last executing test programs: 9m6.940219388s ago: executing program 32 (id=580): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 6m10.127102442s ago: executing program 33 (id=3911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x703d27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4008810) 4m22.320077051s ago: executing program 3 (id=5483): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3f7ff, 0x4) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x100, 0xe, 0x1, 0x7}) 4m22.128274634s ago: executing program 3 (id=5489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) 4m21.960861751s ago: executing program 3 (id=5493): syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m21.829650449s ago: executing program 3 (id=5497): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m21.697883993s ago: executing program 3 (id=5500): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') 4m21.645168138s ago: executing program 3 (id=5502): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000006c80)={0x44, &(0x7f0000006a80)={0x20, 0x0, 0x3, "c86a8d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c40)={0x20, 0x89, 0x2}}) 4m6.57912337s ago: executing program 34 (id=5502): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000006c80)={0x44, &(0x7f0000006a80)={0x20, 0x0, 0x3, "c86a8d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c40)={0x20, 0x89, 0x2}}) 3m37.455140691s ago: executing program 1 (id=6097): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xc2, 0x54, 0x8, 0x112a, 0x5, 0xbe68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1f, 0x0, 0x0, 0x97, 0xde, 0xbe}}]}}]}}, 0x0) 3m36.127887735s ago: executing program 1 (id=6115): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 3m36.037826432s ago: executing program 1 (id=6116): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[], 0x1) 3m35.950271947s ago: executing program 1 (id=6118): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffe, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x40003, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x3, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0x6, 0x6, 0x93, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x9, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0xb, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x400, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x20000002, 0x40, 0x40000409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 3m35.770688657s ago: executing program 1 (id=6122): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f0000000000)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 3m35.714294945s ago: executing program 1 (id=6123): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8) acct(&(0x7f0000000100)='./file0/bus\x00') 3m20.670575003s ago: executing program 35 (id=6123): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8) acct(&(0x7f0000000100)='./file0/bus\x00') 3m12.847223836s ago: executing program 6 (id=6407): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m12.735383186s ago: executing program 6 (id=6409): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) listen(r0, 0x9c92) listen(r0, 0x4) 3m12.578950446s ago: executing program 6 (id=6411): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 3m12.459555749s ago: executing program 6 (id=6414): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 3m12.264808543s ago: executing program 6 (id=6419): quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x3, 0x80000004, 0x883}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0) 3m11.860184435s ago: executing program 6 (id=6429): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1, 0x2}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) 3m11.623293546s ago: executing program 36 (id=6429): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1, 0x2}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) 1m39.214114442s ago: executing program 2 (id=7803): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m38.907492513s ago: executing program 2 (id=7807): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/48, 0x30}], 0x1, 0x3, 0x0, 0x0) 1m38.707637669s ago: executing program 2 (id=7808): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m38.54743154s ago: executing program 2 (id=7812): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 1m38.284775671s ago: executing program 2 (id=7817): socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) 1m37.320267721s ago: executing program 2 (id=7826): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 1m36.948519532s ago: executing program 37 (id=7826): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 27.76354685s ago: executing program 8 (id=8485): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 26.247432957s ago: executing program 8 (id=8500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 25.987372411s ago: executing program 8 (id=8504): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRES8]) 25.701795133s ago: executing program 8 (id=8508): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 25.466716226s ago: executing program 8 (id=8511): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x0, 0x1, {0x3, 0x0, 0x4, 0x3, 0xc2}, 0xffffffff}) tkill(r0, 0x7) 24.772062237s ago: executing program 8 (id=8515): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) iopl(0x3) readv(r1, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) 24.30074509s ago: executing program 38 (id=8515): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) iopl(0x3) readv(r1, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) 6.112188358s ago: executing program 0 (id=8623): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 5.548580644s ago: executing program 4 (id=8625): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r0, &(0x7f0000000200)=""/209, 0x128) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 5.161853251s ago: executing program 0 (id=8628): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x4, 0x80000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1}) close(r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 4.644908408s ago: executing program 0 (id=8629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000005300000085000000a00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.37550408s ago: executing program 9 (id=8634): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.931396245s ago: executing program 0 (id=8636): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x0f\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x00\x00K&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xff\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\xa8&t&A0\xa7\xef\x9cL\x8e1Kg\x83\x1c\x9e\x117\\X1\xbd\x11\xbf\xa8\xc6\xbf)\xf7\x83\a\xb0c{T\xc5\xe7\xdf.B\xd6\xb4w\xc8y\xc8Q\x18\xd7\xb4F\x9d\x0eO?\bx\x11\xd7\'\xf8\x12#\x9f\xcd\xedr\xa7\xa8\x97\xc9P\x15\x8a\x8f\v\xfd\t\x03W\xd2\x1cQ\xe4\xd3\xb4fAw\xa4U\xc5\xe4\xb8\x13\xecp\xb9~\xf9\xf8\xca8\x8f\x1diG}\xc8Ph\x00\xc3DN\xeeNLu\x95\xdelQaq\x0e\xd3\xb7^8\x9a\'\x16^\f|\xd8\xb4\xeb\x01v\xde', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2.882699197s ago: executing program 9 (id=8637): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) 2.425799569s ago: executing program 4 (id=8638): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, 0x0, 0x0, 0x1b94e618}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.252995271s ago: executing program 4 (id=8639): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) 2.058856452s ago: executing program 9 (id=8642): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0000000500000002000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.887565942s ago: executing program 7 (id=8643): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 1.639279457s ago: executing program 0 (id=8645): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.615907204s ago: executing program 7 (id=8646): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r0) 1.380194198s ago: executing program 7 (id=8648): prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300, 0x0, 0x0, 0x40040}, 0x24004801) 1.270118096s ago: executing program 4 (id=8649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.124529919s ago: executing program 4 (id=8650): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 1.079153706s ago: executing program 5 (id=8651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 992.665547ms ago: executing program 4 (id=8652): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x8, 0x3, "4af397"}, 0x0, 0x0, 0x0, 0x0}) 988.917318ms ago: executing program 9 (id=8653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfe18, &(0x7f0000000000)=ANY=[], 0x0) 756.697848ms ago: executing program 5 (id=8654): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 752.359824ms ago: executing program 9 (id=8655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X'], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) 611.971368ms ago: executing program 5 (id=8656): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setuid(0xee01) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendto$packet(r0, &(0x7f0000000080)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x8, r2, 0x1, 0x0, 0x6, @random="ad444650e878"}, 0x14) 611.70724ms ago: executing program 7 (id=8657): sched_setattr(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaafb2c9b3f446a73d1aaaabbac1414bb"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 456.166078ms ago: executing program 5 (id=8658): r0 = socket$kcm(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 406.171549ms ago: executing program 7 (id=8659): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 370.182229ms ago: executing program 0 (id=8660): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000400) r0 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 268.3513ms ago: executing program 5 (id=8661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[{0x10, 0x11a, 0x7}], 0x10}, 0x80) 121.705517ms ago: executing program 7 (id=8662): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 120.953511ms ago: executing program 9 (id=8663): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffd80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000080)=""/46, 0x2e}], 0x2}, 0x12101) 0s ago: executing program 5 (id=8664): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 537.705147][ T30] audit: type=1326 audit(2000000863.982:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22207 comm="syz.4.7241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 537.762819][ T30] audit: type=1326 audit(2000000863.982:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22207 comm="syz.4.7241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 537.842066][ T30] audit: type=1326 audit(2000000863.992:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22207 comm="syz.4.7241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 537.900650][ T30] audit: type=1326 audit(2000000863.992:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22207 comm="syz.4.7241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 538.229663][T22248] mkiss: ax0: crc mode is auto. [ 538.295210][T22252] netlink: 'syz.8.7260': attribute type 3 has an invalid length. [ 538.377568][T22259] delete_channel: no stack [ 539.297371][T22295] netlink: 'syz.9.7280': attribute type 2 has an invalid length. [ 539.900524][T22303] SELinux: failed to load policy [ 540.058120][T22311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7288'. [ 540.517974][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 540.517992][ T30] audit: type=1400 audit(2000000867.142:1432): avc: denied { name_connect } for pid=22342 comm="syz.7.7303" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 540.809004][T22354] Bluetooth: MGMT ver 1.23 [ 540.900182][T22359] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 541.149908][T22369] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7315'. [ 541.248946][T22374] netem: incorrect gi model size [ 541.261258][T22374] netem: change failed [ 541.497790][T22389] SELinux: Context : is not valid (left unmapped). [ 541.536994][ T30] audit: type=1400 audit(2000000868.162:1433): avc: denied { relabelto } for pid=22388 comm="syz.4.7324" name="rdma.current" dev="tmpfs" ino=8264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 541.631245][ T30] audit: type=1400 audit(2000000868.162:1434): avc: denied { associate } for pid=22388 comm="syz.4.7324" name="rdma.current" dev="tmpfs" ino=8264 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 541.696263][ T30] audit: type=1400 audit(2000000868.242:1435): avc: denied { unlink } for pid=5858 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=8264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 542.286359][T16981] hid-multitouch 0005:0457:0009.0087: unknown main item tag 0x0 [ 542.329281][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7345'. [ 542.331534][T16993] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 542.350821][T16981] hid-multitouch 0005:0457:0009.0087: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 542.364845][T22434] veth0_macvtap: left promiscuous mode [ 542.502355][T16993] usb 5-1: Using ep0 maxpacket: 16 [ 542.516576][T16993] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 542.531688][T16993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.550277][T16993] usb 5-1: Product: syz [ 542.554721][T16993] usb 5-1: Manufacturer: syz [ 542.559413][T16993] usb 5-1: SerialNumber: syz [ 542.586491][T16993] usb 5-1: config 0 descriptor?? [ 542.882038][ T5853] Bluetooth: hci2: command 0x0401 tx timeout [ 542.888187][ T5847] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 543.071230][T16990] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 543.094481][T22457] netlink: 'syz.8.7356': attribute type 2 