099][ T2442] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.967387][ T4480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.050566][ T4480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.063045][ T4480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.092692][ T4480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.103145][ T4480] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.110932][ T4480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.150214][ T2442] bridge_slave_0: left allmulticast mode [ 393.155938][ T2442] bridge_slave_0: left promiscuous mode [ 393.200344][ T2442] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.310097][ T4480] Bluetooth: hci1: command tx timeout [ 396.978733][ T2442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.999069][ T2442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.018247][ T2442] bond0 (unregistering): Released all slaves [ 397.087971][ T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.138651][ T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.370053][ T4480] Bluetooth: hci1: command tx timeout [ 397.602648][ T29] audit: type=1400 audit(1720736074.460:469): avc: denied { write } for pid=8459 comm="syz.1.752" path="socket:[26394]" dev="sockfs" ino=26394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 397.637516][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.637547][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.638820][ T29] audit: type=1326 audit(1720736074.490:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b8b975bd9 code=0x0 [ 397.754510][ T8460] Process accounting resumed [ 398.140153][ T2442] hsr_slave_0: left promiscuous mode [ 398.197161][ T2442] hsr_slave_1: left promiscuous mode [ 398.223420][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.249727][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.313399][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.360180][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.508590][ T2442] veth1_macvtap: left promiscuous mode [ 398.514596][ T2442] veth0_macvtap: left promiscuous mode [ 398.520885][ T2442] veth1_vlan: left promiscuous mode [ 398.526457][ T2442] veth0_vlan: left promiscuous mode [ 398.677586][ T8481] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 398.685493][ T8481] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.756'. [ 398.694927][ T8481] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 399.451714][ T4480] Bluetooth: hci1: command tx timeout [ 401.544368][ T4480] Bluetooth: hci1: command tx timeout [ 402.328132][ T8506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.463604][ T2442] team0 (unregistering): Port device team_slave_1 removed [ 403.561930][ T2442] team0 (unregistering): Port device team_slave_0 removed [ 404.976066][ T8527] Process accounting resumed [ 405.743038][ T2442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.805062][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 405.932866][ T2442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.066432][ T2442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.170331][ T2442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.194647][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.203556][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.211058][ T8415] bridge_slave_0: entered allmulticast mode [ 406.218754][ T8415] bridge_slave_0: entered promiscuous mode [ 406.234563][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.242987][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.250989][ T8415] bridge_slave_1: entered allmulticast mode [ 406.261689][ T8415] bridge_slave_1: entered promiscuous mode [ 406.474788][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.544071][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.797657][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.805958][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.997547][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.004994][ T8555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.012913][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.020253][ T8555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.111658][ T8555] bridge0: entered promiscuous mode [ 407.117050][ T8555] bridge0: entered allmulticast mode [ 407.196966][ T8415] team0: Port device team_slave_0 added [ 407.214826][ T8415] team0: Port device team_slave_1 added [ 407.396595][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.440969][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.459491][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.471310][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.481117][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 407.491149][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.736570][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.757852][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.847444][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.968531][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.987003][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.016617][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.112615][ T2442] bridge_slave_1: left allmulticast mode [ 408.118468][ T2442] bridge_slave_1: left promiscuous mode [ 408.130418][ T2442] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.173742][ T2442] bridge_slave_0: left allmulticast mode [ 408.208954][ T2442] bridge_slave_0: left promiscuous mode [ 408.238496][ T2442] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.326210][ T29] audit: type=1400 audit(1720736085.180:471): avc: denied { write } for pid=8586 comm="syz.2.780" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.532750][ T4480] Bluetooth: hci0: command tx timeout [ 409.868847][ T2442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.886869][ T2442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.917807][ T2442] bond0 (unregistering): Released all slaves [ 409.941858][ T29] audit: type=1400 audit(1720736086.780:472): avc: denied { mount } for pid=8608 comm="syz.1.787" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 410.188303][ T29] audit: type=1400 audit(1720736087.030:473): avc: denied { unmount } for pid=5183 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 410.713548][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.721511][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.791508][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.798745][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.807319][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.814565][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.826245][ T8620] 9pnet_fd: Insufficient options for proto=fd [ 410.873144][ T8617] bridge0: entered promiscuous mode [ 410.878442][ T8617] bridge0: entered allmulticast mode [ 411.122104][ T8623] fuse: Unknown parameter '0x0000000000000005' [ 411.257556][ T8625] Process accounting resumed [ 411.434700][ T8415] hsr_slave_0: entered promiscuous mode [ 411.460791][ T8415] hsr_slave_1: entered promiscuous mode [ 411.478460][ T8415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.509940][ T8415] Cannot create hsr debugfs directory [ 411.577556][ T29] audit: type=1400 audit(1720736088.430:474): avc: denied { write } for pid=8629 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 411.612396][ T4480] Bluetooth: hci0: command tx timeout [ 411.947286][ T2442] hsr_slave_0: left promiscuous mode [ 411.969942][ T2442] hsr_slave_1: left promiscuous mode [ 412.001022][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.028203][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.097432][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.125897][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.247382][ T2442] veth1_macvtap: left promiscuous mode [ 412.268491][ T2442] veth0_macvtap: left promiscuous mode [ 412.280834][ T2442] veth1_vlan: left promiscuous mode [ 412.310463][ T2442] veth0_vlan: left promiscuous mode [ 413.697252][ T4480] Bluetooth: hci0: command tx timeout [ 413.837409][ T2442] team0 (unregistering): Port device team_slave_1 removed [ 413.902586][ T2442] team0 (unregistering): Port device team_slave_0 removed [ 415.625126][ T8684] 9pnet_fd: Insufficient options for proto=fd [ 415.778893][ T4480] Bluetooth: hci0: command tx timeout [ 415.904444][ T8684] fuse: Unknown parameter '0x0000000000000008' [ 416.631760][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 417.523382][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.538651][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.552579][ T8573] bridge_slave_0: entered allmulticast mode [ 417.568287][ T8573] bridge_slave_0: entered promiscuous mode [ 417.598455][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.617241][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.632815][ T8573] bridge_slave_1: entered allmulticast mode [ 417.653840][ T8573] bridge_slave_1: entered promiscuous mode [ 417.750312][ T8730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.899469][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.931080][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.162775][ T29] audit: type=1400 audit(1720736095.010:475): avc: denied { ioctl } for pid=8738 comm="syz.1.825" path="socket:[27938]" dev="sockfs" ino=27938 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 418.230066][ T29] audit: type=1400 audit(1720736095.080:476): avc: denied { ioctl } for pid=8739 comm="syz.0.826" path="socket:[26870]" dev="sockfs" ino=26870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.274156][ T8573] team0: Port device team_slave_0 added [ 418.285189][ T8573] team0: Port device team_slave_1 added [ 418.420991][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.428209][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.479973][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.523947][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.542988][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.585346][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.607537][ T8415] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 418.651717][ T8415] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 418.681195][ T8415] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.006818][ T8415] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.268460][ T8573] hsr_slave_0: entered promiscuous mode [ 419.367240][ T8759] input: syz0 as /devices/virtual/input/input10 [ 419.396784][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 419.452063][ T8760] 9pnet_fd: Insufficient options for proto=fd [ 419.625436][ T8573] hsr_slave_1: entered promiscuous mode [ 419.830525][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.861201][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 419.866458][ T8573] Cannot create hsr debugfs directory [ 419.904035][ T9] usb 1-1: config 0 has no interfaces? [ 419.944411][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.993967][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.362157][ T9] usb 1-1: config 0 descriptor?? [ 421.291227][ T5125] usb 1-1: USB disconnect, device number 6 [ 421.743466][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.784158][ T29] audit: type=1400 audit(1720736098.640:477): avc: denied { nnp_transition } for pid=8773 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 421.842705][ T29] audit: type=1400 audit(1720736098.640:478): avc: denied { transition } for pid=8773 comm="syz.2.839" path="/220/file2" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 421.940067][ T29] audit: type=1400 audit(1720736098.640:479): avc: denied { entrypoint } for pid=8773 comm="syz.2.839" path="/220/file2" dev="tmpfs" ino=1172 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 421.955655][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.003184][ T29] audit: type=1400 audit(1720736098.640:480): avc: denied { noatsecure } for pid=8773 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 422.041048][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.048393][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.198120][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.205484][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.785279][ T8786] input: syz0 as /devices/virtual/input/input11 [ 423.783310][ T8791] ptrace attach of "./syz-executor exec"[5183] was attempted by "./syz-executor exec"[8791] [ 423.794028][ T8573] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 423.885873][ T8573] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 423.988608][ T8573] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.056553][ T8573] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.105479][ T8797] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 424.425238][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.433388][ T8802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.786572][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.886220][ T8415] veth0_vlan: entered promiscuous mode [ 424.927274][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.024494][ T8415] veth1_vlan: entered promiscuous mode [ 425.073709][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.081025][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.138326][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.145611][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.372731][ T8816] evm: overlay not supported [ 425.463967][ T8415] veth0_macvtap: entered promiscuous mode [ 425.520957][ T8415] veth1_macvtap: entered promiscuous mode [ 425.661254][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.712767][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.836345][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.914723][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.938180][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.966312][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.990047][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.008608][ T29] audit: type=1400 audit(1720736102.860:481): avc: denied { write } for pid=4518 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.057532][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.109983][ T29] audit: type=1400 audit(1720736102.860:482): avc: denied { remove_name } for pid=4518 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.136876][ T8415] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.180079][ T8415] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.200235][ T29] audit: type=1400 audit(1720736102.860:483): avc: denied { add_name } for pid=4518 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.217705][ T8415] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.264276][ T8415] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.310289][ T8828] netlink: 'syz.0.856': attribute type 4 has an invalid length. [ 426.353215][ T8831] netlink: 'syz.0.856': attribute type 4 has an invalid length. [ 426.768802][ T29] audit: type=1400 audit(1720736103.620:484): avc: denied { read } for pid=8843 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 426.819676][ T8844] overlay: ./bus is not a directory [ 426.965594][ T1151] kernel write not supported for file [eventfd] (pid: 1151 comm: kworker/0:2) [ 426.972453][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.021897][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.093770][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.446452][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.521489][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.540772][ T5125] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 427.721448][ T8859] program syz.1.859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.980217][ T29] audit: type=1400 audit(1720736104.600:485): avc: denied { map } for pid=8849 comm="syz.1.859" path="/proc/723/clear_refs" dev="proc" ino=27211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 428.383832][ T5125] usb 1-1: Using ep0 maxpacket: 8 [ 428.403552][ T5125] usb 1-1: config 0 has no interfaces? [ 428.422177][ T5125] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.470053][ T5125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.499689][ T5125] usb 1-1: config 0 descriptor?? [ 429.379964][ T8878] ptrace attach of "./syz-executor exec"[5471] was attempted by "./syz-executor exec"[8878] [ 429.555383][ T2452] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.667990][ T8] usb 1-1: USB disconnect, device number 7 [ 429.906540][ T2452] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.998974][ T8573] veth0_vlan: entered promiscuous mode [ 430.123711][ T2452] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.267040][ T8573] veth1_vlan: entered promiscuous mode [ 430.393580][ T2452] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.669131][ T8573] veth0_macvtap: entered promiscuous mode [ 430.737984][ T8573] veth1_macvtap: entered promiscuous mode [ 430.925624][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.958235][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.016292][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.074551][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.137590][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.166236][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.232801][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.311979][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.339371][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.360841][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.413498][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.686220][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.551284][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.573263][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.586022][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.591591][ T2452] bridge_slave_1: left allmulticast mode [ 432.617087][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.624496][ T2452] bridge_slave_1: left promiscuous mode [ 432.632376][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 432.650454][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.697780][ T2452] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.796394][ T2452] bridge_slave_0: left allmulticast mode [ 432.821324][ T2452] bridge_slave_0: left promiscuous mode [ 432.827451][ T2452] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.974506][ T29] audit: type=1326 audit(1720736109.830:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.039186][ T29] audit: type=1326 audit(1720736109.830:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.158119][ T29] audit: type=1326 audit(1720736109.940:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.234034][ T29] audit: type=1326 audit(1720736109.940:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.314506][ T29] audit: type=1326 audit(1720736109.940:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.378667][ T29] audit: type=1326 audit(1720736109.940:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.475239][ T29] audit: type=1326 audit(1720736109.940:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.550390][ T29] audit: type=1326 audit(1720736109.960:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.616319][ T29] audit: type=1326 audit(1720736109.960:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.643866][ T29] audit: type=1326 audit(1720736109.960:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf55575bd9 code=0x7ffc0000 [ 433.913504][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 434.122095][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 434.142302][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 434.162266][ T8] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 434.172055][ T8] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 434.181073][ T8] usb 2-1: Product: syz [ 434.185480][ T8] usb 2-1: Manufacturer: syz [ 434.190949][ T8] usb 2-1: SerialNumber: syz [ 434.209660][ T8] usb 2-1: config 0 descriptor?? [ 434.216237][ T8933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.272927][ T2452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.303098][ T2452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.316251][ T2452] bond0 (unregistering): Released all slaves [ 434.363309][ T8573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.379096][ T8573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.389471][ T8573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.398735][ T8573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.507641][ T5150] usb 2-1: USB disconnect, device number 5 [ 434.730403][ T4480] Bluetooth: hci1: command tx timeout [ 435.244338][ T2452] hsr_slave_0: left promiscuous mode [ 435.251856][ T2452] hsr_slave_1: left promiscuous mode [ 435.258574][ T2452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.268227][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.277337][ T2452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.285324][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.340422][ T2452] veth1_macvtap: left promiscuous mode [ 435.346243][ T2452] veth0_macvtap: left promiscuous mode [ 435.352372][ T2452] veth1_vlan: left promiscuous mode [ 435.358205][ T2452] veth0_vlan: left promiscuous mode [ 436.111693][ T8960] overlay: ./bus is not a directory [ 436.569137][ T2452] team0 (unregistering): Port device team_slave_1 removed [ 436.661513][ T2452] team0 (unregistering): Port device team_slave_0 removed [ 436.813471][ T4480] Bluetooth: hci1: command tx timeout [ 436.955650][ T8970] can: request_module (can-proto-0) failed. [ 436.987366][ T8970] ALSA: seq fatal error: cannot create timer (-22) [ 438.012755][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.028850][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.382807][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.425193][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.496387][ T8909] chnl_net:caif_netlink_parms(): no params data found [ 438.765426][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 438.765449][ T29] audit: type=1326 audit(1720736115.620:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8981 comm="syz.1.884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf55575bd9 code=0x0 [ 438.890524][ T4480] Bluetooth: hci1: command tx timeout [ 439.183825][ T29] audit: type=1400 audit(1720736116.040:518): avc: denied { write } for pid=8993 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.434588][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.456892][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.478069][ T8909] bridge_slave_0: entered allmulticast mode [ 439.497992][ T8909] bridge_slave_0: entered promiscuous mode [ 439.544739][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.552725][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.565371][ T8909] bridge_slave_1: entered allmulticast mode [ 439.578538][ T8909] bridge_slave_1: entered promiscuous mode [ 439.825326][ T9000] input: syz0 as /devices/virtual/input/input12 [ 440.768247][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.943682][ T2452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.970215][ T4480] Bluetooth: hci1: command tx timeout [ 441.015732][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.165781][ T2452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.215974][ T8909] team0: Port device team_slave_0 added [ 441.228928][ T8909] team0: Port device team_slave_1 added [ 441.333383][ T2452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.368754][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.390229][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.434309][ T8909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.449157][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.457546][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.499504][ T8909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.551398][ T2452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.752409][ T8909] hsr_slave_0: entered promiscuous mode [ 441.773446][ T8909] hsr_slave_1: entered promiscuous mode [ 441.788403][ T8909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.799909][ T8909] Cannot create hsr debugfs directory [ 442.462565][ T2452] bridge_slave_1: left allmulticast mode [ 442.468943][ T2452] bridge_slave_1: left promiscuous mode [ 442.477534][ T2452] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.496950][ T2452] bridge_slave_0: left allmulticast mode [ 442.508758][ T2452] bridge_slave_0: left promiscuous mode [ 442.537560][ T2452] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.658480][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.672383][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.683242][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.694515][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.705000][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 442.716207][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.787458][ T29] audit: type=1400 audit(1720736119.640:519): avc: denied { ioctl } for pid=9043 comm="syz.2.894" path="socket:[29831]" dev="sockfs" ino=29831 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 442.828249][ T9045] ipt_rpfilter: unknown options [ 443.810110][ T5138] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 443.830770][ T2452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.848528][ T2452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.869781][ T2452] bond0 (unregistering): Released all slaves [ 444.040445][ T5138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.053348][ T5138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.076833][ T5138] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 444.086733][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.121469][ T5138] usb 2-1: config 0 descriptor?? [ 444.144614][ T5138] usbhid 2-1:0.0: can't add hid device: -22 [ 444.157890][ T5138] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 444.598190][ T9067] input: syz0 as /devices/virtual/input/input13 [ 444.932553][ T4480] Bluetooth: hci0: command tx timeout [ 445.500403][ T29] audit: type=1400 audit(1720736122.330:520): avc: denied { listen } for pid=9072 comm="syz.2.904" lport=32993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.624672][ T29] audit: type=1400 audit(1720736122.390:521): avc: denied { accept } for pid=9072 comm="syz.2.904" lport=32993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.696679][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.704849][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.284411][ T9074] sctp: failed to load transform for md5: -4 [ 446.789619][ T930] usb 2-1: USB disconnect, device number 6 [ 446.971825][ T4480] Bluetooth: hci0: command tx timeout [ 447.119356][ T9099] xt_TCPMSS: Only works on TCP SYN packets [ 447.161938][ T2452] hsr_slave_0: left promiscuous mode [ 447.276584][ T29] audit: type=1400 audit(1720736124.120:522): avc: denied { append } for pid=9093 comm="syz.0.909" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 447.324771][ T2452] hsr_slave_1: left promiscuous mode [ 447.353657][ T2452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.396217][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.463005][ T2452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.502763][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.800970][ T9108] program syz.1.910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.352896][ T2452] veth1_macvtap: left promiscuous mode [ 448.358696][ T2452] veth0_macvtap: left promiscuous mode [ 448.419600][ T2452] veth1_vlan: left promiscuous mode [ 448.433212][ T2452] veth0_vlan: left promiscuous mode [ 449.050988][ T4480] Bluetooth: hci0: command tx timeout [ 450.028074][ T2452] team0 (unregistering): Port device team_slave_1 removed [ 450.177443][ T2452] team0 (unregistering): Port device team_slave_0 removed [ 451.130046][ T4480] Bluetooth: hci0: command tx timeout [ 451.189217][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 451.901996][ T29] audit: type=1400 audit(1720736128.750:523): avc: denied { ioctl } for pid=9138 comm="syz.1.921" path="socket:[30094]" dev="sockfs" ino=30094 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 452.161061][ T5150] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 452.380502][ T9152] program syz.0.922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.913636][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.966085][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.042352][ T5150] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 453.057240][ T8909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.080681][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.112807][ T5150] usb 3-1: config 0 descriptor?? [ 453.162484][ T8909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.177917][ T5150] usbhid 3-1:0.0: can't add hid device: -22 [ 453.207699][ T5150] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 453.242721][ T8909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.268450][ T9042] chnl_net:caif_netlink_parms(): no params data found [ 453.351739][ T8909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.843493][ T9042] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.880148][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.887523][ T9042] bridge_slave_0: entered allmulticast mode [ 454.916162][ T9042] bridge_slave_0: entered promiscuous mode [ 454.955796][ T9042] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.964001][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.980370][ T9042] bridge_slave_1: entered allmulticast mode [ 455.016873][ T9042] bridge_slave_1: entered promiscuous mode [ 455.290616][ T9042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.348749][ T9042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.473391][ T930] usb 3-1: USB disconnect, device number 3 [ 455.679497][ T9042] team0: Port device team_slave_0 added [ 455.706933][ T9042] team0: Port device team_slave_1 added [ 455.844114][ T9042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.865052][ T9042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.914716][ T9042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.966258][ T9042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.007319][ T9042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.077278][ T9042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.295350][ T9042] hsr_slave_0: entered promiscuous mode [ 456.338055][ T9042] hsr_slave_1: entered promiscuous mode [ 456.362366][ T9042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.370701][ T9042] Cannot create hsr debugfs directory [ 457.016790][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.290394][ T29] audit: type=1400 audit(1720736134.140:524): avc: denied { getopt } for pid=9211 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 457.474557][ T9217] netlink: 56 bytes leftover after parsing attributes in process `syz.2.933'. [ 457.661037][ T8909] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.928170][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.935630][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.757084][ T29] audit: type=1400 audit(1720736135.600:525): avc: denied { write } for pid=9223 comm="syz.2.936" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 459.213278][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.220626][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.259452][ T9042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 462.313810][ T9042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 462.417266][ T9042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 462.503610][ T9042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 462.855036][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.284263][ T8909] veth0_vlan: entered promiscuous mode [ 464.746295][ T8909] veth1_vlan: entered promiscuous mode [ 465.487813][ T9042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.586340][ T8909] veth0_macvtap: entered promiscuous mode [ 465.650737][ T9042] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.698099][ T8909] veth1_macvtap: entered promiscuous mode [ 465.729928][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.737280][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.874943][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.882316][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.988506][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.014297][ T9299] netlink: 2300 bytes leftover after parsing attributes in process `syz.0.953'. [ 466.065266][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.098075][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.126624][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.147563][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.167206][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.200006][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.218925][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.228302][ T29] audit: type=1400 audit(1720736143.070:526): avc: denied { listen } for pid=9298 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 466.329592][ T8909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.385404][ T8909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.400722][ T8909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.411971][ T8909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.921156][ T2452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.967991][ T2452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.146859][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.186747][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.333692][ T9042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.392818][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.649109][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.895723][ T9042] veth0_vlan: entered promiscuous mode [ 468.982219][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.023295][ T9042] veth1_vlan: entered promiscuous mode [ 469.094056][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.196727][ T9042] veth0_macvtap: entered promiscuous mode [ 469.216535][ T9042] veth1_macvtap: entered promiscuous mode [ 469.286159][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.309181][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.326292][ T9042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.401043][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.426816][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.437438][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.456914][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.469280][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.482014][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.492078][ T9042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.502887][ T9042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.515646][ T9042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.556681][ T9042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.586199][ T9042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.596447][ T9042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.606824][ T9042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.832294][ T11] bridge_slave_1: left allmulticast mode [ 470.837982][ T11] bridge_slave_1: left promiscuous mode [ 470.870365][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.946393][ T11] bridge_slave_0: left allmulticast mode [ 470.982481][ T11] bridge_slave_0: left promiscuous mode [ 471.014789][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.678132][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 471.688211][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.698823][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.727611][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.737120][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 471.744677][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.455981][ T9397] ALSA: seq fatal error: cannot create timer (-22) [ 472.499492][ T9394] can: request_module (can-proto-0) failed. [ 472.857249][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.929343][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.028003][ T11] bond0 (unregistering): Released all slaves [ 473.370460][ T29] audit: type=1400 audit(1720736150.230:527): avc: denied { execute } for pid=9403 comm="syz.1.966" path="/dev/bsg/cpuacct.usage_all" dev="devtmpfs" ino=2407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 473.844631][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.854686][ T5097] Bluetooth: hci1: command tx timeout [ 473.910267][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.947576][ T9420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9420 comm=syz.0.968 [ 474.223732][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'. [ 474.373373][ T9420] netlink: 'syz.0.968': attribute type 30 has an invalid length. [ 475.399148][ T11] hsr_slave_0: left promiscuous mode [ 475.439982][ T11] hsr_slave_1: left promiscuous mode [ 475.456775][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.482361][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.511331][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.518923][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.628486][ T11] veth1_macvtap: left promiscuous mode [ 475.650002][ T11] veth0_macvtap: left promiscuous mode [ 475.660964][ T11] veth1_vlan: left promiscuous mode [ 475.685573][ T11] veth0_vlan: left promiscuous mode [ 475.924685][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 475.940085][ T5097] Bluetooth: hci1: command tx timeout [ 476.150759][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.162612][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.189980][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.209952][ T25] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 476.221467][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.257013][ T25] usb 1-1: config 0 descriptor?? [ 476.637113][ T9447] blktrace: Concurrent blktraces are not allowed on loop3 [ 476.844826][ T25] acrux 0003:1A34:0802.0001: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 476.872677][ T25] acrux 0003:1A34:0802.0001: no inputs found [ 476.889357][ T25] acrux 0003:1A34:0802.0001: Failed to enable force feedback support, error: -19 [ 476.996303][ T25] usb 1-1: USB disconnect, device number 8 [ 477.526228][ T29] audit: type=1400 audit(1720736154.380:528): avc: denied { accept } for pid=9448 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 477.545513][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.937810][ T11] team0 (unregistering): Port device team_slave_1 removed [ 478.012084][ T5097] Bluetooth: hci1: command tx timeout [ 478.131571][ T11] team0 (unregistering): Port device team_slave_0 removed [ 479.695785][ T29] audit: type=1400 audit(1720736156.550:529): avc: denied { execute } for pid=9469 comm="syz.0.986" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 480.097751][ T5097] Bluetooth: hci1: command tx timeout [ 480.392250][ T9466] lo speed is unknown, defaulting to 1000 [ 480.399071][ T9466] lo speed is unknown, defaulting to 1000 [ 480.415079][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.416858][ T9466] lo speed is unknown, defaulting to 1000 [ 480.440477][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.442652][ T9466] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 480.468793][ T9466] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 480.542109][ T9466] lo speed is unknown, defaulting to 1000 [ 480.550841][ T9466] lo speed is unknown, defaulting to 1000 [ 480.558353][ T9466] lo speed is unknown, defaulting to 1000 [ 480.565990][ T9466] lo speed is unknown, defaulting to 1000 [ 480.574533][ T9466] lo speed is unknown, defaulting to 1000 [ 481.191583][ T29] audit: type=1400 audit(1720736158.040:530): avc: denied { connect } for pid=9473 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 481.300137][ T29] audit: type=1400 audit(1720736158.150:531): avc: denied { write } for pid=9473 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 481.716532][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 482.451813][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.470155][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.477605][ T9382] bridge_slave_0: entered allmulticast mode [ 482.512642][ T9382] bridge_slave_0: entered promiscuous mode [ 482.544711][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.560080][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.567446][ T9382] bridge_slave_1: entered allmulticast mode [ 482.587160][ T9382] bridge_slave_1: entered promiscuous mode [ 482.806349][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.850904][ T9382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.866162][ T9382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.968220][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.025589][ T9382] team0: Port device team_slave_0 added [ 483.057070][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.085583][ T9382] team0: Port device team_slave_1 added [ 483.224625][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.248385][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.264797][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.314820][ T9382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.342914][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.370205][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.396160][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.566578][ T9510] vxcan1: tx address claim with dest, not broadcast [ 483.610624][ T9382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.861300][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 484.098403][ T9518] program syz.1.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.928948][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.962073][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.982134][ T9382] hsr_slave_0: entered promiscuous mode [ 484.993279][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.007722][ T9382] hsr_slave_1: entered promiscuous mode [ 485.026630][ T9382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.046097][ T9382] Cannot create hsr debugfs directory [ 485.052261][ T9] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 485.085391][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.133604][ T9] usb 1-1: config 0 descriptor?? [ 485.175560][ T4480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.198285][ T4480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.208856][ T4480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.225045][ T4480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.243822][ T4480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 485.252353][ T4480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.690934][ T9] acrux 0003:1A34:0802.0002: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 485.719967][ T9] acrux 0003:1A34:0802.0002: no inputs found [ 485.731010][ T11] bridge_slave_1: left allmulticast mode [ 485.736718][ T11] bridge_slave_1: left promiscuous mode [ 485.744730][ T9] acrux 0003:1A34:0802.0002: Failed to enable force feedback support, error: -19 [ 485.760809][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.802848][ T9540] netlink: 'syz.1.997': attribute type 12 has an invalid length. [ 485.812276][ T9540] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.997'. [ 485.813791][ T11] bridge_slave_0: left allmulticast mode [ 485.860156][ T11] bridge_slave_0: left promiscuous mode [ 485.885216][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.885230][ T9] usb 1-1: USB disconnect, device number 9 [ 487.094362][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.117482][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.139337][ T11] bond0 (unregistering): Released all slaves [ 487.380422][ T4480] Bluetooth: hci0: command tx timeout [ 487.465364][ T9529] lo speed is unknown, defaulting to 1000 [ 487.828491][ T29] audit: type=1400 audit(1720736164.680:532): avc: denied { setopt } for pid=9554 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 488.322625][ T9560] program syz.2.1004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.326130][ T29] audit: type=1400 audit(1720736166.170:533): avc: denied { listen } for pid=9564 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 489.348094][ T9567] xt_TCPMSS: Only works on TCP SYN packets [ 489.481713][ T4480] Bluetooth: hci0: command tx timeout [ 490.413562][ T11] hsr_slave_0: left promiscuous mode [ 490.464161][ T11] hsr_slave_1: left promiscuous mode [ 490.503176][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.540642][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.577392][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.613075][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.766516][ T11] veth1_macvtap: left promiscuous mode [ 490.785518][ T11] veth0_macvtap: left promiscuous mode [ 490.806054][ T11] veth1_vlan: left promiscuous mode [ 490.819077][ T11] veth0_vlan: left promiscuous mode [ 491.530049][ T4480] Bluetooth: hci0: command tx timeout [ 492.057540][ T9606] vxcan1: tx address claim with dest, not broadcast [ 493.552484][ T9617] netlink: 'syz.0.1018': attribute type 12 has an invalid length. [ 493.562193][ T9617] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1018'. [ 493.612456][ T4480] Bluetooth: hci0: command tx timeout [ 494.836996][ T29] audit: type=1400 audit(1720736171.680:534): avc: denied { mount } for pid=9623 comm="syz.1.1020" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 495.178505][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1022'. [ 495.265285][ T29] audit: type=1400 audit(1720736172.120:535): avc: denied { read } for pid=9627 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 495.479459][ T11] team0 (unregistering): Port device team_slave_1 removed [ 495.577918][ T11] team0 (unregistering): Port device team_slave_0 removed [ 497.150986][ T29] audit: type=1400 audit(1720736174.000:536): avc: denied { setopt } for pid=9635 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 497.174113][ T9638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.225360][ T29] audit: type=1400 audit(1720736174.050:537): avc: denied { ioctl } for pid=9635 comm="syz.2.1025" path="socket:[33515]" dev="sockfs" ino=33515 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 497.226610][ T9641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.338172][ T29] audit: type=1400 audit(1720736174.190:538): avc: denied { read } for pid=9637 comm="syz.0.1026" path="socket:[32379]" dev="sockfs" ino=32379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 498.705879][ T9529] chnl_net:caif_netlink_parms(): no params data found [ 498.918386][ T9382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 499.867291][ T9382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 499.946520][ T9382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 500.091544][ T9382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 500.493577][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.508163][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.536180][ T9529] bridge_slave_0: entered allmulticast mode [ 500.552595][ T9529] bridge_slave_0: entered promiscuous mode [ 500.599071][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.627341][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.646231][ T9529] bridge_slave_1: entered allmulticast mode [ 500.668762][ T9529] bridge_slave_1: entered promiscuous mode [ 500.771227][ T29] audit: type=1400 audit(1720736177.610:539): avc: denied { mount } for pid=9693 comm="syz.2.1039" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 500.825188][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.856785][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.883686][ T9695] Unknown uid [ 500.910125][ T29] audit: type=1400 audit(1720736177.740:540): avc: denied { remount } for pid=9693 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 501.050802][ T29] audit: type=1400 audit(1720736177.900:541): avc: denied { unmount } for pid=5471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 501.085431][ T9529] team0: Port device team_slave_0 added [ 501.155926][ T9529] team0: Port device team_slave_1 added [ 501.463952][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.500288][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.642119][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.689325][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.697071][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.724117][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.982412][ T9706] hub 9-0:1.0: USB hub found [ 501.989678][ T9706] hub 9-0:1.0: 8 ports detected [ 502.741264][ T9707] lo speed is unknown, defaulting to 1000 [ 503.762433][ T9382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.842874][ T9529] hsr_slave_0: entered promiscuous mode [ 503.867373][ T9529] hsr_slave_1: entered promiscuous mode [ 503.899607][ T9529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.920230][ T9529] Cannot create hsr debugfs directory [ 504.603448][ T9382] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.805591][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.812923][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.090520][ T2452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.387663][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.394929][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.674911][ T2452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.878402][ T2452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.920830][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 506.137851][ T2452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.169171][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.216930][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.230567][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 506.253569][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 506.259955][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.280709][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 506.286149][ T25] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 506.322113][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 506.340882][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.349377][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 506.366057][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.377353][ T25] usb 2-1: config 0 descriptor?? [ 507.137080][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.174542][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.475210][ T9764] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 507.528410][ T25] acrux 0003:1A34:0802.0003: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 507.528577][ T29] audit: type=1400 audit(1720736184.380:542): avc: denied { create } for pid=9763 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 507.554945][ T9754] lo speed is unknown, defaulting to 1000 [ 507.576726][ T9764] team0: entered promiscuous mode [ 507.583180][ T25] acrux 0003:1A34:0802.0003: no inputs found [ 507.589234][ T25] acrux 0003:1A34:0802.0003: Failed to enable force feedback support, error: -19 [ 507.590241][ T9764] team_slave_0: entered promiscuous mode [ 507.604957][ T29] audit: type=1400 audit(1720736184.430:543): avc: denied { ioctl } for pid=9763 comm="syz.2.1056" path="socket:[32653]" dev="sockfs" ino=32653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 507.621485][ T9764] team_slave_1: entered promiscuous mode [ 507.791457][ T5134] usb 2-1: USB disconnect, device number 7 [ 508.027541][ T9763] team0: left promiscuous mode [ 508.036202][ T9763] team_slave_0: left promiscuous mode [ 508.046488][ T9763] team_slave_1: left promiscuous mode [ 508.500814][ T5097] Bluetooth: hci3: command tx timeout [ 508.791944][ T9777] siw: device registration error -23 [ 509.722118][ T2452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.748432][ T2452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.768137][ T2452] bond0 (unregistering): Released all slaves [ 509.807557][ T2452] bond1 (unregistering): Released all slaves [ 509.843476][ T2452] bond2 (unregistering): Released all slaves [ 509.902899][ T2452] bond3 (unregistering): Released all slaves [ 511.014923][ T5097] Bluetooth: hci3: command tx timeout [ 511.305044][ T2452] Êü: left promiscuous mode [ 