has an invalid length. [ 543.102695][T22457] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7356'. [ 543.235166][T16990] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 543.250646][T16990] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.278215][T16990] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 543.311831][T16990] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 543.339266][T16990] usb 10-1: Manufacturer: syz [ 543.357053][T16990] usb 10-1: config 0 descriptor?? [ 543.451484][T16990] rc_core: IR keymap rc-hauppauge not found [ 543.483203][T16990] Registered IR keymap rc-empty [ 543.505811][T16990] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 543.537381][T16990] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input80 [ 543.627092][T16990] usb 10-1: USB disconnect, device number 10 [ 544.611553][T16990] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 544.814278][T16990] usb 10-1: config 9 has an invalid interface number: 81 but max is 0 [ 544.831739][T16990] usb 10-1: config 9 has no interface number 0 [ 544.848979][T16990] usb 10-1: config 9 interface 81 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 544.864532][T16990] usb 10-1: config 9 interface 81 has no altsetting 0 [ 544.877119][T16990] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 544.892264][T16990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.931139][T16990] usb 10-1: Product: syz [ 544.935410][T16990] usb 10-1: Manufacturer: syz [ 544.940093][T16990] usb 10-1: SerialNumber: syz [ 545.000914][T22488] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 545.151039][T16993] usb 5-1: USB disconnect, device number 73 [ 545.252362][T16990] usbserial_generic 10-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 545.252387][T16990] usbserial_generic 10-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 545.252423][T16990] usbserial_generic 10-1:9.81: generic converter detected [ 545.258981][T16990] usb 10-1: generic converter now attached to ttyUSB0 [ 545.272884][T16990] usb 10-1: generic converter now attached to ttyUSB1 [ 545.318528][T22511] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 545.345524][T16990] usb 10-1: USB disconnect, device number 11 [ 545.359805][T16990] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 545.378548][T16990] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 545.409070][T16990] usbserial_generic 10-1:9.81: device disconnected [ 545.555552][T22518] netlink: 'syz.4.7383': attribute type 4 has an invalid length. [ 545.666000][ T30] audit: type=1326 audit(2000000872.292:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a3cb85ba7 code=0x7ffc0000 [ 545.765721][ T30] audit: type=1326 audit(2000000872.312:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a3cb2ade9 code=0x7ffc0000 [ 545.789283][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.872961][ T30] audit: type=1326 audit(2000000872.312:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3cb8ebe9 code=0x7ffc0000 [ 545.968619][ T30] audit: type=1326 audit(2000000872.322:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a3cb85ba7 code=0x7ffc0000 [ 546.107663][ T30] audit: type=1326 audit(2000000872.322:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a3cb2ade9 code=0x7ffc0000 [ 546.223211][T22536] netlink: 27 bytes leftover after parsing attributes in process `syz.9.7390'. [ 546.241564][ T30] audit: type=1326 audit(2000000872.322:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a3cb85ba7 code=0x7ffc0000 [ 546.321205][ T30] audit: type=1326 audit(2000000872.322:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a3cb2ade9 code=0x7ffc0000 [ 546.440331][ T30] audit: type=1326 audit(2000000872.322:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a3cb85ba7 code=0x7ffc0000 [ 546.493343][T22547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.551536][ T30] audit: type=1326 audit(2000000872.322:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a3cb2ade9 code=0x7ffc0000 [ 546.713232][T22552] CIFS: VFS: Malformed UNC in devname [ 546.941192][ T5853] Bluetooth: hci0: link tx timeout [ 546.947868][ T5853] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 546.971248][ T5847] Bluetooth: hci0: link tx timeout [ 546.976388][ T5847] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 546.991258][ T30] audit: type=1326 audit(2000000872.322:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22519 comm="syz.7.7384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a3cb85ba7 code=0x7ffc0000 [ 547.501537][T16988] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 547.591701][T22569] netem: change failed [ 547.723706][T16988] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 547.741162][T16988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.750206][T16988] usb 3-1: Product: syz [ 547.758898][T16988] usb 3-1: Manufacturer: syz [ 547.763972][T16988] usb 3-1: SerialNumber: syz [ 547.772296][T16988] usb 3-1: config 0 descriptor?? [ 547.786909][T16988] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 547.852700][T22568] SELinux: failed to load policy [ 547.992204][ T5920] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 548.169066][ T5920] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 548.190319][ T5920] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 548.204531][T16988] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input81 [ 548.230071][ T5920] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.296921][ T5920] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 548.353602][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.389389][ T5920] usb 9-1: Product: syz [ 548.412193][ T5920] usb 9-1: Manufacturer: syz [ 548.435105][T16990] usb 3-1: USB disconnect, device number 82 [ 548.443383][ T5920] usb 9-1: SerialNumber: syz [ 548.516838][ T5920] hub 9-1:1.0: bad descriptor, ignoring hub [ 548.531408][ T5920] hub 9-1:1.0: probe with driver hub failed with error -5 [ 548.622558][T16988] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 548.748569][ T5920] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 548.803082][T16988] usb 5-1: Using ep0 maxpacket: 8 [ 548.826825][T16988] usb 5-1: config 0 interface 0 has no altsetting 0 [ 548.846479][T16988] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 548.880836][T16988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.896770][T16988] usb 5-1: Product: syz [ 548.901535][T16988] usb 5-1: Manufacturer: syz [ 548.907344][T16988] usb 5-1: SerialNumber: syz [ 548.914576][T16988] usb 5-1: config 0 descriptor?? [ 548.925467][T16988] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 549.031673][ T5847] Bluetooth: hci0: command 0x0405 tx timeout [ 549.132962][T16988] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 549.153536][T16988] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 549.179198][T16990] usb 9-1: USB disconnect, device number 12 [ 549.207906][T16990] usblp0: removed [ 549.368347][T16990] usb 5-1: USB disconnect, device number 74 [ 549.908188][T22622] sctp: Trying to GSO but underlying device doesn't support it. [ 550.385949][T22643] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 550.791264][T16990] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 550.812134][T16988] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 550.974570][T16990] usb 10-1: Using ep0 maxpacket: 32 [ 550.987908][T16990] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 551.033881][T16990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.046145][T16988] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 551.064102][T16988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.087668][T16990] usb 10-1: config 0 descriptor?? [ 551.094054][T16988] usb 3-1: Product: syz [ 551.098226][T16988] usb 3-1: Manufacturer: syz [ 551.121886][T16988] usb 3-1: SerialNumber: syz [ 551.133443][T16988] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 551.150126][T16980] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 551.341387][T16990] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 551.392105][T16990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 551.442136][T16990] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 551.470402][T16990] usb 10-1: media controller created [ 551.542954][T16990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.578978][T16990] az6027: usb out operation failed. (-71) [ 551.590444][T22670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7454'. [ 551.601187][T16990] az6027: usb out operation failed. (-71) [ 551.607065][T16990] stb0899_attach: Driver disabled by Kconfig [ 551.613242][T16990] az6027: no front-end attached [ 551.613242][T16990] [ 551.620996][T16990] az6027: usb out operation failed. (-71) [ 551.626911][T16990] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 551.696293][T16990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input82 [ 551.719996][T16990] dvb-usb: schedule remote query interval to 400 msecs. [ 551.759123][T16990] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 551.790606][T16990] usb 10-1: USB disconnect, device number 12 [ 551.864181][T16990] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 551.891266][T16981] usb 3-1: USB disconnect, device number 83 [ 552.477759][T16980] usb 3-1: Service connection timeout for: 256 [ 552.496655][T16980] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 552.535906][T16980] ath9k_htc: Failed to initialize the device [ 552.573010][T16981] usb 3-1: ath9k_htc: USB layer deinitialized [ 553.256025][T22719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7477'. [ 553.426669][T22725] netlink: 165 bytes leftover after parsing attributes in process `syz.7.7479'. [ 553.643010][T22734] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 554.072474][T16980] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 554.243900][T16980] usb 9-1: Using ep0 maxpacket: 32 [ 554.255501][T16980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.281358][T16980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.306139][T16980] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.329587][T16980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.340773][T16980] usb 9-1: config 0 descriptor?? [ 554.347852][T16980] hub 9-1:0.0: USB hub found [ 554.556281][T16980] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 554.591463][T16993] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 554.752180][T16993] usb 3-1: Using ep0 maxpacket: 32 [ 554.792298][T16993] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 554.848062][T16993] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 554.872157][T16993] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 554.880370][T16993] usb 3-1: Product: syz [ 554.891352][T16993] usb 3-1: Manufacturer: syz [ 554.902327][T16993] usb 3-1: SerialNumber: syz [ 554.923654][T16993] usb 3-1: config 0 descriptor?? [ 554.932802][T22751] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 554.961060][T16980] hid-generic 0003:046D:C31C.0088: item fetching failed at offset 0/1 [ 554.985670][T16980] hid-generic 0003:046D:C31C.0088: probe with driver hid-generic failed with error -22 [ 555.000603][T22789] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 555.200795][T16990] usb 3-1: USB disconnect, device number 84 [ 555.281968][T16980] usb 9-1: USB disconnect, device number 13 [ 555.655577][T22797] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7515'. [ 555.681679][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7514'. [ 555.819954][T22803] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7517'. [ 556.004553][T22811] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7521'. [ 556.261781][T16990] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 556.448425][T16990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.481989][T16990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.500818][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7530'. [ 556.531405][T16990] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 556.540460][T16990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.596716][T16990] usb 9-1: config 0 descriptor?? [ 557.041168][T16981] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 557.050294][T16990] playstation 0003:054C:0DF2.0089: unknown main item tag 0x0 [ 557.081172][T16990] playstation 0003:054C:0DF2.0089: unknown main item tag 0x0 [ 557.088599][T16990] playstation 0003:054C:0DF2.0089: unknown main item tag 0x0 [ 557.131814][T16990] playstation 0003:054C:0DF2.0089: unknown main item tag 0x0 [ 557.151205][T16990] playstation 0003:054C:0DF2.0089: unknown main item tag 0x0 [ 557.166797][T16990] playstation 0003:054C:0DF2.0089: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 557.233048][T16981] usb 5-1: config 0 has no interfaces? [ 557.238559][T16981] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.274564][T16981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.285917][T16981] usb 5-1: config 0 descriptor?? [ 557.673676][T16990] playstation 0003:054C:0DF2.0089: Failed to retrieve feature with reportID 32: -71 [ 557.697898][T16993] usb 5-1: USB disconnect, device number 75 [ 557.700470][T16990] playstation 0003:054C:0DF2.0089: Failed to retrieve DualSense firmware info: -71 [ 557.755630][T16990] playstation 0003:054C:0DF2.0089: Failed to get firmware info from DualSense [ 557.781183][T16990] playstation 0003:054C:0DF2.0089: Failed to create dualsense. [ 557.809862][T16990] playstation 0003:054C:0DF2.0089: probe with driver playstation failed with error -71 [ 557.811669][ T5920] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 557.836381][T16990] usb 9-1: USB disconnect, device number 14 [ 558.015257][ T5920] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 558.031241][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.070087][ T5920] usb 10-1: Product: syz [ 558.074623][ T5920] usb 10-1: Manufacturer: syz [ 558.079314][ T5920] usb 10-1: SerialNumber: syz [ 558.093584][ T5920] usb 10-1: config 0 descriptor?? [ 558.717657][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7554'. [ 558.743417][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7554'. [ 558.929479][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 558.929496][ T30] audit: type=1400 audit(2000000885.552:1477): avc: denied { map } for pid=22886 comm="syz.2.7557" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 558.975079][ T5920] usb 10-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 558.999762][ T5920] f81604 10-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 559.023888][ T5920] f81604 10-1:0.0: probe with driver f81604 failed with error -71 [ 559.063267][ T5920] usb 10-1: USB disconnect, device number 13 [ 559.189070][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7560'. [ 559.591540][ T5847] Bluetooth: hci5: command 0x0405 tx timeout [ 559.840876][T22918] netlink: 'syz.2.7571': attribute type 2 has an invalid length. [ 559.928489][T22918] k›*·]‘: entered promiscuous mode [ 560.256882][T22938] netlink: 'syz.8.7579': attribute type 1 has an invalid length. [ 560.276739][T22938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.460566][ T30] audit: type=1400 audit(2000000887.082:1478): avc: denied { rename } for pid=22941 comm="syz.2.7581" name="file0" dev="tmpfs" ino=8077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 560.860640][T22956] lo speed is unknown, defaulting to 1000 [ 560.889138][T22956] lo speed is unknown, defaulting to 1000 [ 561.364857][T22972] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7593'. [ 561.762495][T22987] netlink: 'syz.4.7598': attribute type 39 has an invalid length. [ 561.911626][T16988] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 562.076486][T16988] usb 10-1: Using ep0 maxpacket: 16 [ 562.115019][T16988] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 562.145029][T16988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.158622][T22999] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7603'. [ 562.177686][T16988] usb 10-1: Product: syz [ 562.182209][T16988] usb 10-1: Manufacturer: syz [ 562.187003][T16988] usb 10-1: SerialNumber: syz [ 562.223235][T16988] r8152-cfgselector 10-1: Unknown version 0x0000 [ 562.229621][T16988] r8152-cfgselector 10-1: config 0 descriptor?? [ 562.705485][ T6027] r8152-cfgselector 10-1: USB disconnect, device number 14 [ 563.005395][T23036] netlink: 'syz.2.7621': attribute type 1 has an invalid length. [ 563.027310][T23036] netlink: 75 bytes leftover after parsing attributes in process `syz.2.7621'. [ 563.501614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 563.732488][ T6027] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 563.894331][ T6027] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.916146][ T6027] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 563.937019][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.949657][ T6027] usb 3-1: config 0 descriptor?? [ 563.951456][T16988] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 563.974768][ T6027] pwc: Askey VC010 type 2 USB webcam detected. [ 564.058619][ T2935] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.142240][T16988] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 564.188090][T16988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.226586][T16988] usb 9-1: config 0 descriptor?? [ 564.244021][T16988] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 564.261197][ T2935] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.394145][ T6027] pwc: recv_control_msg error -32 req 02 val 2b00 [ 564.403091][ T2935] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.593730][ T2935] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.623230][ T6027] pwc: recv_control_msg error -71 req 02 val 2c00 [ 564.641568][ T6027] pwc: recv_control_msg error -71 req 04 val 1000 [ 564.668927][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 564.676081][ T6027] pwc: recv_control_msg error -71 req 04 val 1300 [ 564.686441][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 564.697424][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 564.697856][ T6027] pwc: recv_control_msg error -71 req 04 val 1400 [ 564.719975][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 564.730677][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 564.738713][ T6027] pwc: recv_control_msg error -71 req 02 val 2000 [ 564.752359][ T5920] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 564.782000][ T6027] pwc: recv_control_msg error -71 req 02 val 2100 [ 564.802085][ T6027] pwc: recv_control_msg error -71 req 04 val 1500 [ 564.818387][ T6027] pwc: recv_control_msg error -71 req 02 val 2500 [ 564.828121][ T6027] pwc: recv_control_msg error -71 req 02 val 2400 [ 564.844872][ T6027] pwc: recv_control_msg error -71 req 02 val 2600 [ 564.861546][ T6027] pwc: recv_control_msg error -71 req 02 val 2900 [ 564.864054][T16988] gspca_cpia1: usb_control_msg 01, error -71 [ 564.877144][ T6027] pwc: recv_control_msg error -71 req 02 val 2800 [ 564.892846][ T6027] pwc: recv_control_msg error -71 req 04 val 1100 [ 564.899334][T23069] lo speed is unknown, defaulting to 1000 [ 564.909133][ T6027] pwc: recv_control_msg error -71 req 04 val 1200 [ 564.911823][T16988] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 564.916183][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 564.948694][ T6027] pwc: Registered as video103. [ 564.972888][ T6027] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input83 [ 564.980039][T16988] usb 9-1: USB disconnect, device number 15 [ 564.989895][T23069] lo speed is unknown, defaulting to 1000 [ 565.010817][ T5920] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 565.031980][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.053033][ T6027] usb 3-1: USB disconnect, device number 85 [ 565.064371][ T5920] usb 5-1: config 0 descriptor?? [ 565.270239][ T2935] bridge0: port 3(batadv0) entered disabled state [ 565.301501][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 565.338587][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 565.354972][ T2935] bridge_slave_1: left allmulticast mode [ 565.370980][ T2935] bridge_slave_1: left promiscuous mode [ 565.386221][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 565.394084][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.401985][ T5920] usb 5-1: media controller created [ 565.426065][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.447708][ T2935] bridge_slave_0: left allmulticast mode [ 565.472868][ T2935] bridge_slave_0: left promiscuous mode [ 565.494970][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.525578][ T5920] az6027: usb out operation failed. (-71) [ 565.551719][ T5920] az6027: usb out operation failed. (-71) [ 565.557475][ T5920] stb0899_attach: Driver disabled by Kconfig [ 565.598327][ T5920] az6027: no front-end attached [ 565.598327][ T5920] [ 565.618645][ T5920] az6027: usb out operation failed. (-71) [ 565.638518][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 565.678200][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input84 [ 565.725924][ T5920] dvb-usb: schedule remote query interval to 400 msecs. [ 565.754322][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 565.802255][ T5920] usb 5-1: USB disconnect, device number 76 [ 565.914680][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 566.753437][ T30] audit: type=1326 audit(2000000893.382:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23111 comm="syz.4.7655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3bf18ebe9 code=0x0 [ 566.792245][ T5853] Bluetooth: hci3: command tx timeout [ 566.826798][ T30] audit: type=1400 audit(2000000893.422:1480): avc: denied { compute_member } for pid=23113 comm="syz.9.7656" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 567.269084][T16988] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 567.390996][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.406542][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.420959][ T2935] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 567.446210][ T2935] bond0 (unregistering): Released all slaves [ 567.465971][T16988] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 567.484132][T23088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7643'. [ 567.499635][T23100] netlink: 176 bytes leftover after parsing attributes in process `syz.8.7650'. [ 567.511165][T16988] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 567.561322][T23100] ip6gretap0: entered promiscuous mode [ 567.579628][T23100] netlink: 176 bytes leftover after parsing attributes in process `syz.8.7650'. [ 567.589923][T16988] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 567.621136][T16988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.629434][T16988] usb 10-1: Product: syz [ 567.671283][T16988] usb 10-1: Manufacturer: syz [ 567.681249][T16988] usb 10-1: SerialNumber: syz [ 567.727115][T16988] usb 10-1: config 0 descriptor?? [ 567.744405][T23119] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 567.779260][T23119] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 567.827751][T23125] overlayfs: workdir and upperdir must reside under the same mount [ 568.075915][T23069] chnl_net:caif_netlink_parms(): no params data found [ 568.091687][T23119] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 568.099064][T23119] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 568.528580][T16988] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 568.542062][ T2935] hsr_slave_0: left promiscuous mode [ 568.562939][ T2935] hsr_slave_1: left promiscuous mode [ 568.583820][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.611266][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.652195][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.659775][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.739722][T16988] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 568.743677][ T2935] veth1_macvtap: left promiscuous mode [ 568.762959][ T2935] veth0_macvtap: left promiscuous mode [ 568.774951][T16988] usb 10-1: USB disconnect, device number 15 [ 568.775503][ T2935] veth1_vlan: left promiscuous mode [ 568.807615][ T2935] veth0_vlan: left promiscuous mode [ 568.872599][ T5853] Bluetooth: hci3: command tx timeout [ 569.966355][ T5853] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 570.300502][ T2935] team0 (unregistering): Port device team_slave_1 removed [ 570.380420][ T2935] team0 (unregistering): Port device team_slave_0 removed [ 570.501678][T16981] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 570.692163][T16981] usb 10-1: Using ep0 maxpacket: 32 [ 570.713109][T16981] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 570.727663][T16981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.756750][T16981] usb 10-1: config 0 descriptor?? [ 570.774457][T16981] gspca_main: sq930x-2.14.0 probing 041e:403c [ 570.954791][ T5853] Bluetooth: hci3: command tx timeout [ 571.441560][T16981] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 571.452105][T16981] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 571.482358][T16981] usb 10-1: USB disconnect, device number 16 [ 571.736555][T23204] dummy0: entered allmulticast mode [ 571.879357][T23204] dummy0: left allmulticast mode [ 572.023054][T23069] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.040397][T23069] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.065544][T23069] bridge_slave_0: entered allmulticast mode [ 572.079024][ T30] audit: type=1400 audit(2000000898.692:1481): avc: denied { execute } for pid=23215 comm="syz.2.7698" path="/dev/nullb0" dev="devtmpfs" ino=4718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 572.121031][T23069] bridge_slave_0: entered promiscuous mode [ 572.148914][T23069] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.176663][ T30] audit: type=1800 audit(2000000898.692:1482): pid=23216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.7698" name="nullb0" dev="devtmpfs" ino=4718 res=0 errno=0 [ 572.202249][T23069] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.209712][T23069] bridge_slave_1: entered allmulticast mode [ 572.234054][T23069] bridge_slave_1: entered promiscuous mode [ 572.307075][T23069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.343838][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7701'. [ 572.365808][T23222] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7701'. [ 572.457325][T23069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.754758][T23069] team0: Port device team_slave_0 added [ 572.890422][T23069] team0: Port device team_slave_1 added [ 573.032294][ T5853] Bluetooth: hci3: command tx timeout [ 573.133552][T23069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.140520][T23069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.227569][T23069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.387982][T23069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.409350][T23069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.458954][T23069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.551879][T23069] hsr_slave_0: entered promiscuous mode [ 573.553013][ T6001] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 573.562487][T23069] hsr_slave_1: entered promiscuous mode [ 573.575805][T23069] debugfs: 'hsr0' already exists in 'hsr' [ 573.581721][T23069] Cannot create hsr debugfs directory [ 573.741811][ T6001] usb 3-1: Using ep0 maxpacket: 32 [ 573.748801][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.760141][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.794210][ T6001] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 573.812642][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.832822][ T6001] usb 3-1: config 0 descriptor?? [ 573.841728][T16990] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 573.979684][ T6001] hub 3-1:0.0: USB hub found [ 573.994665][ T5853] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 574.006901][ T5853] Bluetooth: hci2: Injecting HCI hardware error event [ 574.018402][ T5853] Bluetooth: hci2: hardware error 0x00 [ 574.028726][T16990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 574.060596][T16990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.090381][T16990] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 574.135789][T16990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.172095][T16990] usb 5-1: config 0 descriptor?? [ 574.185581][ T6001] hub 3-1:0.0: 1 port detected [ 574.390262][ T6001] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 574.399381][ T6001] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 574.434930][T23069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 574.438559][ T6001] usbhid 3-1:0.0: can't add hid device: -71 [ 574.453253][T23069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 574.455504][ T6001] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 574.485829][T23069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 574.494462][ T6001] usb 3-1: USB disconnect, device number 86 [ 574.515361][T16981] kernel write not supported for file /radio9 (pid: 16981 comm: kworker/1:11) [ 574.528563][T23069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 574.608154][T16990] samsung 0003:0419:0001.008A: item fetching failed at offset 3/5 [ 574.624706][T16990] samsung 0003:0419:0001.008A: parse failed [ 574.631675][T16990] samsung 0003:0419:0001.008A: probe with driver samsung failed with error -22 [ 574.705151][T23069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.733916][T23069] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.753021][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.760142][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.779642][T23289] pim6reg: entered allmulticast mode [ 574.792803][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.799930][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.812233][T23289] pim6reg: left allmulticast mode [ 574.826492][ T6001] usb 5-1: USB disconnect, device number 77 [ 574.871685][ T6027] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 575.024903][T23069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.032979][ T6027] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.059542][ T6027] usb 10-1: config 0 interface 0 has no altsetting 0 [ 575.079480][ T6027] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 575.089905][ T5893] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 575.105144][ T6027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.131306][ T6027] usb 10-1: Product: syz [ 575.136439][ T6027] usb 10-1: Manufacturer: syz [ 575.152219][ T6027] usb 10-1: SerialNumber: syz [ 575.173781][ T6027] usb 10-1: config 0 descriptor?? [ 575.184718][ T6027] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 575.205506][ T6027] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 575.233081][ T6027] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 575.252953][ T6027] usb 10-1: media controller created [ 575.271381][ T5893] usb 9-1: Using ep0 maxpacket: 16 [ 575.294210][ T5893] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 575.322304][ T5893] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 575.331023][ T6027] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.332341][T23069] veth0_vlan: entered promiscuous mode [ 575.349752][ T5893] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 575.375039][T23069] veth1_vlan: entered promiscuous mode [ 575.382890][ T5893] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 575.414114][ T5893] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 575.430697][ T5893] usb 9-1: config 0 has no interface number 0 [ 575.438167][ T5893] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 575.487818][T23069] veth0_macvtap: entered promiscuous mode [ 575.493729][ T5893] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 575.505657][ T6027] DVB: Unable to find symbol tda10046_attach() [ 575.508649][T23069] veth1_macvtap: entered promiscuous mode [ 575.521632][ T5893] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 575.539636][ T6027] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 575.557099][ T5893] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 575.581785][ T6027] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 575.596483][T23069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.604471][ T5893] usb 9-1: config 0 interface 125 has no altsetting 0 [ 575.604499][ T5893] usb 9-1: config 0 interface 125 has no altsetting 2 [ 575.635717][ T5893] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 575.639681][T23069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.653105][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.664339][ T5893] usb 9-1: Product: syz [ 575.668636][ T5893] usb 9-1: Manufacturer: syz [ 575.678017][ T5893] usb 9-1: SerialNumber: syz [ 575.686809][ T5893] usb 9-1: config 0 descriptor?? [ 575.702754][ T2935] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.715414][ T5893] usb 9-1: selecting invalid altsetting 2 [ 575.721280][ T2935] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.721322][ T2935] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.721358][ T2935] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.875817][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.896688][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.929741][ C0] usb 9-1: async_complete: urb error -71 [ 575.935574][ C0] usb 9-1: async_complete: urb error -71 [ 575.941340][ C0] usb 9-1: async_complete: urb error -71 [ 575.944383][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.947110][ C0] usb 9-1: async_complete: urb error -71 [ 575.955516][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.013739][ T5893] get_1284_register: usb error -71 [ 576.022760][ T5893] uss720 9-1:0.125: probe with driver uss720 failed with error -71 [ 576.048546][ T5893] usb 9-1: USB disconnect, device number 16 [ 576.151469][ T5853] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 576.181855][ T6027] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 576.194007][ T6027] usb 10-1: USB disconnect, device number 17 [ 576.356418][ T30] audit: type=1400 audit(2000000902.982:1483): avc: denied { write } for pid=23334 comm="syz.7.7740" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 576.400769][T23337] wireguard0: entered promiscuous mode [ 576.407067][T23337] wireguard0: entered allmulticast mode [ 577.417064][T23379] loop2: detected capacity change from 0 to 6 [ 577.425773][T23379] Dev loop2: unable to read RDB block 6 [ 577.432697][T23379] loop2: AHDI p1 [ 577.436451][T23379] loop2: partition table partially beyond EOD, truncated [ 577.839920][T16990] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 577.907045][ T6027] kernel read not supported for file /dsp (pid: 6027 comm: kworker/0:10) [ 577.916788][ T30] audit: type=1400 audit(2000000904.522:1484): avc: denied { execute_no_trans } for pid=23388 comm="syz.8.7762" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=98813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 578.041200][T16990] usb 10-1: Using ep0 maxpacket: 32 [ 578.058046][T16990] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 578.082468][T16990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.131550][T16990] usb 10-1: config 0 descriptor?? [ 578.141238][T23393] mkiss: ax0: crc mode is auto. [ 578.371889][T16990] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 578.409600][T16990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 578.441015][T16990] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 578.469532][T16990] usb 10-1: media controller created [ 578.529033][T16990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.561194][T16981] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 578.620008][T16990] az6027: usb out operation failed. (-71) [ 578.638226][T16990] az6027: usb out operation failed. (-71) [ 578.654777][T16990] stb0899_attach: Driver disabled by Kconfig [ 578.677595][T16990] az6027: no front-end attached [ 578.677595][T16990] [ 578.703130][T16990] az6027: usb out operation failed. (-71) [ 578.719225][T16990] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 578.765624][T16990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input89 [ 578.778362][T16981] usb 3-1: Using ep0 maxpacket: 8 [ 578.792830][T16981] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 578.811441][T16981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.830591][T16990] dvb-usb: schedule remote query interval to 400 msecs. [ 578.848250][T16981] usb 3-1: Product: syz [ 578.853409][T16990] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 578.871137][T16981] usb 3-1: Manufacturer: syz [ 578.876425][T16981] usb 3-1: SerialNumber: syz [ 578.877425][T23409] kvm: kvm [23408]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000040) = 0x0 [ 578.883773][T16990] usb 10-1: USB disconnect, device number 18 [ 578.907762][T16981] usb 3-1: config 0 descriptor?? [ 578.923869][T16981] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 579.038804][T16990] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 579.124404][T16979] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 579.292076][T16979] usb 5-1: Using ep0 maxpacket: 32 [ 579.309467][T16979] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 579.321202][T16979] usb 5-1: config 0 has no interface number 0 [ 579.326891][T23417] netlink: 'syz.9.7775': attribute type 9 has an invalid length. [ 579.327346][T16979] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.386486][T16979] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.414010][T16979] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 579.445596][T16979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.465240][T16979] usb 5-1: config 0 descriptor?? [ 579.712078][ T5952] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 579.754873][T16981] gspca_sonixj: reg_r err -71 [ 579.759706][T16981] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 579.776423][T16981] usb 3-1: USB disconnect, device number 87 [ 579.884789][ T5952] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 579.899299][ T5952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.910551][ T5952] usb 9-1: Product: syz [ 579.920544][ T5952] usb 9-1: Manufacturer: syz [ 579.926415][ T5952] usb 9-1: SerialNumber: syz [ 579.954760][ T5952] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 579.986955][ T5920] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 580.117268][T16979] uclogic 0003:28BD:0094.008B: pen parameters not found [ 580.142137][T16979] uclogic 0003:28BD:0094.008B: interface is invalid, ignoring [ 580.262030][ T5952] usb 9-1: USB disconnect, device number 17 [ 580.294014][ T6027] kernel read not supported for file /dsp1 (pid: 6027 comm: kworker/0:10) [ 580.400628][T16990] usb 5-1: USB disconnect, device number 78 [ 581.035602][ T5920] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 581.061371][ T5920] ath9k_htc: Failed to initialize the device [ 581.100795][ T5952] usb 9-1: ath9k_htc: USB layer deinitialized [ 581.194505][T23456] openvswitch: netlink: Duplicate or invalid key (type 0). [ 581.246153][T23456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.888854][T23478] batman_adv: batadv0: Adding interface: gretap1 [ 581.942146][T23478] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.975594][T23478] batman_adv: batadv0: Interface activated: gretap1 [ 582.164462][T23485] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23485 comm=syz.9.7806 [ 582.615398][ T30] audit: type=1400 audit(2000000909.212:1485): avc: denied { getopt } for pid=23500 comm="syz.9.7813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 582.889504][ T30] audit: type=1400 audit(2000000909.512:1486): avc: denied { execute } for pid=23513 comm="syz.4.7818" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 583.120804][ T5921] usb 10-1: [UEAGLE-ATM] firmware is not available [ 583.269548][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7822'. [ 583.288713][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7822'. [ 583.878709][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.901182][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.113283][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.169179][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.438692][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.460459][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.612389][T23550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.641184][ T5920] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 584.707959][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.738567][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.747246][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.755767][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.776051][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.795925][ T5920] usb 9-1: Using ep0 maxpacket: 16 [ 584.810282][ T5920] usb 9-1: unable to get BOS descriptor or descriptor too short [ 584.839321][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.843680][ T5920] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.850006][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.914218][T23552] lo speed is unknown, defaulting to 1000 [ 584.917633][ T5920] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 584.922887][T23552] lo speed is unknown, defaulting to 1000 [ 585.024431][ T5920] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 585.074550][ T5920] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 64 [ 585.215009][ T5920] usb 9-1: New USB device found, idVendor=1d6b, idProduct=4a23, bcdDevice=cc.c0 [ 585.230262][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.258806][ T5920] usb 9-1: Product: syz [ 585.271705][ T5920] usb 9-1: Manufacturer: syz [ 585.281317][ T5920] usb 9-1: SerialNumber: syz [ 585.353435][T16990] kernel write not supported for file /snd/pcmC1D0p (pid: 16990 comm: kworker/1:17) [ 585.368136][ T12] bridge_slave_1: left allmulticast mode [ 585.381908][ T12] bridge_slave_1: left promiscuous mode [ 585.392949][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.436547][ T12] bridge_slave_0: left allmulticast mode [ 585.464526][ T12] bridge_slave_0: left promiscuous mode [ 585.470328][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.547887][ T12] batman_adv: batadv0: Interface deactivated: gretap1 [ 585.555638][ T5920] usb 9-1: USB disconnect, device number 18 [ 586.346074][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 586.879168][ T5853] Bluetooth: hci1: command tx timeout [ 587.404999][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.445495][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.457827][ T12] bond0 (unregistering): Released all slaves [ 587.531928][T23552] chnl_net:caif_netlink_parms(): no params data found [ 587.729043][ T12] k›*·]‘: left promiscuous mode [ 587.979749][T23552] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.994468][T23552] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.043762][T23552] bridge_slave_0: entered allmulticast mode [ 588.059066][T23552] bridge_slave_0: entered promiscuous mode [ 588.094823][ T12] tipc: Left network mode [ 588.107771][T23552] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.143776][T23552] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.151007][T23552] bridge_slave_1: entered allmulticast mode [ 588.199200][T23552] bridge_slave_1: entered promiscuous mode [ 588.225019][T23628] bridge0: Device is already in use. [ 588.442767][T23552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.484455][T23552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.872841][T16979] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 588.956516][ T5853] Bluetooth: hci1: command tx timeout [ 589.041222][T16979] usb 10-1: Using ep0 maxpacket: 8 [ 589.048306][T16979] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 589.061129][T16979] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.103977][T16979] pvrusb2: Hardware description: Terratec Grabster AV400 [ 589.130104][T16979] pvrusb2: ********** [ 589.150378][T16979] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 589.201856][T16979] pvrusb2: Important functionality might not be entirely working. [ 589.204756][T23552] team0: Port device team_slave_0 added [ 589.238917][T23552] team0: Port device team_slave_1 added [ 589.251506][T16979] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 589.282633][T16979] pvrusb2: ********** [ 589.320091][ T2340] pvrusb2: Invalid write control endpoint [ 589.505714][ T2340] pvrusb2: Invalid write control endpoint [ 589.522104][T16990] usb 10-1: USB disconnect, device number 19 [ 589.531158][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 589.575911][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 589.596127][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 589.646828][ T2340] pvrusb2: Device being rendered inoperable [ 589.674409][ T2340] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 589.693376][ T2340] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 589.703942][T23552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.733096][T23552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.734346][ T2340] pvrusb2: Attached sub-driver cx25840 [ 589.772644][T23552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.824250][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 589.852616][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 589.881736][ T12] hsr_slave_0: left promiscuous mode [ 589.893106][ T12] hsr_slave_1: left promiscuous mode [ 589.912869][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.920584][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.972891][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.980369][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.029253][ T12] veth1_macvtap: left allmulticast mode [ 590.044951][ T12] veth1_macvtap: left promiscuous mode [ 590.068857][ T12] veth0_macvtap: left promiscuous mode [ 590.085745][ T12] veth1_vlan: left promiscuous mode [ 590.115421][ T12] veth0_vlan: left promiscuous mode [ 590.153247][T16979] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 590.331378][T16979] usb 9-1: Using ep0 maxpacket: 16 [ 590.337205][T23669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.363779][T16979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 590.417560][T16979] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.461436][T16979] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 590.492499][T16979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.543531][T16979] usb 9-1: config 0 descriptor?? [ 590.597629][ T12] pimreg3 (unregistering): left allmulticast mode [ 590.989180][T16979] playstation 0003:054C:0DF2.008C: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 591.037605][ T5853] Bluetooth: hci1: command tx timeout [ 591.202773][T16979] playstation 0003:054C:0DF2.008C: Invalid reportID received, expected 9 got 0 [ 591.221214][T16979] playstation 0003:054C:0DF2.008C: Failed to retrieve DualSense pairing info: -22 [ 591.230497][T16979] playstation 0003:054C:0DF2.008C: Failed to get MAC address from DualSense [ 591.271756][T16979] playstation 0003:054C:0DF2.008C: Failed to create dualsense. [ 591.297236][T16979] playstation 0003:054C:0DF2.008C: probe with driver playstation failed with error -22 [ 591.439601][T16979] usb 9-1: USB disconnect, device number 19 [ 592.253137][ T12] team0 (unregistering): Port device team_slave_1 removed [ 592.342241][ T12] team0 (unregistering): Port device team_slave_0 removed [ 592.361713][T16981] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 592.541416][T16981] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 592.549520][T16981] usb 9-1: config 0 has no interface number 0 [ 592.563346][T16981] usb 9-1: config 0 interface 41 has no altsetting 0 [ 592.592377][T16981] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 592.602229][T16981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.610233][T16981] usb 9-1: Product: syz [ 592.622102][T16981] usb 9-1: Manufacturer: syz [ 592.626733][T16981] usb 9-1: SerialNumber: syz [ 592.654583][T16981] usb 9-1: config 0 descriptor?? [ 593.127763][ T5853] Bluetooth: hci1: command tx timeout [ 593.449524][T23552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.457745][T23552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.486292][T23552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.505879][ T5920] lo speed is unknown, defaulting to 1000 [ 593.517034][T16981] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 593.538156][ T5920] syz0: Port: 1 Link DOWN [ 593.564247][T16981] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 593.600654][T16981] usb 9-1: USB disconnect, device number 20 [ 593.748248][T23552] hsr_slave_0: entered promiscuous mode [ 593.765187][T23552] hsr_slave_1: entered promiscuous mode [ 593.797450][T23552] debugfs: 'hsr0' already exists in 'hsr' [ 593.807125][T23552] Cannot create hsr debugfs directory [ 594.282568][T23714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.378368][T23706] SELinux: failed to load policy [ 594.727875][ T12] IPVS: stop unused estimator thread 0... [ 596.335914][T23552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 596.368478][T23552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 596.447838][T23552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 596.520358][T23552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 596.830700][T23785] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7926'. [ 596.886149][T23785] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7926'. [ 596.949006][T23552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.035713][T23791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.055159][T23552] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.124826][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.132002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.187936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.195147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.995972][T23552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.244334][T23552] veth0_vlan: entered promiscuous mode [ 598.296585][T23552] veth1_vlan: entered promiscuous mode [ 598.434984][T23552] veth0_macvtap: entered promiscuous mode [ 598.484465][T23552] veth1_macvtap: entered promiscuous mode [ 598.567019][T23552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.579959][T23552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.604212][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.632924][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.685742][T19016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.731510][T19016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.062675][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.101194][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.126504][ T5920] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 599.219018][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.243684][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.287037][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 599.323166][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.361509][ T5920] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 599.422283][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.474759][ T5920] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 599.475381][ T30] audit: type=1400 audit(2000000926.102:1487): avc: denied { watch_mount } for pid=23845 comm="syz.8.7942" path="/298" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 599.499837][ T5920] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 599.673493][ T5920] usb 5-1: Product: syz [ 599.677691][ T5920] usb 5-1: Manufacturer: syz [ 599.700944][ T5920] usb 5-1: SerialNumber: syz [ 599.713729][ T5920] usb 5-1: config 0 descriptor?? [ 600.151718][ T5952] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 600.212748][ T5920] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 600.303855][ T5952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.325452][ T5952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.362531][ T5952] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 600.400542][ T5952] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.438804][ T5952] usb 9-1: config 0 descriptor?? [ 600.614639][ T5920] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 600.640569][ T5920] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 600.840561][T16979] usb 5-1: USB disconnect, device number 79 [ 600.879916][ T5952] steelseries 0003:1038:12B6.008D: unknown main item tag 0x0 [ 600.916354][ T5952] steelseries 0003:1038:12B6.008D: unknown main item tag 0x0 [ 600.941648][ T5952] steelseries 0003:1038:12B6.008D: unknown main item tag 0x0 [ 600.969545][ T5952] steelseries 0003:1038:12B6.008D: unknown main item tag 0x0 [ 600.989823][ T5952] steelseries 0003:1038:12B6.008D: unknown main item tag 0x0 [ 601.020361][ T5952] steelseries 0003:1038:12B6.008D: unknown main item tag 0x0 [ 601.059950][ T5952] steelseries 0003:1038:12B6.008D: unknown main item tag 0x0 [ 601.122895][ T5952] steelseries 0003:1038:12B6.008D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.8-1/input0 [ 601.515208][T16979] usb 9-1: USB disconnect, device number 21 [ 601.943894][T16979] IPVS: starting estimator thread 0... [ 601.947484][T23890] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 602.051221][T23895] IPVS: using max 39 ests per chain, 93600 per kthread [ 602.181920][T16981] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 602.409152][ T30] audit: type=1400 audit(2000000929.012:1488): avc: denied { listen } for pid=23903 comm="syz.8.7955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 602.438823][T16981] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 602.458862][T16981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.505382][T16981] usb 5-1: Product: syz [ 602.511535][ T30] audit: type=1400 audit(2000000929.012:1489): avc: denied { accept } for pid=23903 comm="syz.8.7955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 602.531421][T16981] usb 5-1: Manufacturer: syz [ 602.536025][T16981] usb 5-1: SerialNumber: syz [ 602.558176][T16981] usb 5-1: config 0 descriptor?? [ 602.662183][ T5920] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 602.805412][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 602.812059][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 602.865579][ T5920] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 602.893823][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 602.984617][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 603.063566][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.090174][ T30] audit: type=1326 audit(2000000929.712:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23917 comm="syz.7.