511.612187][ T9529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 511.649424][ T9382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.696149][ T9529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 511.790439][ T9529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 511.826736][ T9529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 512.155672][ T9754] chnl_net:caif_netlink_parms(): no params data found [ 512.432379][ T9800] input: syz1 as /devices/virtual/input/input14 [ 512.762963][ T4480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.777267][ T4480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.789706][ T4480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.801411][ T4480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.810931][ T4480] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 512.822218][ T4480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 512.883413][ T9382] veth0_vlan: entered promiscuous mode [ 512.934479][ T2452] hsr_slave_0: left promiscuous mode [ 512.945798][ T29] audit: type=1400 audit(1720736189.800:544): avc: denied { read write } for pid=9812 comm="syz.2.1066" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 512.970495][ T29] audit: type=1400 audit(1720736189.800:545): avc: denied { open } for pid=9812 comm="syz.2.1066" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 512.994792][ T2452] hsr_slave_1: left promiscuous mode [ 513.024730][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.047607][ T2452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.051477][ T5134] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 513.055589][ T4480] Bluetooth: hci3: command tx timeout [ 513.068707][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.069550][ T5134] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 513.091097][ T5134] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 513.109997][ T5134] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 513.125885][ T2452] veth1_macvtap: left promiscuous mode [ 513.135719][ T2452] veth0_macvtap: left promiscuous mode [ 513.142681][ T2452] veth1_vlan: left promiscuous mode [ 513.148146][ T2452] veth0_vlan: left promiscuous mode [ 513.167495][ T5134] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 513.311871][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 513.532344][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 513.541828][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.550579][ T9] usb 3-1: Product: syz [ 513.554913][ T9] usb 3-1: Manufacturer: syz [ 513.559569][ T9] usb 3-1: SerialNumber: syz [ 513.581517][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 513.799052][ T5134] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 514.076027][ T5150] usb 3-1: USB disconnect, device number 4 [ 514.191040][ T2452] team0 (unregistering): Port device team_slave_1 removed [ 514.279429][ T2452] team0 (unregistering): Port device team_slave_0 removed [ 514.890112][ T4480] Bluetooth: hci4: command tx timeout [ 514.898192][ T5134] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 514.901161][ T5134] ath9k_htc: Failed to initialize the device [ 514.954974][ T5150] usb 3-1: ath9k_htc: USB layer deinitialized [ 515.140576][ T4480] Bluetooth: hci3: command tx timeout [ 515.186180][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.209361][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.227648][ T9754] bridge_slave_0: entered allmulticast mode [ 515.240807][ T9754] bridge_slave_0: entered promiscuous mode [ 515.284644][ T9382] veth1_vlan: entered promiscuous mode [ 515.330548][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.337834][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.363008][ T9754] bridge_slave_1: entered allmulticast mode [ 515.381989][ T9754] bridge_slave_1: entered promiscuous mode [ 515.703154][ T9754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.728938][ T9754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.005598][ T9754] team0: Port device team_slave_0 added [ 516.022784][ T9805] lo speed is unknown, defaulting to 1000 [ 516.640281][ T9754] team0: Port device team_slave_1 added [ 516.892718][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.899735][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.938381][ T9754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.954958][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.969945][ T4480] Bluetooth: hci4: command tx timeout [ 516.972940][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.019619][ T9754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.710685][ T9382] veth0_macvtap: entered promiscuous mode [ 517.733590][ T2452] IPVS: stop unused estimator thread 0... [ 517.767137][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.944846][ T9382] veth1_macvtap: entered promiscuous mode [ 518.064325][ T9754] hsr_slave_0: entered promiscuous mode [ 518.084563][ T9754] hsr_slave_1: entered promiscuous mode [ 518.093900][ T9754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.102173][ T9754] Cannot create hsr debugfs directory [ 518.212577][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.769553][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.776966][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.919641][ T9382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.955544][ T29] audit: type=1400 audit(1720736195.720:546): avc: denied { mount } for pid=9848 comm="syz.2.1071" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 519.054579][ T4480] Bluetooth: hci4: command tx timeout [ 519.647677][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.655109][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.708383][ T29] audit: type=1400 audit(1720736196.550:547): avc: denied { unmount } for pid=5471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 519.834848][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.847041][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.858706][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.869848][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.883262][ T9382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.968218][ T9382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.995012][ T9382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.010053][ T9382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.018841][ T9382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.054950][ T9862] wireguard: wg2: Could not create IPv4 socket [ 520.164072][ T9805] chnl_net:caif_netlink_parms(): no params data found [ 520.719775][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.739138][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.757956][ T9805] bridge_slave_0: entered allmulticast mode [ 520.780840][ T9805] bridge_slave_0: entered promiscuous mode [ 520.844423][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.881098][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.888448][ T9805] bridge_slave_1: entered allmulticast mode [ 520.916291][ T9805] bridge_slave_1: entered promiscuous mode [ 521.118712][ T9887] ALSA: seq fatal error: cannot create timer (-22) [ 521.130584][ T4480] Bluetooth: hci4: command tx timeout [ 521.138034][ T9805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.149233][ T9884] can: request_module (can-proto-0) failed. [ 521.294187][ T9805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.324524][ T9754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 521.388442][ T9754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 521.448880][ T9754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 521.457002][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.491822][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.494659][ T9754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 521.530565][ T9805] team0: Port device team_slave_0 added [ 521.588813][ T9805] team0: Port device team_slave_1 added [ 521.749866][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.758756][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.808727][ T9805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.838786][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.846949][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.874327][ T9805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.906918][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.916105][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.135912][ T9805] hsr_slave_0: entered promiscuous mode [ 522.148949][ T9805] hsr_slave_1: entered promiscuous mode [ 522.195170][ T9805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.204785][ T9805] Cannot create hsr debugfs directory [ 522.253934][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.755564][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.375119][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.563753][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.812331][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.186840][ T9805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.257442][ T9529] veth0_vlan: entered promiscuous mode [ 524.403925][ T9805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.477444][ T9915] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1075'. [ 524.571573][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.703906][ T9805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.904091][ T9529] veth1_vlan: entered promiscuous mode [ 524.942301][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.955456][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.964046][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.975128][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.988154][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 524.998846][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 525.009921][ T29] audit: type=1400 audit(1720736201.860:548): avc: denied { connect } for pid=9920 comm="syz.2.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 525.071472][ T9805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.115436][ T29] audit: type=1400 audit(1720736201.920:549): avc: denied { shutdown } for pid=9920 comm="syz.2.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 525.335724][ T9754] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.374191][ T51] bridge_slave_1: left allmulticast mode [ 525.404678][ T51] bridge_slave_1: left promiscuous mode [ 525.440588][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.471890][ T51] bridge_slave_0: left allmulticast mode [ 525.488450][ T51] bridge_slave_0: left promiscuous mode [ 525.500285][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.159218][ T29] audit: type=1400 audit(1720736203.010:550): avc: denied { connect } for pid=9940 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 526.255260][ T29] audit: type=1400 audit(1720736203.110:551): avc: denied { getopt } for pid=9940 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 526.411781][ T9941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.537964][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.571858][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.604951][ T51] bond0 (unregistering): Released all slaves [ 526.728821][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.736190][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.748340][ T9922] lo speed is unknown, defaulting to 1000 [ 526.823002][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.830343][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.050360][ T5090] Bluetooth: hci4: command 0x0405 tx timeout [ 527.131307][ T5097] Bluetooth: hci1: command tx timeout [ 527.183601][ T9529] veth0_macvtap: entered promiscuous mode [ 527.313315][ T9949] input: syz1 as /devices/virtual/input/input15 [ 527.365591][ T9805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 527.406185][ T9529] veth1_macvtap: entered promiscuous mode [ 527.419358][ T9805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 527.453718][ T9805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 527.519577][ T51] hsr_slave_0: left promiscuous mode [ 527.558448][ T51] hsr_slave_1: left promiscuous mode [ 527.588196][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.620407][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.664154][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.678247][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.788620][ T51] veth1_macvtap: left promiscuous mode [ 527.800452][ T51] veth0_macvtap: left promiscuous mode [ 527.806314][ T51] veth1_vlan: left promiscuous mode [ 527.832909][ T51] veth0_vlan: left promiscuous mode [ 529.209988][ T5097] Bluetooth: hci1: command tx timeout [ 529.411335][ T51] team0 (unregistering): Port device team_slave_1 removed [ 529.541641][ T51] team0 (unregistering): Port device team_slave_0 removed [ 529.867304][ T9977] syz.2.1085: attempt to access beyond end of device [ 529.867304][ T9977] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 529.880688][ T9977] FAT-fs (loop5): unable to read boot sector [ 529.990299][ T29] audit: type=1400 audit(1720736206.700:552): avc: denied { setopt } for pid=9974 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 530.759931][ T29] audit: type=1400 audit(1720736207.610:553): avc: denied { read write } for pid=9978 comm="syz.2.1086" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 530.808429][ T29] audit: type=1400 audit(1720736207.610:554): avc: denied { open } for pid=9978 comm="syz.2.1086" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 530.888462][ T9982] program syz.2.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.022617][ T29] audit: type=1400 audit(1720736207.880:555): avc: denied { map } for pid=9978 comm="syz.2.1086" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 531.067853][ T29] audit: type=1400 audit(1720736207.910:556): avc: denied { execute } for pid=9978 comm="syz.2.1086" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 531.305464][ T5097] Bluetooth: hci1: command tx timeout [ 531.424836][ T9805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.869662][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.985982][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.002129][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.012786][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.024257][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.047476][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.078068][ T9922] chnl_net:caif_netlink_parms(): no params data found [ 532.127829][ T9529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.150277][ T9529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.159063][ T9529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.173572][ T9529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.233722][ T9754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.652602][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.661764][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.669087][ T9922] bridge_slave_0: entered allmulticast mode [ 532.694547][ T9922] bridge_slave_0: entered promiscuous mode [ 532.792606][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.802169][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.809568][ T9922] bridge_slave_1: entered allmulticast mode [ 532.842537][ T9922] bridge_slave_1: entered promiscuous mode [ 532.988848][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.140117][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.326730][ T9922] team0: Port device team_slave_0 added [ 533.348695][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.373505][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.375850][ T5097] Bluetooth: hci1: command tx timeout [ 533.414717][T10016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10016 comm=syz.2.1090 [ 533.484230][ T9922] team0: Port device team_slave_1 added [ 533.697072][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.705006][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.736864][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.752445][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.759631][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.787364][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.883414][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.914569][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.119050][ T9754] veth0_vlan: entered promiscuous mode [ 534.187324][ T9922] hsr_slave_0: entered promiscuous mode [ 534.225380][ T9922] hsr_slave_1: entered promiscuous mode [ 534.247963][ T9922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.266555][ T9922] Cannot create hsr debugfs directory [ 534.397022][ T9805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.405632][T10035] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 534.595308][ T9754] veth1_vlan: entered promiscuous mode [ 534.609213][T10035] team0: entered promiscuous mode [ 534.627093][T10035] team_slave_0: entered promiscuous mode [ 534.654791][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.681586][T10035] team_slave_1: entered promiscuous mode [ 534.865392][ T2452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.107664][ T2452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.162360][T10034] team0: left promiscuous mode [ 535.167198][T10034] team_slave_0: left promiscuous mode [ 535.174106][T10034] team_slave_1: left promiscuous mode [ 535.217133][ T9805] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.302495][ T2452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.416261][ T2452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.444636][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.451933][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.509374][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.516681][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.542373][ T9754] veth0_macvtap: entered promiscuous mode [ 535.682886][ T9754] veth1_macvtap: entered promiscuous mode [ 535.692068][ T5134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.906169][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.929092][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.945210][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.185793][T10057] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 536.223835][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.261133][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.300165][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.329875][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.363922][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.400062][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.452786][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.888862][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 536.912441][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.931758][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.942563][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 536.956154][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 536.965221][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 537.052190][ T9754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.082782][ T9754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.110180][ T9754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.118972][ T9754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.166249][ T2452] bridge_slave_1: left allmulticast mode [ 537.179942][ T2452] bridge_slave_1: left promiscuous mode [ 537.185955][ T2452] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.211421][T10060] Bluetooth: MGMT ver 1.22 [ 537.217410][ T2452] bridge_slave_0: left allmulticast mode [ 537.229999][ T2452] bridge_slave_0: left promiscuous mode [ 537.236052][ T2452] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.746411][ T5134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.774906][ T2452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.812681][ T2452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.890781][ T2452] bond0 (unregistering): Released all slaves [ 539.050339][ T5097] Bluetooth: hci0: command tx timeout [ 539.673635][T10068] lo speed is unknown, defaulting to 1000 [ 539.770219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.780415][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.805144][ T2452] hsr_slave_0: left promiscuous mode [ 539.824646][ T2452] hsr_slave_1: left promiscuous mode [ 539.836619][ T2452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.859958][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.901366][ T2452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.926742][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.001956][ T2452] veth1_macvtap: left promiscuous mode [ 540.018827][ T2452] veth0_macvtap: left promiscuous mode [ 540.025197][ T2452] veth1_vlan: left promiscuous mode [ 540.040770][ T2452] veth0_vlan: left promiscuous mode [ 540.117160][T10098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.413764][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.132560][ T5097] Bluetooth: hci0: command tx timeout [ 541.772885][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.931570][ T2452] team0 (unregistering): Port device team_slave_1 removed [ 542.058338][ T2452] team0 (unregistering): Port device team_slave_0 removed [ 542.340578][T10136] ALSA: seq fatal error: cannot create timer (-22) [ 542.341001][T10133] can: request_module (can-proto-0) failed. [ 543.220002][ T5097] Bluetooth: hci0: command tx timeout [ 543.781358][ T9922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 543.811854][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.819759][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.875444][ T9922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.920639][ T9922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 544.063261][ T9922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 544.112677][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.174460][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.190711][ T9805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.816390][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.007070][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.114976][T10068] chnl_net:caif_netlink_parms(): no params data found [ 545.183136][ T9805] veth0_vlan: entered promiscuous mode [ 545.194229][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 545.222956][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 545.232892][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 545.243881][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 545.271689][ T29] audit: type=1400 audit(1720736222.120:557): avc: denied { accept } for pid=10177 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 545.272302][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.301406][ T25] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 545.311874][ T5097] Bluetooth: hci0: command tx timeout [ 545.379084][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1105'. [ 545.425295][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.432650][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.490785][ T5125] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 545.562263][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.569696][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.721319][ T5125] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 545.730667][ T5125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.732697][ T9805] veth1_vlan: entered promiscuous mode [ 545.738750][ T5125] usb 3-1: Product: syz [ 545.749635][ T5125] usb 3-1: Manufacturer: syz [ 545.755830][ T5125] usb 3-1: SerialNumber: syz [ 545.777729][ T5125] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 545.807699][ T25] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 546.183925][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.276291][ T9922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.328755][ T9922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.582025][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.604711][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.626788][T10068] bridge_slave_0: entered allmulticast mode [ 546.657010][T10068] bridge_slave_0: entered promiscuous mode [ 546.698056][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.732056][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.739405][T10068] bridge_slave_1: entered allmulticast mode [ 546.802137][T10068] bridge_slave_1: entered promiscuous mode [ 547.609391][T10068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.703015][T10068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.851357][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.008455][ T9805] veth0_macvtap: entered promiscuous mode [ 548.121320][ T29] audit: type=1400 audit(1720736224.960:558): avc: denied { read } for pid=10203 comm="syz.0.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.452636][T10068] team0: Port device team_slave_0 added [ 549.497739][T10068] team0: Port device team_slave_1 added [ 549.574201][ T9805] veth1_macvtap: entered promiscuous mode [ 550.253496][T10223] tun0: tun_chr_ioctl cmd 1074025672 [ 550.281120][T10223] tun0: ignored: set checksum enabled [ 550.339047][T10068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.363635][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.477671][T10068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.909037][T10068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.940798][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.047316][T10068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.935959][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.082403][ C1] hrtimer: interrupt took 18574859 ns [ 552.313292][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.387907][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.422743][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.499205][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.042346][T10068] hsr_slave_0: entered promiscuous mode [ 553.211991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.754034][T10068] hsr_slave_1: entered promiscuous mode [ 557.367957][T10253] tmpfs: Bad value for 'mpol' [ 557.700439][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.774192][T10068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.857129][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.927803][T10068] Cannot create hsr debugfs directory [ 560.967528][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.021951][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.073776][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.139125][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.189642][ T9805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.226086][ T9805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.282590][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.890269][ T5090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 561.920170][ T5090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 561.932486][ T5090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 561.948015][ T5090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 561.956801][ T5090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 561.965257][ T5090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 562.646281][ T25] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 562.812123][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.110086][ T5090] Bluetooth: hci5: command tx timeout [ 564.782184][ T9805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.804196][ T9805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.838872][ T9805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.886466][ T9805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.308702][T10266] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 565.315325][T10266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 565.346262][T10266] vhci_hcd vhci_hcd.0: Device attached [ 565.570574][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.590518][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.598947][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.609915][T10196] usb 13-1: new low-speed USB device number 4 using vhci_hcd [ 565.631175][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.639591][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.649465][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.681983][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.730107][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.738526][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.170141][ T5090] Bluetooth: hci5: command tx timeout [ 567.151369][T10258] lo speed is unknown, defaulting to 1000 [ 568.170306][ C0] net_ratelimit: 1020 callbacks suppressed [ 568.170349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.250816][ T5090] Bluetooth: hci5: command tx timeout [ 568.293666][T10267] vhci_hcd: connection reset by peer [ 568.322484][ T61] vhci_hcd: stop threads [ 568.326804][ T61] vhci_hcd: release socket [ 568.340486][ T61] vhci_hcd: disconnect device [ 568.521027][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.568540][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.582943][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.630811][ T9922] veth0_vlan: entered promiscuous mode [ 568.867053][ T9922] veth1_vlan: entered promiscuous mode [ 568.902861][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.931624][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.550736][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.557272][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.330300][ T5090] Bluetooth: hci5: command tx timeout [ 570.730078][T10196] vhci_hcd: vhci_device speed not set [ 572.413014][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.422451][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.335991][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.173759][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.204997][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.217282][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.239192][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.452988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.095153][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.355058][ T5097] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.379920][ T5097] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.389414][ T5097] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.398183][ T5097] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.406972][ T5097] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 580.415220][ T5097] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 581.021589][ T5090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 581.035078][ T5090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 581.045297][ T5090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 581.054465][ T5090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 581.062792][ T5090] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 581.071485][ T5090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 582.490230][ T5097] Bluetooth: hci6: command tx timeout [ 583.130510][ T5097] Bluetooth: hci7: command tx timeout [ 583.291170][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.940648][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.579978][ T5097] Bluetooth: hci6: command tx timeout [ 585.211201][ T5097] Bluetooth: hci7: command tx timeout [ 585.230514][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.150907][ T5090] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 586.164260][ T5090] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 586.174795][ T5090] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 586.184504][ T5090] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 586.197631][ T5090] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 586.210206][ T5090] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 586.650092][ T5090] Bluetooth: hci6: command tx timeout [ 587.292081][ T5090] Bluetooth: hci7: command tx timeout [ 588.332336][ T5090] Bluetooth: hci8: command tx timeout [ 588.730223][ T5090] Bluetooth: hci6: command tx timeout [ 589.051417][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.063407][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.090791][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.370072][ T5090] Bluetooth: hci7: command tx timeout [ 589.700936][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.420026][ T5090] Bluetooth: hci8: command tx timeout [ 590.972330][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.490303][ T5090] Bluetooth: hci8: command tx timeout [ 594.172410][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.569965][ T5090] Bluetooth: hci8: command tx timeout [ 595.470931][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.734513][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.108202][ T5097] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 598.119475][ T5097] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 598.128254][ T5097] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 598.160122][ T5097] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 598.168399][ T5097] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 598.176745][ T5097] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 599.933788][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.978670][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.000759][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.250257][ T5090] Bluetooth: hci9: command tx timeout [ 601.214319][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.330106][ T5090] Bluetooth: hci9: command tx timeout [ 602.491665][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.411649][ T5090] Bluetooth: hci9: command tx timeout [ 605.691743][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.490071][ T5090] Bluetooth: hci9: command tx timeout [ 606.973354][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.612439][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.816405][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.859829][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.920929][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.731049][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.371747][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.572607][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.500893][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.520323][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.691356][ T5097] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 618.704161][ T5097] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 618.713493][ T5097] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 618.723284][ T5097] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 618.732386][ T5097] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 618.750687][ T5097] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 620.890130][ T5097] Bluetooth: hci10: command tx timeout [ 622.333158][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.359101][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.381427][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.970985][ T5097] Bluetooth: hci10: command tx timeout [ 623.612685][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.621495][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.049973][ T5097] Bluetooth: hci10: command tx timeout [ 627.130100][ T5097] Bluetooth: hci10: command tx timeout [ 627.453994][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.655894][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.390306][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.024081][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.032363][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.106127][ T5097] Bluetooth: hci3: command 0x0406 tx timeout [ 633.220512][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.239446][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.264733][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.491253][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.150617][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.696806][ T5090] Bluetooth: hci4: command 0x0405 tx timeout [ 638.980287][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.237928][ T5090] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 640.249628][ T5090] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 640.262692][ T5090] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 640.275304][ T5090] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 640.284239][ T5090] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 640.293726][ T5090] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 640.328102][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.336987][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.186460][ T5097] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 641.202150][ T5097] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 641.231584][ T5097] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 641.243829][ T5097] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 641.255603][ T5097] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 641.263970][ T5097] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 642.330553][ T5097] Bluetooth: hci11: command tx timeout [ 643.374035][ T5097] Bluetooth: hci12: command tx timeout [ 644.411161][ T5097] Bluetooth: hci11: command tx timeout [ 644.739781][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.759198][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.783705][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.450158][ T5097] Bluetooth: hci12: command tx timeout [ 646.010566][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.019282][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.490230][ T5097] Bluetooth: hci11: command tx timeout [ 647.529977][ T5097] Bluetooth: hci12: command tx timeout [ 648.011748][ T5090] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 648.023539][ T5090] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 648.032481][ T5090] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 648.063307][ T5090] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 648.072866][ T5090] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 648.081398][ T5090] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 648.571957][ T5097] Bluetooth: hci11: command tx timeout [ 649.610157][ T5097] Bluetooth: hci12: command tx timeout [ 649.789153][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.180045][ T5097] Bluetooth: hci13: command tx timeout [ 651.770567][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.780256][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.250898][ T5097] Bluetooth: hci13: command tx timeout [ 652.574959][ T5097] Bluetooth: hci1: command 0x0406 tx timeout [ 654.331603][ T5090] Bluetooth: hci13: command tx timeout [ 654.977751][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.020649][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.042714][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.410116][ T5090] Bluetooth: hci13: command tx timeout [ 657.531369][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.540260][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.391485][ T5097] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 659.404550][ T5097] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 659.414166][ T5097] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 659.441725][ T5097] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 659.453244][ T5097] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 659.461827][ T5097] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 660.090950][ T1054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.530273][ T5090] Bluetooth: hci14: command tx timeout [ 662.974475][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 663.290776][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.299525][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.610245][ T5097] Bluetooth: hci14: command tx timeout [ 665.213666][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.251105][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.290843][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.691871][ T5097] Bluetooth: hci14: command tx timeout [ 667.770273][ T5097] Bluetooth: hci14: command tx timeout [ 669.051029][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.060415][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.331074][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.018601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.810423][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.403027][ T5090] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 679.421160][ T5090] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 679.443656][ T5090] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 679.454491][ T5090] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 679.464438][ T5090] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 679.473406][ T5090] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 679.940630][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.540203][ T5090] Bluetooth: hci15: command tx timeout [ 683.620091][ T5090] Bluetooth: hci15: command tx timeout [ 684.428020][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.449489][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.469459][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.700351][ T5090] Bluetooth: hci15: command tx timeout [ 685.719567][ T1054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.375617][ T1054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.780119][ T5090] Bluetooth: hci15: command tx timeout [ 688.430318][ T5090] Bluetooth: hci5: command 0x0406 tx timeout [ 690.190229][ T1054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.478567][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.488111][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.494729][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.105759][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.318323][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.372395][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.400669][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.221055][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.255283][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.194381][ T5090] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 700.205759][ T5090] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 700.216120][ T5090] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 700.225531][ T5090] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 700.240886][ T5090] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 700.249470][ T5090] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 701.060609][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.261843][ T5097] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 701.274439][ T5097] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 701.283691][ T5097] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 701.293291][ T5097] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 701.305128][ T5097] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 701.313357][ T5097] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 702.420545][ T5097] Bluetooth: hci16: command tx timeout [ 702.980553][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.989259][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.380074][ T5097] Bluetooth: hci17: command tx timeout [ 703.789127][ T5097] Bluetooth: hci7: command 0x0406 tx timeout [ 703.795998][ T5097] Bluetooth: hci6: command 0x0406 tx timeout [ 704.500371][ T5090] Bluetooth: hci16: command tx timeout [ 705.460092][ T5090] Bluetooth: hci17: command tx timeout [ 706.580043][ T5090] Bluetooth: hci16: command tx timeout [ 706.842527][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.900379][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.550402][ T5090] Bluetooth: hci17: command tx timeout [ 708.104313][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.660213][ T5090] Bluetooth: hci16: command tx timeout [ 708.749807][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.904835][ T5090] Bluetooth: hci8: command 0x0406 tx timeout [ 709.505913][ T5090] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 709.517991][ T5090] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 709.527909][ T5090] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 709.556495][ T5090] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 709.566635][ T5090] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 709.580026][ T5090] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 709.620563][ T5090] Bluetooth: hci17: command tx timeout [ 711.700020][ T4480] Bluetooth: hci18: command tx timeout [ 712.580594][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.779926][ T4480] Bluetooth: hci18: command tx timeout [ 713.860988][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.499973][ T30] INFO: task kworker/R-mm_pe:13 blocked for more than 143 seconds. [ 714.530380][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.538672][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 714.556262][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 714.591478][ T30] task:kworker/R-mm_pe state:D stack:29648 pid:13 tgid:13 ppid:2 flags:0x00004000 [ 714.620357][ T30] Workqueue: 0x0 (mm_percpu_wq) [ 714.625436][ T30] Call Trace: [ 714.628837][ T30] [ 714.679927][ T30] __schedule+0xf15/0x5d00 [ 714.684461][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 714.779688][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 714.786052][ T30] ? __pfx___schedule+0x10/0x10 [ 714.817213][ T30] ? schedule+0x298/0x350 [ 714.829763][ T30] ? __pfx_lock_release+0x10/0x10 [ 714.834884][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 714.839624][ T30] ? __mutex_trylock_common+0x78/0x250 [ 714.847887][ T30] schedule+0xe7/0x350 [ 714.860170][ T30] schedule_preempt_disabled+0x13/0x30 [ 714.865728][ T30] __mutex_lock+0x5b8/0x9c0 [ 714.882601][ T30] ? worker_detach_from_pool+0x95/0x3f0 [ 714.888250][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 714.900423][ T30] ? rescuer_thread+0x803/0xd40 [ 714.905353][ T30] ? __pfx_lock_release+0x10/0x10 [ 714.936768][ T30] ? worker_detach_from_pool+0x95/0x3f0 [ 714.956138][ T30] worker_detach_from_pool+0x95/0x3f0 [ 714.970147][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 714.975445][ T30] rescuer_thread+0x80b/0xd40 [ 714.989849][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 714.995130][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 715.010473][ T30] ? __kthread_parkme+0x148/0x220 [ 715.015585][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 715.033718][ T30] kthread+0x2c1/0x3a0 [ 715.037874][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.080080][ T30] ? __pfx_kthread+0x10/0x10 [ 715.084785][ T30] ret_from_fork+0x45/0x80 [ 715.089269][ T30] ? __pfx_kthread+0x10/0x10 [ 715.129084][ T30] ret_from_fork_asm+0x1a/0x30 [ 715.141925][ T30] [ 715.145055][ T30] INFO: task kworker/u8:3:51 blocked for more than 144 seconds. [ 715.166694][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 715.190099][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.198843][ T30] task:kworker/u8:3 state:D stack:23664 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 715.245747][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 715.279130][ T30] Call Trace: [ 715.287947][ T30] [ 715.296686][ T30] __schedule+0xf15/0x5d00 [ 715.309361][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 715.315120][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 715.321044][ T30] ? __pfx___schedule+0x10/0x10 [ 715.325960][ T30] ? schedule+0x298/0x350 [ 715.344142][ T30] ? __pfx_lock_release+0x10/0x10 [ 715.349359][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 715.367073][ T30] ? __mutex_trylock_common+0x78/0x250 [ 715.379817][ T30] schedule+0xe7/0x350 [ 715.383975][ T30] schedule_preempt_disabled+0x13/0x30 [ 715.389490][ T30] __mutex_lock+0x5b8/0x9c0 [ 715.432869][ T30] ? addrconf_dad_work+0xcf/0x1500 [ 715.438104][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 715.453223][ T30] ? debug_object_deactivate+0x1f0/0x370 [ 715.458972][ T30] ? addrconf_dad_work+0xcf/0x1500 [ 715.469766][ T30] ? rtnl_lock+0x9/0x20 [ 715.474030][ T30] addrconf_dad_work+0xcf/0x1500 [ 715.479028][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 715.494309][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 715.500347][ T30] process_one_work+0x9c5/0x1b40 [ 715.505371][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 715.519447][ T30] ? __pfx_process_one_work+0x10/0x10 [ 715.525654][ T30] ? assign_work+0x1a0/0x250 [ 715.536456][ T30] worker_thread+0x6c8/0xf30 [ 715.560022][ T30] ? __pfx_worker_thread+0x10/0x10 [ 715.565241][ T30] kthread+0x2c1/0x3a0 [ 715.569471][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.590159][ T30] ? __pfx_kthread+0x10/0x10 [ 715.594842][ T30] ret_from_fork+0x45/0x80 [ 715.599319][ T30] ? __pfx_kthread+0x10/0x10 [ 715.607504][ T30] ret_from_fork_asm+0x1a/0x30 [ 715.620265][ T30] [ 715.623457][ T30] INFO: task dhcpcd:4750 blocked for more than 144 seconds. [ 715.639961][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 715.647650][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.667277][ T30] task:dhcpcd state:D stack:22752 pid:4750 tgid:4750 ppid:4749 flags:0x00000002 [ 715.685782][ T30] Call Trace: [ 715.689115][ T30] [ 715.696131][ T30] __schedule+0xf15/0x5d00 [ 715.719904][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 715.725211][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 715.753168][ T30] ? find_held_lock+0x2d/0x110 [ 715.758027][ T30] ? __pfx___schedule+0x10/0x10 [ 715.781425][ T30] ? schedule+0x298/0x350 [ 715.785855][ T30] ? __pfx_lock_release+0x10/0x10 [ 715.797004][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 715.810214][ T30] ? __mutex_trylock_common+0x78/0x250 [ 715.815792][ T30] schedule+0xe7/0x350 [ 715.826628][ T30] schedule_preempt_disabled+0x13/0x30 [ 715.841113][ T30] __mutex_lock+0x5b8/0x9c0 [ 715.845702][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 715.860175][ T4480] Bluetooth: hci18: command tx timeout [ 715.872099][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 715.877243][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 715.895650][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 715.901245][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 715.906774][ T30] ? avc_has_perm+0x11b/0x1c0 [ 715.946399][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 715.960210][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 715.965361][ T30] ? __lock_acquire+0xc5d/0x3b30 [ 715.975788][ T30] netlink_rcv_skb+0x16b/0x440 [ 715.986148][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 715.992313][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 715.997702][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 716.014307][ T30] netlink_unicast+0x542/0x820 [ 716.019161][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 716.027803][ T30] netlink_sendmsg+0x8b8/0xd70 [ 716.040127][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.055923][ T30] ? __import_iovec+0x1fd/0x6e0 [ 716.061350][ T30] ____sys_sendmsg+0xab5/0xc90 [ 716.066191][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 716.102720][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.108098][ T30] ? lock_acquire+0x1b1/0x560 [ 716.128456][ T30] ___sys_sendmsg+0x135/0x1e0 [ 716.149239][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.159915][ T30] ? __fget_light+0x173/0x210 [ 716.164679][ T30] __sys_sendmsg+0x117/0x1f0 [ 716.169336][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 716.191439][ T30] do_syscall_64+0xcd/0x250 [ 716.196067][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.209839][ T30] RIP: 0033:0x7ff7404a1a4b [ 716.214343][ T30] RSP: 002b:00007ffff6c6b3b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.233293][ T30] RAX: ffffffffffffffda RBX: 00007ff7403c96c0 RCX: 00007ff7404a1a4b [ 716.259764][ T30] RDX: 0000000000000000 RSI: 00007ffff6c7f568 RDI: 0000000000000018 [ 716.267821][ T30] RBP: 0000000000000018 R08: 0000000000000000 R09: 