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f138ebe9 code=0x7fc00000 [ 603.118347][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.154413][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.208023][ T5920] usb 1-1: config 0 descriptor?? [ 603.236796][T23906] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 603.463916][T23738] Set syz1 is full, maxelem 65536 reached [ 603.618284][T16981] usb 5-1: f81604_read: reg: 100f failed: -EPROTO [ 603.662864][T16981] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 603.680583][ T5920] plantronics 0003:047F:FFFF.008E: reserved main item tag 0xd [ 603.706182][T16981] usb 5-1: USB disconnect, device number 80 [ 603.730786][ T5920] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 603.747460][T16981] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 603.818799][ T30] audit: type=1326 audit(2000000930.432:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23917 comm="syz.7.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4f138ebe9 code=0x7fc00000 [ 603.934853][T16981] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 604.027701][T16979] usb 1-1: USB disconnect, device number 11 [ 604.117378][T23950] netlink: 'syz.8.7969': attribute type 39 has an invalid length. [ 604.258253][ T30] audit: type=1400 audit(2000000930.882:1492): avc: denied { remount } for pid=23951 comm="syz.9.7970" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 604.258270][T23952] tracefs: Invalid gid '0x00000000ffffffff' [ 605.976253][T24013] tun0: tun_chr_ioctl cmd 1074025675 [ 606.001265][T24013] tun0: persist enabled [ 606.035148][T24013] tun0: tun_chr_ioctl cmd 1074025675 [ 606.037024][T24020] ALSA: seq fatal error: cannot create timer (-22) [ 606.070993][T24013] tun0: persist disabled [ 606.237141][T24028] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7996'. [ 606.352130][ T30] audit: type=1400 audit(2000000932.982:1493): avc: denied { map } for pid=24030 comm="syz.4.7998" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 606.430180][ T30] audit: type=1400 audit(2000000932.982:1494): avc: denied { execute } for pid=24030 comm="syz.4.7998" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 606.878606][T24048] syzkaller1: entered promiscuous mode [ 606.905028][T24048] syzkaller1: entered allmulticast mode [ 607.817362][T24083] syzkaller1: entered promiscuous mode [ 607.842429][T24083] syzkaller1: entered allmulticast mode [ 610.253597][T24173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.655432][T24188] netlink: 188 bytes leftover after parsing attributes in process `syz.9.8051'. [ 611.186145][ T5920] kernel write not supported for file /input/event0 (pid: 5920 comm: kworker/0:4) [ 612.202209][ T5920] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 612.284493][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8059'. [ 612.371303][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 612.380540][T24220] bond_slave_0: entered promiscuous mode [ 612.387228][T24220] bond_slave_1: entered promiscuous mode [ 612.392962][T24220] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 612.436236][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.451278][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.492456][ T5920] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 612.512301][T24220] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 612.539722][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.592845][ T5920] usb 1-1: config 0 descriptor?? [ 613.433509][ T5920] letsketch 0003:6161:4D15.008F: Device info: â·· [ 613.682477][ T5920] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 613.700730][ T5920] letsketch 0003:6161:4D15.008F: probe with driver letsketch failed with error -71 [ 613.725994][ T5920] usb 1-1: USB disconnect, device number 12 [ 614.292404][ T30] audit: type=1400 audit(2000000940.902:1495): avc: denied { associate } for pid=24262 comm="syz.8.8074" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 614.313357][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.397774][T24264] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8076'. [ 614.432835][T24264] netlink: 'syz.9.8076': attribute type 30 has an invalid length. [ 614.520512][ T2935] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.596314][ T2935] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.631412][ T2935] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.640419][ T2935] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.303456][T24309] 8021q: VLANs not supported on ip_vti0 [ 616.434228][ T30] audit: type=1400 audit(2000000943.062:1496): avc: denied { mounton } for pid=24310 comm="syz.9.8096" path=2F3338322FE91F7189591E9233614B dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 616.657893][T24323] input: syz1 as /devices/virtual/input/input91 [ 616.690913][T24323] input: failed to attach handler leds to device input91, error: -6 [ 617.155725][T24333] netlink: 'syz.4.8106': attribute type 1 has an invalid length. [ 617.326905][T24333] bond2: entered promiscuous mode [ 617.335176][T24333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.586490][T24336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.646614][T24336] bond2: (slave bond3): making interface the new active one [ 617.681771][T24336] bond3: entered promiscuous mode [ 617.689797][T24336] bond2: (slave bond3): Enslaving as an active interface with an up link [ 618.037346][ T30] audit: type=1326 audit(2000000944.662:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 618.082022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 618.090841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 618.122613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 618.221668][ T30] audit: type=1326 audit(2000000944.662:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 618.334987][ T30] audit: type=1326 audit(2000000944.662:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 618.446375][ T30] audit: type=1326 audit(2000000944.662:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 618.600582][ T30] audit: type=1326 audit(2000000944.662:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 618.727595][ T30] audit: type=1326 audit(2000000944.662:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 618.860631][ T30] audit: type=1326 audit(2000000944.662:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 619.009897][ T30] audit: type=1326 audit(2000000944.702:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 619.287007][T24362] vlan2: entered allmulticast mode [ 619.311669][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 619.311683][ T30] audit: type=1326 audit(2000000945.932:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 619.345423][T24362] bond0: entered allmulticast mode [ 619.350561][T24362] bond_slave_0: entered allmulticast mode [ 619.382153][T24362] bond_slave_1: entered allmulticast mode [ 619.421773][ T30] audit: type=1326 audit(2000000945.932:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 619.542378][ T30] audit: type=1326 audit(2000000945.932:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 619.715526][ T30] audit: type=1326 audit(2000000945.932:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 619.742995][ T30] audit: type=1326 audit(2000000945.932:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 619.767459][ T30] audit: type=1326 audit(2000000945.932:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 619.792320][ T30] audit: type=1326 audit(2000000945.932:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 619.817459][ T30] audit: type=1326 audit(2000000945.972:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 619.842275][ T30] audit: type=1326 audit(2000000945.972:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3bf12ade9 code=0x7ffc0000 [ 619.860466][T24367] sp0: Synchronizing with TNC [ 619.941704][ T30] audit: type=1326 audit(2000000945.972:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24346 comm="syz.4.8108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 620.926715][T24398] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 621.721688][ T5920] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 621.870340][T24416] netlink: 'syz.4.8138': attribute type 22 has an invalid length. [ 621.885805][ T5920] usb 9-1: Using ep0 maxpacket: 8 [ 621.890920][T24416] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8138'. [ 621.912423][ T5920] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 621.931238][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.959541][ T5920] usb 9-1: Product: syz [ 621.971546][ T5920] usb 9-1: Manufacturer: syz [ 621.984163][ T5920] usb 9-1: SerialNumber: syz [ 622.013992][ T5920] usb 9-1: config 0 descriptor?? [ 622.027891][ T5920] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 622.508659][T24431] overlay: filesystem on ./bus is read-only [ 622.675733][T24435] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8146'. [ 623.048730][ T5920] gspca_sonixj: reg_w err -71 [ 623.053707][ T5920] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 623.061424][T16979] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 623.087450][ T5920] usb 9-1: USB disconnect, device number 22 [ 623.222697][T16979] usb 1-1: Using ep0 maxpacket: 16 [ 623.247042][T16979] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.279303][T16979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.311145][T16979] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 623.357784][T16979] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.371254][T16979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 623.379253][T16979] usb 1-1: SerialNumber: syz [ 623.387972][T16979] hub 1-1:1.0: bad descriptor, ignoring hub [ 623.401111][T16979] hub 1-1:1.0: probe with driver hub failed with error -5 [ 623.416408][T16979] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 623.735075][T16979] usb 1-1: USB disconnect, device number 13 [ 627.875129][T16979] hid-generic 0005:16BF:5505.0090: unknown main item tag 0x0 [ 627.883068][T16979] hid-generic 0005:16BF:5505.0090: unknown main item tag 0x0 [ 627.898076][T16979] hid-generic 0005:16BF:5505.0090: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 629.382476][T24455] syzkaller1: entered promiscuous mode [ 629.387975][T24455] syzkaller1: entered allmulticast mode [ 629.464174][T24524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8183'. [ 629.620480][T24484] lo speed is unknown, defaulting to 1000 [ 629.620680][T24539] netlink: 'syz.0.8189': attribute type 2 has an invalid length. [ 630.150771][T24554] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8196'. [ 630.386296][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 630.386311][ T30] audit: type=1400 audit(2000000957.012:1901): avc: denied { map } for pid=24560 comm="syz.0.8198" path="/dev/video4" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 630.500474][T24562] lo speed is unknown, defaulting to 1000 [ 630.508807][ T30] audit: type=1400 audit(2000000957.042:1902): avc: denied { execute } for pid=24560 comm="syz.0.8198" path="/dev/video4" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 630.796502][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8202'. [ 631.133761][T24590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8209'. [ 631.395956][T24603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input92 [ 631.793154][T24615] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 631.812002][T24615] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 632.389705][T24631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8224'. [ 632.404774][T24631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8224'. [ 632.493075][ T5847] Bluetooth: hci5: sending frame failed (-49) [ 632.500750][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 632.564202][T24638] syzkaller1: entered promiscuous mode [ 632.576464][T24638] syzkaller1: entered allmulticast mode [ 634.437898][T24702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8256'. [ 634.478986][T24698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.077466][T24718] lo speed is unknown, defaulting to 1000 [ 635.376440][T16981] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 635.553407][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8267'. [ 635.558356][T16981] usb 9-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 635.572243][T24729] chnl_net:caif_netlink_parms(): no params data found [ 635.613665][T16981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.627203][T16981] usb 9-1: Product: syz [ 635.634795][T16981] usb 9-1: Manufacturer: syz [ 635.639416][T16981] usb 9-1: SerialNumber: syz [ 635.648546][T16981] usb 9-1: config 0 descriptor?? [ 635.973468][T24735] netlink: 'syz.7.8269': attribute type 12 has an invalid length. [ 636.037320][T24732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8268'. [ 636.037358][T16981] usb 9-1: USB disconnect, device number 23 [ 636.176535][ T30] audit: type=1326 audit(2000000962.802:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.0.8272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16c098ebe9 code=0x0 [ 636.444839][ T30] audit: type=1400 audit(2000000963.062:1904): avc: denied { accept } for pid=24747 comm="syz.4.8275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 636.861724][ T5920] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 637.021866][ T5920] usb 10-1: Using ep0 maxpacket: 8 [ 637.045367][ T5920] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 637.087967][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.116754][ T5920] usb 10-1: Product: syz [ 637.136797][ T5920] usb 10-1: Manufacturer: syz [ 637.157847][ T5920] usb 10-1: SerialNumber: syz [ 637.185743][ T5920] usb 10-1: config 0 descriptor?? [ 637.224168][ T5920] gspca_main: sq930x-2.14.0 probing 2770:930c [ 637.491166][T16979] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 637.661558][T16979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 637.713389][T16979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.748422][T16979] usb 9-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 637.766981][T16979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.945760][T16979] usb 9-1: config 0 descriptor?? [ 638.051266][ T5920] gspca_sq930x: ucbus_write failed -71 [ 638.281914][ T5920] gspca_sq930x: Sensor ov9630 not yet treated [ 638.288373][ T5920] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 638.337261][ T5920] usb 10-1: USB disconnect, device number 20 [ 638.365140][T16979] aquacomputer_d5next 0003:0C70:F011.0091: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.8-1/input0 [ 638.378516][T24794] syzkaller1: entered promiscuous mode [ 638.398524][T24794] syzkaller1: entered allmulticast mode [ 638.589784][T16979] usb 9-1: USB disconnect, device number 24 [ 639.011185][T16981] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 639.182089][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8305'. [ 639.222997][T16981] usb 1-1: Using ep0 maxpacket: 16 [ 639.247116][T16981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.262268][T16981] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 639.300883][T16981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.338965][T16981] usb 1-1: config 0 descriptor?? [ 639.797948][T16981] sunplus 0003:04FC:05D8.0092: reserved main item tag 0xd [ 639.846547][T16981] sunplus 0003:04FC:05D8.0092: unexpected long global item [ 639.862188][T16981] sunplus 0003:04FC:05D8.0092: probe with driver sunplus failed with error -22 [ 640.001148][T16981] usb 1-1: USB disconnect, device number 14 [ 640.179676][T24854] lo speed is unknown, defaulting to 1000 [ 640.286106][T24861] trusted_key: syz.7.8325 sent an empty control message without MSG_MORE. [ 640.467502][T24856] lo speed is unknown, defaulting to 1000 [ 640.497647][T24869] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 640.497676][T24869] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 640.605036][T24871] netlink: 'syz.7.8329': attribute type 2 has an invalid length. [ 641.344955][T24886] loop8: detected capacity change from 0 to 8 [ 641.381915][T24887] netlink: 208 bytes leftover after parsing attributes in process `syz.8.8333'. [ 641.392733][T24886] Dev loop8: unable to read RDB block 8 [ 641.405158][T24886] loop8: unable to read partition table [ 641.412948][T24886] loop8: partition table beyond EOD, truncated [ 641.420646][T24886] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 641.454291][T24887] netlink: 208 bytes leftover after parsing attributes in process `syz.8.8333'. [ 641.669953][ T30] audit: type=1400 audit(2000000968.292:1905): avc: denied { mounton } for pid=24889 comm="syz.8.8335" path="/376/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 642.000832][T24903] syzkaller1: entered promiscuous mode [ 642.016702][T24903] syzkaller1: entered allmulticast mode [ 642.270769][T24909] syzkaller1: entered allmulticast mode [ 642.932188][T24930] dvmrp0: entered allmulticast mode [ 643.141735][ T5921] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 643.317462][ T5921] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 643.342266][ T5921] usb 5-1: config 0 has no interface number 0 [ 643.348669][ T5921] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.422097][ T5921] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 643.476907][ T5921] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 643.516296][ T5921] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 643.534141][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.546407][ T5921] usb 5-1: config 0 descriptor?? [ 643.564953][T24945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 643.575945][ T5921] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input94 [ 643.636804][T24945] overlayfs: maximum fs stacking depth exceeded [ 643.661441][ C1] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 643.880749][ T6027] usb 5-1: USB disconnect, device number 81 [ 644.547239][ T30] audit: type=1400 audit(2000000971.172:1906): avc: denied { watch } for pid=24970 comm="syz.4.8371" path="/1849/bus" dev="tmpfs" ino=9392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 644.570665][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.616260][ T30] audit: type=1400 audit(2000000971.172:1907): avc: denied { watch_sb } for pid=24970 comm="syz.4.8371" path="/1849/bus" dev="tmpfs" ino=9392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 644.639162][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.070350][T24989] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8378'. [ 645.197475][T24978] syz.7.8373 (24978): drop_caches: 2 [ 645.326750][T24992] syzkaller1: entered promiscuous mode [ 645.363918][T24992] syzkaller1: entered allmulticast mode [ 645.491617][ T30] audit: type=1400 audit(2000000972.122:1908): avc: denied { unmount } for pid=20417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 645.672441][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 645.675235][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 645.862164][ T6027] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 646.034770][ T6027] usb 1-1: Using ep0 maxpacket: 32 [ 646.055769][ T6027] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 646.089955][ T6027] usb 1-1: config 0 has no interface number 0 [ 646.107582][ T6027] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 646.125222][ T6027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.136277][ T6027] usb 1-1: Product: syz [ 646.140651][ T6027] usb 1-1: Manufacturer: syz [ 646.172911][ T6027] usb 1-1: SerialNumber: syz [ 646.209836][ T6027] usb 1-1: config 0 descriptor?? [ 646.233231][ T6027] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 646.314766][T25027] netlink: 84 bytes leftover after parsing attributes in process `syz.8.8394'. [ 646.327963][T25027] nbd: must specify at least one socket [ 646.451795][ T6027] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 646.503425][ T6027] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 646.533263][ T30] audit: type=1800 audit(2000000973.162:1909): pid=25034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8398" name="nullb0" dev="devtmpfs" ino=4718 res=0 errno=0 [ 646.839374][T25044] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8402'. [ 646.864408][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 646.865296][T16981] usb 1-1: USB disconnect, device number 15 [ 646.880873][T25044] netlink: 'syz.7.8402': attribute type 7 has an invalid length. [ 646.906830][T16981] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 646.931671][T25044] netlink: 'syz.7.8402': attribute type 8 has an invalid length. [ 646.938271][T16981] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 646.965877][T16981] quatech2 1-1:0.51: device disconnected [ 646.970852][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8402'. [ 647.023155][T25044] gretap0: entered promiscuous mode [ 647.044254][T25044] gretap0: left promiscuous mode [ 647.077989][T25048] mkiss: ax0: crc mode is auto. [ 647.343703][T19016] Bluetooth: hci5: Frame reassembly failed (-84) [ 647.355146][T25060] Bluetooth: hci5: Frame reassembly failed (-84) [ 649.351599][ T5853] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 649.352279][ T5847] Bluetooth: hci5: command 0xfc11 tx timeout [ 649.955783][T25139] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.982740][ T5921] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 650.175085][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 650.200799][ T5921] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 650.226802][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.259971][ T5921] usb 5-1: Product: syz [ 650.273626][ T5921] usb 5-1: Manufacturer: syz [ 650.284343][ T5921] usb 5-1: SerialNumber: syz [ 650.320432][ T5921] usb 5-1: config 0 descriptor?? [ 650.755182][ T5921] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 650.793500][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 650.838635][ T5921] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 650.881226][ T5921] usb 5-1: media controller created [ 650.984548][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.114195][ T5921] zl10353_read_register: readreg error (reg=127, ret==0) [ 651.141778][ T5921] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 651.178565][ T5921] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 651.210812][ T5921] usb 5-1: USB disconnect, device number 82 [ 651.300487][ T5921] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 651.589530][ T30] audit: type=1400 audit(2000000978.212:1910): avc: denied { read } for pid=25183 comm="syz.0.8466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 651.610581][ T6027] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 651.681760][ T5920] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 651.782439][ T6027] usb 10-1: Using ep0 maxpacket: 8 [ 651.807922][ T6027] usb 10-1: config 8 has an invalid interface number: 49 but max is 0 [ 651.838212][ T6027] usb 10-1: config 8 has no interface number 0 [ 651.858574][ T6027] usb 10-1: config 8 interface 49 has no altsetting 0 [ 651.885846][ T6027] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=ba.d7 [ 651.896126][ T6027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.905989][ T5920] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 651.921672][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.930021][ T6027] usb 10-1: Product: syz [ 651.934428][ T6027] usb 10-1: Manufacturer: syz [ 651.939217][ T6027] usb 10-1: SerialNumber: syz [ 651.944675][ T5920] usb 9-1: Product: syz [ 651.948868][ T5920] usb 9-1: Manufacturer: syz [ 651.961781][ T5920] usb 9-1: SerialNumber: syz [ 651.974738][ T5920] usb 9-1: config 0 descriptor?? [ 652.184827][ T6027] uvcvideo 10-1:8.49: probe with driver uvcvideo failed with error -22 [ 652.234779][ T6027] usb 10-1: USB disconnect, device number 21 [ 652.260607][ T5952] usb 9-1: USB disconnect, device number 25 [ 653.088167][T25219] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8482'. [ 653.115389][T25219] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8482'. [ 653.272930][T25225] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8484'. [ 653.507844][ T30] audit: type=1400 audit(2000000980.122:1911): avc: denied { read open } for pid=25234 comm="syz.0.8488" path="/" dev="configfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 653.544642][ T5920] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 653.622189][ T5952] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 653.715305][ T5920] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.733225][ T5920] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.747930][ T5920] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 653.781750][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 653.795068][ T5952] usb 10-1: Using ep0 maxpacket: 16 [ 653.800494][ T5920] usb 9-1: SerialNumber: syz [ 653.808190][ T5952] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.823795][ T5952] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.837807][ T5952] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.850073][ T5952] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.892245][ T5952] usb 10-1: config 0 descriptor?? [ 654.010269][T25246] tap0: tun_chr_ioctl cmd 1074025675 [ 654.016330][T25246] tap0: persist enabled [ 654.026045][T25246] tap0: tun_chr_ioctl cmd 1074025675 [ 654.033573][T25246] tap0: persist enabled [ 654.060928][ T5920] usb 9-1: 0:2 : does not exist [ 654.086619][ T5920] usb 9-1: USB disconnect, device number 26 [ 654.194604][ T5853] Bluetooth: hci4: unexpected event for opcode 0x041c [ 654.227426][ T5952] usbhid 10-1:0.0: can't add hid device: -71 [ 654.250713][ T5952] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 654.267268][ T5952] usb 10-1: USB disconnect, device number 22 [ 654.313473][T25250] PM: Enabling pm_trace changes system date and time during resume. [ 654.313473][T25250] PM: Correct system time has to be restored manually after resume. [ 654.799233][T25258] SELinux: failed to load policy [ 657.308763][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 657.335333][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 657.360915][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 657.383686][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 657.396899][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 657.864989][T23109] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 659.199033][ T30] audit: type=1326 audit(2000000985.812:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 659.240524][ T30] audit: type=1326 audit(2000000985.822:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 659.289090][ T30] audit: type=1326 audit(2000000985.822:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 659.314134][ T30] audit: type=1326 audit(2000000985.822:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 659.338711][ T30] audit: type=1326 audit(2000000985.822:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 659.518777][ T5847] Bluetooth: hci2: command tx timeout [ 660.629504][T19016] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.684716][T25326] netlink: 'syz.4.8527': attribute type 1 has an invalid length. [ 660.691119][ T30] audit: type=1400 audit(2000000987.312:1917): avc: denied { read } for pid=25327 comm="syz.9.8528" path="socket:[137927]" dev="sockfs" ino=137927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 660.703453][T25326] netlink: 'syz.4.8527': attribute type 2 has an invalid length. [ 660.828386][T19016] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.904729][T25301] lo speed is unknown, defaulting to 1000 [ 661.078501][T19016] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.256078][T25349] raw_sendmsg: syz.4.8537 forgot to set AF_INET. Fix it! [ 661.497969][T19016] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.591586][ T5847] Bluetooth: hci2: command tx timeout [ 661.667054][T25301] chnl_net:caif_netlink_parms(): no params data found [ 