00007ffff6c7f568 [ 716.299215][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 716.312157][ T30] R13: 00007ffff6c7f568 R14: 0000000000000030 R15: 0000000000000001 [ 716.327017][ T30] [ 716.330889][ T30] INFO: task kworker/0:3:5134 blocked for more than 145 seconds. [ 716.338927][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 716.368480][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.383753][ T30] task:kworker/0:3 state:D stack:21264 pid:5134 tgid:5134 ppid:2 flags:0x00004000 [ 716.394923][ T30] Workqueue: events linkwatch_event [ 716.426389][ T30] Call Trace: [ 716.430482][ T30] [ 716.433481][ T30] __schedule+0xf15/0x5d00 [ 716.437974][ T30] ? __pfx_mark_lock+0x10/0x10 [ 716.458806][ T30] ? __pfx___schedule+0x10/0x10 [ 716.464521][ T30] ? schedule+0x298/0x350 [ 716.469013][ T30] ? __pfx_lock_release+0x10/0x10 [ 716.486152][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 716.493806][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.499092][ T30] schedule+0xe7/0x350 [ 716.516011][ T30] schedule_preempt_disabled+0x13/0x30 [ 716.522183][ T30] __mutex_lock+0x5b8/0x9c0 [ 716.526778][ T30] ? linkwatch_event+0x51/0xc0 [ 716.542668][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 716.547881][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 716.557800][ T30] ? __pfx_lock_release+0x10/0x10 [ 716.587234][ T30] ? linkwatch_event+0x51/0xc0 [ 716.592568][ T30] ? rtnl_lock+0x9/0x20 [ 716.596802][ T30] linkwatch_event+0x51/0xc0 [ 716.624410][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 716.630544][ T30] ? rcu_is_watching+0x12/0xc0 [ 716.635382][ T30] process_one_work+0x9c5/0x1b40 [ 716.651260][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 716.656383][ T30] ? __pfx_process_one_work+0x10/0x10 [ 716.670001][ T30] ? assign_work+0x1a0/0x250 [ 716.674694][ T30] worker_thread+0x6c8/0xf30 [ 716.679338][ T30] ? __kthread_parkme+0x148/0x220 [ 716.694365][ T30] ? __pfx_worker_thread+0x10/0x10 [ 716.699567][ T30] kthread+0x2c1/0x3a0 [ 716.704451][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 716.718563][ T30] ? __pfx_kthread+0x10/0x10 [ 716.723876][ T30] ret_from_fork+0x45/0x80 [ 716.728366][ T30] ? __pfx_kthread+0x10/0x10 [ 716.755625][ T30] ret_from_fork_asm+0x1a/0x30 [ 716.777862][ T30] [ 716.781186][ T30] INFO: task kworker/R-wg-cr:9807 blocked for more than 145 seconds. [ 716.789291][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 716.818403][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.839288][ T30] task:kworker/R-wg-cr state:D stack:30128 pid:9807 tgid:9807 ppid:2 flags:0x00004000 [ 716.850352][ T30] Call Trace: [ 716.853701][ T30] [ 716.856665][ T30] __schedule+0xf15/0x5d00 [ 716.874957][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 716.880743][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 716.886037][ T30] ? __pfx___schedule+0x10/0x10 [ 716.899928][ T30] ? schedule+0x298/0x350 [ 716.904346][ T30] ? __pfx_lock_release+0x10/0x10 [ 716.909449][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 716.925150][ T30] ? __mutex_trylock_common+0x78/0x250 [ 716.958679][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 716.969775][ T30] schedule+0xe7/0x350 [ 716.974023][ T30] schedule_preempt_disabled+0x13/0x30 [ 716.979554][ T30] __mutex_lock+0x5b8/0x9c0 [ 716.999955][ T30] ? worker_attach_to_pool+0x27/0x420 [ 717.005755][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.016808][ T30] ? rescuer_thread+0x3b0/0xd40 [ 717.022345][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.027437][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 717.040355][ T30] ? worker_attach_to_pool+0x27/0x420 [ 717.045845][ T30] worker_attach_to_pool+0x27/0x420 [ 717.055255][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.076336][ T30] rescuer_thread+0x3c0/0xd40 [ 717.084345][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.089661][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 717.095949][ T30] ? __kthread_parkme+0x148/0x220 [ 717.129416][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.148591][ T30] kthread+0x2c1/0x3a0 [ 717.159958][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.165243][ T30] ? __pfx_kthread+0x10/0x10 [ 717.189941][ T30] ret_from_fork+0x45/0x80 [ 717.194459][ T30] ? __pfx_kthread+0x10/0x10 [ 717.199195][ T30] ret_from_fork_asm+0x1a/0x30 [ 717.213807][ T30] [ 717.217038][ T30] INFO: task kworker/R-wg-cr:9874 blocked for more than 146 seconds. [ 717.239889][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 717.247600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.299925][ T30] task:kworker/R-wg-cr state:D stack:30128 pid:9874 tgid:9874 ppid:2 flags:0x00004000 [ 717.316889][ T30] Call Trace: [ 717.327000][ T30] [ 717.330367][ T30] __schedule+0xf15/0x5d00 [ 717.334866][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.341213][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.346562][ T30] ? __pfx___schedule+0x10/0x10 [ 717.360367][ T30] ? schedule+0x298/0x350 [ 717.364801][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.389954][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 717.394732][ T30] ? __mutex_trylock_common+0x78/0x250 [ 717.409968][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 717.415435][ T30] schedule+0xe7/0x350 [ 717.419569][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.455136][ T30] __mutex_lock+0x5b8/0x9c0 [ 717.481986][ T30] ? worker_attach_to_pool+0x27/0x420 [ 717.487553][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.503136][ T30] ? rescuer_thread+0x3b0/0xd40 [ 717.508072][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.519800][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 717.524907][ T30] ? worker_attach_to_pool+0x27/0x420 [ 717.538553][ T30] worker_attach_to_pool+0x27/0x420 [ 717.544581][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.560194][ T30] rescuer_thread+0x3c0/0xd40 [ 717.564962][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.581884][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 717.587214][ T30] ? __kthread_parkme+0x148/0x220 [ 717.602617][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 717.607898][ T30] kthread+0x2c1/0x3a0 [ 717.612180][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.617442][ T30] ? __pfx_kthread+0x10/0x10 [ 717.656663][ T30] ret_from_fork+0x45/0x80 [ 717.678374][ T30] ? __pfx_kthread+0x10/0x10 [ 717.696606][ T30] ret_from_fork_asm+0x1a/0x30 [ 717.707626][ T30] [ 717.711094][ T30] INFO: task syz-executor:9922 blocked for more than 146 seconds. [ 717.718945][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 717.729758][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.738471][ T30] task:syz-executor state:D stack:24048 pid:9922 tgid:9922 ppid:1 flags:0x00000004 [ 717.761278][ T30] Call Trace: [ 717.764620][ T30] [ 717.767587][ T30] __schedule+0xf15/0x5d00 [ 717.786723][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.816255][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.825115][ T30] ? find_held_lock+0x2d/0x110 [ 717.839966][ T30] ? __pfx___schedule+0x10/0x10 [ 717.844888][ T30] ? schedule+0x298/0x350 [ 717.849276][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.867836][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 717.873040][ T30] ? __mutex_trylock_common+0x78/0x250 [ 717.878601][ T30] schedule+0xe7/0x350 [ 717.896181][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.901923][ T30] __mutex_lock+0x5b8/0x9c0 [ 717.906491][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 717.922580][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.927694][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 717.933475][ T4480] Bluetooth: hci18: command tx timeout [ 717.939903][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 717.945023][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 717.985969][ T30] netlink_rcv_skb+0x16b/0x440 [ 718.000230][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 718.005780][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 718.016785][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 718.028226][ T30] netlink_unicast+0x542/0x820 [ 718.033890][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 718.039242][ T30] netlink_sendmsg+0x8b8/0xd70 [ 718.055863][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.061649][ T30] __sys_sendto+0x47f/0x4e0 [ 718.066221][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 718.077201][ T30] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 718.086040][ T30] ? kasan_quarantine_put+0x10a/0x240 [ 718.100231][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 718.105510][ T30] ? __fput+0x6c5/0xbb0 [ 718.116428][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 718.121556][ T30] ? do_syscall_64+0x91/0x250 [ 718.126306][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 718.152984][ T30] do_syscall_64+0xcd/0x250 [ 718.157591][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.177487][ T30] RIP: 0033:0x7f0a5d97796c [ 718.182623][ T30] RSP: 002b:00007ffee80273c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 718.219800][ T30] RAX: ffffffffffffffda RBX: 00007f0a5e634620 RCX: 00007f0a5d97796c [ 718.227851][ T30] RDX: 000000000000002c RSI: 00007f0a5e634670 RDI: 0000000000000003 [ 718.249565][ T30] RBP: 0000000000000000 R08: 00007ffee8027414 R09: 000000000000000c [ 718.258395][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 718.299621][ T30] R13: 0000000000000000 R14: 00007f0a5e634670 R15: 0000000000000000 [ 718.326795][ T30] [ 718.331815][ T30] INFO: task syz-executor:10068 blocked for more than 147 seconds. [ 718.340993][ T2452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.350852][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.370243][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 718.377930][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.397326][ T30] task:syz-executor state:D stack:24976 pid:10068 tgid:10068 ppid:1 flags:0x00004006 [ 718.414174][ T30] Call Trace: [ 718.417524][ T30] [ 718.436463][ T30] __schedule+0xf15/0x5d00 [ 718.451664][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 718.456954][ T30] ? add_lock_to_list+0x17d/0x380 [ 718.478414][ T30] ? __pfx___schedule+0x10/0x10 [ 718.486226][ T30] ? schedule+0x298/0x350 [ 718.498631][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.506202][ T30] ? mark_lock+0xb5/0xc60 [ 718.520300][ T30] ? __pfx_mark_lock+0x10/0x10 [ 718.525256][ T30] schedule+0xe7/0x350 [ 718.529386][ T30] schedule_timeout+0x258/0x2a0 [ 718.544422][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 718.552088][ T30] ? mark_held_locks+0x9f/0xe0 [ 718.556925][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.569763][ T30] __wait_for_common+0x3de/0x5f0 [ 718.574781][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 718.586722][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 718.609919][ T30] ? mark_held_locks+0x9f/0xe0 [ 718.614791][ T30] __flush_work+0x5bd/0xc60 [ 718.619344][ T30] ? __pfx___flush_work+0x10/0x10 [ 718.645026][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.655890][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 718.672199][ T30] ? mark_held_locks+0x9f/0xe0 [ 718.677056][ T30] ? __pfx___might_resched+0x10/0x10 [ 718.702933][ T30] ? queue_work_on+0xc6/0x140 [ 718.715308][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 718.727612][ T30] unregister_netdevice_many_notify+0x12c1/0x19f0 [ 718.739486][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 718.745445][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 718.776374][ T30] ? nsim_destroy+0x6f/0x6a0 [ 718.790124][ T30] unregister_netdevice_queue+0x307/0x3f0 [ 718.796014][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 718.816609][ T30] nsim_destroy+0x107/0x6a0 [ 718.825582][ T30] __nsim_dev_port_del+0x189/0x240 [ 718.836438][ T30] nsim_dev_reload_destroy+0x108/0x4d0 [ 718.849249][ T30] nsim_drv_remove+0x52/0x1d0 [ 718.854412][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 718.864067][ T30] device_remove+0xc8/0x170 [ 718.868641][ T30] device_release_driver_internal+0x44a/0x610 [ 718.875693][ T30] bus_remove_device+0x22f/0x420 [ 718.889857][ T30] device_del+0x396/0x9f0 [ 718.894291][ T30] ? __pfx_device_del+0x10/0x10 [ 718.899197][ T30] ? rcu_is_watching+0x12/0xc0 [ 718.941429][ T30] device_unregister+0x1d/0xc0 [ 718.946320][ T30] del_device_store+0x346/0x4b0 [ 718.962208][ T30] ? __pfx_del_device_store+0x10/0x10 [ 718.967696][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 718.973767][ T30] ? __pfx__copy_from_iter+0x10/0x10 [ 718.979127][ T30] ? __pfx_del_device_store+0x10/0x10 [ 718.995721][ T30] bus_attr_store+0x76/0xa0 [ 719.000987][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 719.006245][ T30] sysfs_kf_write+0x117/0x170 [ 719.027111][ T30] kernfs_fop_write_iter+0x343/0x500 [ 719.032621][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 719.037884][ T30] vfs_write+0x6b6/0x1140 [ 719.053824][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 719.060278][ T30] ? __pfx_vfs_write+0x10/0x10 [ 719.065113][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 719.071322][ T30] ? do_user_addr_fault+0x6d7/0xe50 [ 719.076598][ T30] ? __fget_light+0x173/0x210 [ 719.117818][ T30] ksys_write+0x12f/0x260 [ 719.137521][ T30] ? __pfx_ksys_write+0x10/0x10 [ 719.144283][ T30] do_syscall_64+0xcd/0x250 [ 719.148872][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.167029][ T30] RIP: 0033:0x7f606fd7475f [ 719.171834][ T30] RSP: 002b:00007ffdd4277410 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 719.185867][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f606fd7475f [ 719.199523][ T30] RDX: 0000000000000001 RSI: 00007ffdd4277460 RDI: 0000000000000005 [ 719.216271][ T30] RBP: 00007f606fde45a0 R08: 0000000000000000 R09: 00007ffdd4277267 [ 719.255003][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 719.278228][ T30] R13: 00007ffdd4277460 R14: 00007f6070a34620 R15: 0000000000000003 [ 719.295675][ T30] [ 719.298818][ T30] INFO: task syz-executor:10258 blocked for more than 148 seconds. [ 719.308205][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 719.329764][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.338586][ T30] task:syz-executor state:D stack:26736 pid:10258 tgid:10258 ppid:1 flags:0x00000004 [ 719.364400][ T30] Call Trace: [ 719.367746][ T30] [ 719.371334][ T30] __schedule+0xf15/0x5d00 [ 719.375822][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 719.405898][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 719.424943][ T30] ? find_held_lock+0x2d/0x110 [ 719.437596][ T30] ? __pfx___schedule+0x10/0x10 [ 719.442963][ T30] ? schedule+0x298/0x350 [ 719.447352][ T30] ? __pfx_lock_release+0x10/0x10 [ 719.455560][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 719.469857][ T30] ? __mutex_trylock_common+0x78/0x250 [ 719.475424][ T30] schedule+0xe7/0x350 [ 719.479557][ T30] schedule_preempt_disabled+0x13/0x30 [ 719.496877][ T30] __mutex_lock+0x5b8/0x9c0 [ 719.501868][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 719.507052][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 719.519836][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 719.550032][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 719.555066][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 719.565919][ T30] ? avc_has_perm+0x11b/0x1c0 [ 719.574596][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 719.587657][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 719.599758][ T30] ? __lock_acquire+0xc5d/0x3b30 [ 719.604789][ T30] netlink_rcv_skb+0x16b/0x440 [ 719.609614][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 719.620746][ T2442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.644550][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 719.654398][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 719.666620][ T30] netlink_unicast+0x542/0x820 [ 719.672050][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 719.677412][ T30] netlink_sendmsg+0x8b8/0xd70 [ 719.700126][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.705523][ T30] __sys_sendto+0x47f/0x4e0 [ 719.739834][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 719.744962][ T30] ? __pfx_task_mm_cid_work+0x10/0x10 [ 719.759871][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 719.765349][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 719.777052][ T30] ? do_syscall_64+0x91/0x250 [ 719.787244][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.793233][ T30] do_syscall_64+0xcd/0x250 [ 719.797821][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.814873][ T30] RIP: 0033:0x7f4fabd7796c [ 719.819361][ T30] RSP: 002b:00007ffebe7c6990 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 719.835270][ T30] RAX: ffffffffffffffda RBX: 00007f4faca34620 RCX: 00007f4fabd7796c [ 719.869758][ T30] RDX: 000000000000003c RSI: 00007f4faca34670 RDI: 0000000000000003 [ 719.877814][ T30] RBP: 0000000000000000 R08: 00007ffebe7c69e4 R09: 000000000000000c [ 719.901416][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 719.909472][ T30] R13: 0000000000000000 R14: 00007f4faca34670 R15: 0000000000000000 [ 719.928624][ T30] [ 719.932198][ T30] INFO: task kworker/1:6:10277 blocked for more than 148 seconds. [ 719.951640][ T30] Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 719.959666][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.978687][ T30] task:kworker/1:6 state:D stack:30816 pid:10277 tgid:10277 ppid:2 flags:0x00004000 [ 719.989507][ T30] Call Trace: [ 719.999763][ T30] [ 720.002762][ T30] __schedule+0xf15/0x5d00 [ 720.007227][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 720.032740][ T30] ? __pfx_lock_release+0x10/0x10 [ 720.048434][ T30] ? __pfx___schedule+0x10/0x10 [ 720.061678][ T30] ? schedule+0x298/0x350 [ 720.066100][ T30] ? __pfx_lock_release+0x10/0x10 [ 720.089654][ T30] schedule+0xe7/0x350 [ 720.093982][ T30] ? __pfx_worker_thread+0x10/0x10 [ 720.099147][ T30] schedule_preempt_disabled+0x13/0x30 [ 720.115957][ T30] kthread+0x1fe/0x3a0 [ 720.120654][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 720.125921][ T30] ? __pfx_kthread+0x10/0x10 [ 720.140858][ T30] ret_from_fork+0x45/0x80 [ 720.145468][ T30] ? __pfx_kthread+0x10/0x10 [ 720.155733][ T30] ret_from_fork_asm+0x1a/0x30 [ 720.180090][ T30] [ 720.183169][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 720.209578][ T30] [ 720.209578][ T30] Showing all locks held in the system: [ 720.224698][ T30] 1 lock held by kworker/R-mm_pe/13: [ 720.230625][ T30] #0: ffffffff8da6b748 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_detach_from_pool+0x95/0x3f0 [ 720.255869][ T30] 2 locks held by kworker/1:0/25: [ 720.261815][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.279889][ T30] 1 lock held by khungtaskd/30: [ 720.284823][ T30] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 720.306320][ T30] 3 locks held by kworker/u8:3/51: [ 720.312017][ T30] #0: ffff88802a562148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 720.339923][ T30] #1: ffffc90000bc7d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 720.371732][ T30] #2: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x1500 [ 720.384331][ T30] 6 locks held by kworker/1:2/930: [ 720.389499][ T30] 1 lock held by kworker/1:1H/1666: [ 720.395744][ T30] 1 lock held by dhcpcd/4750: [ 720.412020][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 720.425422][ T30] 2 locks held by getty/4842: [ 720.438394][ T30] #0: ffff88802af8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 720.468518][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 720.491675][ T30] 1 lock held by kworker/u9:7/5099: [ 720.496935][ T30] #0: ffffffff8da6b748 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x27/0x420 [ 720.557925][ T30] 2 locks held by kworker/1:3/5125: [ 720.563704][ T30] 3 locks held by kworker/0:3/5134: [ 720.568946][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 720.590294][ T30] #1: ffffc9000348fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 720.608940][ T30] #2: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 720.626401][ T30] 3 locks held by kworker/1:4/5150: [ 720.632165][ T30] 3 locks held by kworker/1:5/5167: [ 720.637411][ T30] 1 lock held by kworker/R-wg-cr/5533: [ 720.668239][ T30] 1 lock held by kworker/R-wg-cr/9807: [ 720.690317][ T30] #0: ffffffff8da6b748 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x27/0x420 [ 720.715774][ T30] 1 lock held by kworker/R-wg-cr/9872: [ 720.723099][ T30] #0: ffffffff8da6b748 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x27/0x420 [ 720.739578][ T30] 1 lock held by kworker/R-wg-cr/9874: [ 720.745748][ T30] #0: ffffffff8da6b748 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x27/0x420 [ 720.770213][ T30] 1 lock held by kworker/R-wg-cr/9876: [ 720.775734][ T30] #0: ffffffff8da6b748 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x27/0x420 [ 720.796670][ T30] 1 lock held by syz-executor/9922: [ 720.804540][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 720.826300][ T30] 8 locks held by syz-executor/10068: [ 720.832465][ T30] #0: ffff888029026420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 720.869293][ T30] #1: ffff88802ed73888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x281/0x500 [ 720.902439][ T30] #2: ffff88802343d008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a4/0x500 [ 720.929610][ T30] #3: ffffffff8ed86da8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 720.940711][ T30] #4: ffff8880636ba0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 720.961545][ T30] #5: ffff8880636bb250 (&devlink->lock_key#23){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 720.979612][ T30] #6: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6a0 [ 720.999765][ T30] #7: ffffffff8da555d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x531/0x19f0 [ 721.044396][ T30] 3 locks held by kworker/0:4/10196: [ 721.050333][ T30] #0: ffff888015481948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 721.085719][ T30] #1: ffffc900031dfd80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 721.097273][ T30] #2: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x7d/0x10e0 [ 721.117459][ T30] 1 lock held by syz.0.1111/10205: [ 721.122966][ T30] 1 lock held by syz-executor/10258: [ 721.128284][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.149799][ T30] 3 locks held by syz.2.1126/10279: [ 721.155054][ T30] 1 lock held by syz.1.1127/10284: [ 721.161722][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x121/0x680 [ 721.185464][ T30] 1 lock held by syz-executor/10288: [ 721.191372][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.220249][ T30] 1 lock held by syz-executor/10293: [ 721.225605][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.247496][ T30] 1 lock held by syz-executor/10296: [ 721.258599][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.288094][ T30] 1 lock held by syz-executor/10302: [ 721.299791][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.309340][ T30] 1 lock held by syz-executor/10308: [ 721.347359][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.371488][ T30] 1 lock held by syz-executor/10316: [ 721.376845][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.401922][ T30] 1 lock held by syz-executor/10320: [ 721.407273][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.427758][ T30] 1 lock held by syz-executor/10323: [ 721.433798][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.486858][ T30] 1 lock held by syz-executor/10330: [ 721.500344][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.514366][ T30] 1 lock held by syz-executor/10337: [ 721.525247][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.539778][ T30] 1 lock held by syz-executor/10344: [ 721.545120][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.571653][ T30] 1 lock held by syz-executor/10349: [ 721.579214][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.621320][ T30] 1 lock held by syz-executor/10354: [ 721.626678][ T30] #0: ffffffff8f74bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 721.654281][ T30] [ 721.656668][ T30] ============================================= [ 721.656668][ T30] [ 721.679972][ T30] NMI backtrace for cpu 0 [ 721.684360][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 721.694287][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 721.704383][ T30] Call Trace: [ 721.707691][ T30] [ 721.710650][ T30] dump_stack_lvl+0x116/0x1f0 [ 721.715383][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 721.720385][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 721.726526][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 721.732571][ T30] watchdog+0xf86/0x1240 [ 721.736865][ T30] ? __pfx_watchdog+0x10/0x10 [ 721.741593][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 721.746877][ T30] ? __kthread_parkme+0x148/0x220 [ 721.751948][ T30] ? __pfx_watchdog+0x10/0x10 [ 721.756665][ T30] kthread+0x2c1/0x3a0 [ 721.760784][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 721.766027][ T30] ? __pfx_kthread+0x10/0x10 [ 721.770666][ T30] ret_from_fork+0x45/0x80 [ 721.775139][ T30] ? __pfx_kthread+0x10/0x10 [ 721.779772][ T30] ret_from_fork_asm+0x1a/0x30 [ 721.784592][ T30] [ 721.789643][ T30] Sending NMI from CPU 0 to CPUs 1: [ 721.795775][ C1] NMI backtrace for cpu 1 [ 721.795789][ C1] CPU: 1 PID: 10279 Comm: syz.2.1126 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 721.795818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 721.795833][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x60 [ 721.795867][ C1] Code: c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 d4 f3 75 7e <65> 8b 05 d5 f3 75 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 [ 721.795892][ C1] RSP: 0000:ffffc90000a18508 EFLAGS: 00000002 [ 721.795912][ C1] RAX: 0000000080010002 RBX: ffffc90000a18590 RCX: ffffffff813cdd0d [ 721.795930][ C1] RDX: ffff888026ea5a00 RSI: 0000000000000001 RDI: 0000000000000001 [ 721.795946][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 721.795962][ C1] R10: 0000000000000002 R11: 0000000000000001 R12: ffffffff90787ff2 [ 721.795995][ C1] R13: ffffffff90787ff7 R14: 0000000000000002 R15: ffffc90000a185c5 [ 721.796013][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 721.796040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 721.796059][ C1] CR2: 0000001b30e12ff8 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 721.796076][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 721.796092][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 721.796109][ C1] Call Trace: [ 721.796117][ C1] [ 721.796125][ C1] ? show_regs+0x8c/0xa0 [ 721.796163][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 721.796206][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 721.796241][ C1] ? nmi_handle+0x1a9/0x5c0 [ 721.796280][ C1] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 721.796307][ C1] ? default_do_nmi+0x6a/0x160 [ 721.796333][ C1] ? exc_nmi+0x170/0x1e0 [ 721.796357][ C1] ? end_repeat_nmi+0xf/0x53 [ 721.796385][ C1] ? unwind_next_frame+0x60d/0x23a0 [ 721.796426][ C1] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 721.796457][ C1] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 721.796485][ C1] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 721.796511][ C1] [ 721.796518][ C1] [ 721.796526][ C1] unwind_next_frame+0x61c/0x23a0 [ 721.796566][ C1] ? __sanitizer_cov_trace_switch+0x6/0x90 [ 721.796594][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 721.796630][ C1] arch_stack_walk+0x100/0x170 [ 721.796659][ C1] ? __sanitizer_cov_trace_switch+0x6/0x90 [ 721.796687][ C1] stack_trace_save+0x95/0xd0 [ 721.796720][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 721.796767][ C1] ? hlock_class+0x4e/0x130 [ 721.796796][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 721.796852][ C1] kasan_save_stack+0x33/0x60 [ 721.796889][ C1] ? kasan_save_stack+0x33/0x60 [ 721.796926][ C1] ? kasan_save_track+0x14/0x30 [ 721.796963][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 721.796998][ C1] ? dummy_urb_enqueue+0x8d/0x8a0 [ 721.797033][ C1] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 721.797065][ C1] ? usb_submit_urb+0x87c/0x1730 [ 721.797102][ C1] ? ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 721.797138][ C1] ? __usb_hcd_giveback_urb+0x466/0x6e0 [ 721.797169][ C1] ? usb_hcd_giveback_urb+0x396/0x450 [ 721.797201][ C1] ? dummy_timer+0x17f6/0x3900 [ 721.797234][ C1] ? __hrtimer_run_queues+0x20c/0xcc0 [ 721.797263][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 721.797294][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 721.797346][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 721.797378][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 721.797403][ C1] ? __sanitizer_cov_trace_switch+0x6/0x90 [ 721.797443][ C1] kasan_save_track+0x14/0x30 [ 721.797480][ C1] __kasan_kmalloc+0xaa/0xb0 [ 721.797516][ C1] dummy_urb_enqueue+0x8d/0x8a0 [ 721.797548][ C1] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 721.797582][ C1] usb_hcd_submit_urb+0x2d1/0x2090 [ 721.797615][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 721.797646][ C1] ? lock_acquire+0x1b1/0x560 [ 721.797684][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 721.797727][ C1] ? find_held_lock+0x2d/0x110 [ 721.797757][ C1] ? ath9k_hif_usb_reg_in_cb+0x487/0x690 [ 721.797793][ C1] usb_submit_urb+0x87c/0x1730 [ 721.797829][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 721.797857][ C1] ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 721.797893][ C1] __usb_hcd_giveback_urb+0x466/0x6e0 [ 721.797924][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 721.797956][ C1] dummy_timer+0x17f6/0x3900 [ 721.797992][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 721.798033][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 721.798061][ C1] ? __pfx_lock_release+0x10/0x10 [ 721.798099][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 721.798131][ C1] ? timerqueue_del+0x83/0x150 [ 721.798168][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 721.798200][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 721.798232][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 721.798262][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 721.798304][ C1] hrtimer_interrupt+0x31b/0x800 [ 721.798337][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 721.798378][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 721.798410][ C1] [ 721.798418][ C1] [ 721.798425][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 721.798457][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x6/0x90 [ 721.798484][ C1] Code: 89 fe bf 07 00 00 00 e9 f8 fd ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 <41> 55 41 54 49 89 fc 55 48 89 f5 53 48 8b 46 08 48 83 f8 20 74 6b [ 721.798526][ C1] RSP: 0000:ffffc900036df6e0 EFLAGS: 00000206 [ 721.798545][ C1] RAX: 0000000000000000 RBX: ffffc900036df770 RCX: 0000000000000001 [ 721.798562][ C1] RDX: 0000000000000005 RSI: ffffffff8b29cba0 RDI: 0000000000000005 [ 721.798579][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 721.798595][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff907881a8 [ 721.798611][ C1] R13: 0000000000000005 R14: ffffffff907881ac R15: ffffc900036df7a5 [ 721.798635][ C1] unwind_next_frame+0x6c1/0x23a0 [ 721.798676][ C1] ? kcov_close+0x10/0x20 [ 721.798701][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 721.798737][ C1] arch_stack_walk+0x100/0x170 [ 721.798765][ C1] ? kcov_close+0x10/0x20 [ 721.798790][ C1] stack_trace_save+0x95/0xd0 [ 721.798824][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 721.798861][ C1] save_stack+0x162/0x1f0 [ 721.798890][ C1] ? __pfx_save_stack+0x10/0x10 [ 721.798917][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 721.798956][ C1] ? free_unref_page+0x64a/0xe40 [ 721.798986][ C1] ? vfree+0x181/0x7a0 [ 721.799019][ C1] ? kcov_put+0x2a/0x40 [ 721.799042][ C1] ? kcov_close+0x10/0x20 [ 721.799070][ C1] __reset_page_owner+0x8d/0x400 [ 721.799102][ C1] free_unref_page+0x64a/0xe40 [ 721.799136][ C1] vfree+0x181/0x7a0 [ 721.799181][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 721.799212][ C1] ? __pfx_kcov_close+0x10/0x10 [ 721.799235][ C1] kcov_put+0x2a/0x40 [ 721.799257][ C1] kcov_close+0x10/0x20 [ 721.799280][ C1] __fput+0x408/0xbb0 [ 721.799307][ C1] ? cleanup_mnt+0x266/0x450 [ 721.799336][ C1] task_work_run+0x14e/0x250 [ 721.799359][ C1] ? __pfx_task_work_run+0x10/0x10 [ 721.799382][ C1] ? switch_task_namespaces+0xe0/0x110 [ 721.799414][ C1] do_exit+0xa9b/0x2ba0 [ 721.799456][ C1] ? get_signal+0x8f2/0x2710 [ 721.799485][ C1] ? __pfx_do_exit+0x10/0x10 [ 721.799520][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 721.799546][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 721.799574][ C1] do_group_exit+0xd3/0x2a0 [ 721.799610][ C1] get_signal+0x2616/0x2710 [ 721.799643][ C1] ? __pfx_get_signal+0x10/0x10 [ 721.799671][ C1] ? __pfx_lock_release+0x10/0x10 [ 721.799712][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 721.799747][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 721.799784][ C1] irqentry_exit_to_user_mode+0x139/0x280 [ 721.799820][ C1] asm_exc_page_fault+0x26/0x30 [ 721.799843][ C1] RIP: 0033:0x7f4214c55986 [ 721.799861][ C1] Code: Unable to access opcode bytes at 0x7f4214c5595c. [ 721.799872][ C1] RSP: 002b:00007fff4ce1cbf0 EFLAGS: 00010202 [ 721.799890][ C1] RAX: 000000000000d008 RBX: 00007f4215a35720 RCX: 0000000000000000 [ 721.799907][ C1] RDX: 0000001b30e13000 RSI: 0000000000000008 RDI: 00007f4215a35720 [ 721.799923][ C1] RBP: ffffffff8ad7e3cf R08: 00007f4214401108 R09: 00007f4214401000 [ 721.799941][ C1] R10: 0000000000000008 R11: 000000008ae7b905 R12: 0000000000000085 [ 721.799956][ C1] R13: 00007f4214f03ff8 R14: 000000000000006f R15: ffffffffffff3000 [ 721.799974][ C1] ? plist_add+0xaf/0x4d0 [ 721.800014][ C1] [ 722.693045][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 722.699967][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 722.709903][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 722.720004][ T30] Call Trace: [ 722.723327][ T30] [ 722.726300][ T30] dump_stack_lvl+0x3d/0x1f0 [ 722.730953][ T30] panic+0x6f5/0x7a0 [ 722.734906][ T30] ? __pfx_panic+0x10/0x10 [ 722.739383][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 722.744989][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 722.751048][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 722.756461][ T30] ? watchdog+0xd3d/0x1240 [ 722.760915][ T30] ? watchdog+0xd30/0x1240 [ 722.765373][ T30] watchdog+0xd4e/0x1240 [ 722.769659][ T30] ? __pfx_watchdog+0x10/0x10 [ 722.774370][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 722.779617][ T30] ? __kthread_parkme+0x148/0x220 [ 722.784689][ T30] ? __pfx_watchdog+0x10/0x10 [ 722.789406][ T30] kthread+0x2c1/0x3a0 [ 722.793521][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 722.798763][ T30] ? __pfx_kthread+0x10/0x10 [ 722.803405][ T30] ret_from_fork+0x45/0x80 [ 722.807877][ T30] ? __pfx_kthread+0x10/0x10 [ 722.812513][ T30] ret_from_fork_asm+0x1a/0x30 [ 722.817336][ T30] [ 722.821693][ T30] Kernel Offset: disabled [ 722.826056][ T30] Rebooting in 86400 seconds..