661.880607][T25301] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.880705][T25301] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.880911][T25301] bridge_slave_0: entered allmulticast mode [ 661.882776][T25301] bridge_slave_0: entered promiscuous mode [ 662.021217][T25301] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.021309][T25301] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.021512][T25301] bridge_slave_1: entered allmulticast mode [ 662.023040][T25301] bridge_slave_1: entered promiscuous mode [ 662.122715][T25364] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 662.122889][T25364] SELinux: failed to load policy [ 662.172692][T25301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.175790][T25301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.292789][T25301] team0: Port device team_slave_0 added [ 662.315340][T25301] team0: Port device team_slave_1 added [ 662.407873][T25301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.415596][T25301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.444214][T25301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.464635][T19016] bridge_slave_1: left promiscuous mode [ 662.470465][T19016] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.482012][T25366] lo speed is unknown, defaulting to 1000 [ 662.497535][T19016] bridge_slave_0: left allmulticast mode [ 662.504323][T19016] bridge_slave_0: left promiscuous mode [ 662.510266][T19016] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.521371][T16990] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 662.543704][T19016] bond_slave_0: left promiscuous mode [ 662.553844][T19016] bond_slave_1: left promiscuous mode [ 662.559583][T19016] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 662.684484][T16990] usb 1-1: config 0 has no interfaces? [ 662.693471][T16990] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 662.702822][T16990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.710831][T16990] usb 1-1: Product: syz [ 662.715551][T16990] usb 1-1: Manufacturer: syz [ 662.720156][T16990] usb 1-1: SerialNumber: syz [ 662.728563][T16990] usb 1-1: config 0 descriptor?? [ 662.866877][T19016] dvmrp0 (unregistering): left allmulticast mode [ 662.874456][ T6027] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 663.042039][ T6027] usb 5-1: Using ep0 maxpacket: 8 [ 663.064436][ T6027] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 663.074203][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.083008][ T6027] usb 5-1: Product: syz [ 663.087556][ T6027] usb 5-1: Manufacturer: syz [ 663.092382][ T6027] usb 5-1: SerialNumber: syz [ 663.099699][ T6027] usb 5-1: config 0 descriptor?? [ 663.120304][ T6027] gspca_main: se401-2.14.0 probing 047d:5003 [ 663.295326][T19016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.310649][T19016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.323400][T19016] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 663.344942][T19016] bond0 (unregistering): Released all slaves [ 663.533518][ T6027] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 663.541786][ T6027] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 663.551746][ T6027] usb 5-1: USB disconnect, device number 83 [ 663.573171][T19016] bond1 (unregistering): Released all slaves [ 663.592209][T25301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.599273][T25301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.626450][T25301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.678067][ T5847] Bluetooth: hci2: command tx timeout [ 663.814582][ T30] audit: type=1400 audit(2000000990.442:1918): avc: denied { listen } for pid=25377 comm="syz.9.8548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 663.904248][T25301] hsr_slave_0: entered promiscuous mode [ 663.910964][T25301] hsr_slave_1: entered promiscuous mode [ 663.918210][T16979] usb 1-1: USB disconnect, device number 16 [ 663.918958][T25301] debugfs: 'hsr0' already exists in 'hsr' [ 663.930160][T25301] Cannot create hsr debugfs directory [ 663.944493][T25382] netlink: 'syz.9.8549': attribute type 4 has an invalid length. [ 663.991973][T25381] netlink: 'syz.9.8549': attribute type 4 has an invalid length. [ 664.101195][T19016] hsr_slave_0: left promiscuous mode [ 664.114197][T19016] hsr_slave_1: left promiscuous mode [ 664.120469][T19016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.139631][T19016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.149433][T19016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.160772][T19016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.175542][T19016] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 664.185264][T19016] batman_adv: batadv0: Removing interface: ipvlan2 [ 664.226154][T19016] veth1_macvtap: left promiscuous mode [ 664.234192][T19016] veth0_macvtap: left promiscuous mode [ 664.245249][T19016] veth1_vlan: left promiscuous mode [ 664.254121][T19016] veth0_vlan: left promiscuous mode [ 664.302145][T25386] block nbd3: server does not support multiple connections per device. [ 664.330485][T25386] block nbd3: shutting down sockets [ 665.078122][ T30] audit: type=1326 audit(2000000991.702:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25417 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c098ebe9 code=0x7fc00000 [ 665.676451][T19016] team0 (unregistering): Port device team_slave_1 removed [ 665.752682][ T5847] Bluetooth: hci2: command tx timeout [ 665.843075][T19016] team0 (unregistering): Port device team_slave_0 removed [ 665.856523][ T30] audit: type=1326 audit(2000000992.482:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25417 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f16c098ebe9 code=0x7fc00000 [ 666.072090][ T6027] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 666.186551][ T30] audit: type=1326 audit(2000000992.812:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.8572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 666.231398][ T30] audit: type=1326 audit(2000000992.812:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.8572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 666.242871][ T6027] usb 10-1: Using ep0 maxpacket: 32 [ 666.263285][ T30] audit: type=1326 audit(2000000992.822:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.8572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 666.298743][ T30] audit: type=1326 audit(2000000992.822:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.8572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 666.317800][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 666.331367][ T6027] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 666.370188][ T30] audit: type=1326 audit(2000000992.822:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.8572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 666.418813][ T30] audit: type=1326 audit(2000000992.822:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.8572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 666.469193][ T6027] usb 10-1: config 0 has no interface number 0 [ 666.480497][ T6027] usb 10-1: config 0 interface 184 has no altsetting 0 [ 666.482610][ T30] audit: type=1326 audit(2000000992.822:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.8572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 666.500748][ T6027] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 666.565304][ T30] audit: type=1326 audit(2000000992.842:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25441 comm="syz.4.8572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bf18ebe9 code=0x7ffc0000 [ 666.575920][ T6027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.621243][ T6027] usb 10-1: Product: syz [ 666.625631][ T6027] usb 10-1: Manufacturer: syz [ 666.630329][ T6027] usb 10-1: SerialNumber: syz [ 666.669520][ T6027] usb 10-1: config 0 descriptor?? [ 666.682680][ T6027] smsc75xx v1.0.0 [ 667.277027][T25451] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.287019][T25451] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.302657][ T6027] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 667.329302][ T6027] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 667.589838][T25451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.658496][T25451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.759505][ T6027] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 667.782610][ T6027] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 667.818950][ T6027] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 667.845378][ T6027] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 667.856926][T25457] ptrace attach of ""[25458] was attempted by "./syz-executor exec"[25457] [ 667.918754][ T6027] usb 10-1: USB disconnect, device number 23 [ 668.038754][T25460] netlink: 'syz.7.8578': attribute type 21 has an invalid length. [ 668.053870][T25460] netlink: 'syz.7.8578': attribute type 22 has an invalid length. [ 668.063020][T25460] netlink: 'syz.7.8578': attribute type 23 has an invalid length. [ 668.106186][T25460] netlink: 'syz.7.8578': attribute type 25 has an invalid length. [ 668.147892][T25460] netlink: 'syz.7.8578': attribute type 26 has an invalid length. [ 668.174804][T23109] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.184674][T25460] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8578'. [ 668.194202][ T2935] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.254868][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.302541][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.924743][T25473] netlink: 'syz.9.8582': attribute type 9 has an invalid length. [ 668.959913][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8582'. [ 669.083418][T25473] netlink: 'syz.9.8582': attribute type 9 has an invalid length. [ 669.109569][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8582'. [ 669.605845][T16979] libceph: connect (1)[c::]:6789 error -101 [ 669.652328][T16979] libceph: mon0 (1)[c::]:6789 connect error [ 669.913487][T25498] lo speed is unknown, defaulting to 1000 [ 669.949857][T16979] libceph: connect (1)[c::]:6789 error -101 [ 670.000473][T16979] libceph: mon0 (1)[c::]:6789 connect error [ 670.350608][T25487] ceph: No mds server is up or the cluster is laggy [ 670.583956][T25519] netlink: 'syz.4.8591': attribute type 10 has an invalid length. [ 670.592977][T25519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8591'. [ 670.595338][T25301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.635403][T25301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 670.656484][T25519] dummy0: entered promiscuous mode [ 670.672370][T25519] bridge0: port 3(dummy0) entered blocking state [ 670.694106][T25519] bridge0: port 3(dummy0) entered disabled state [ 670.715996][T25519] dummy0: entered allmulticast mode [ 670.746629][T25301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 670.779892][T25301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 670.964507][ T30] audit: type=1326 audit(2000000997.592:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25531 comm="syz.4.8592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3bf18ebe9 code=0x0 [ 671.042484][T25301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.076368][T25301] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.107888][T19016] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.115385][T19016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.187090][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.194475][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.749538][T25301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.478429][T25301] veth0_vlan: entered promiscuous mode [ 672.500521][T25301] veth1_vlan: entered promiscuous mode [ 672.729149][T25301] veth0_macvtap: entered promiscuous mode [ 672.796507][T25301] veth1_macvtap: entered promiscuous mode [ 672.882633][T25301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.933660][T25301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.994116][T19016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.032815][T19016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.048060][T25594] ALSA: seq fatal error: cannot create timer (-16) [ 673.071826][ T3529] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.123286][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.381645][T19016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.389950][T19016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.477009][T23109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.506234][T23109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.729676][T25621] syzkaller1: entered promiscuous mode [ 673.794881][T25621] syzkaller1: entered allmulticast mode [ 674.297943][T25643] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8614'. [ 674.345338][T25643] netlink: 'syz.9.8614': attribute type 7 has an invalid length. [ 674.359563][T25643] netlink: 'syz.9.8614': attribute type 8 has an invalid length. [ 674.369218][T25643] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8614'. [ 674.471665][T16979] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 674.491353][T25643] erspan0: entered promiscuous mode [ 674.527645][T25643] gretap0: entered promiscuous mode [ 674.659517][T16979] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 674.689925][T16979] usb 6-1: config 0 has no interface number 1 [ 674.711262][T16979] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 674.731859][T16979] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 674.766260][T16979] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 674.782389][T16979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 674.805302][T16979] usb 6-1: SerialNumber: syz [ 674.837637][T16979] usb 6-1: config 0 descriptor?? [ 674.863898][T16979] usb 6-1: Found UVC 0.00 device (0002:0000) [ 674.894739][T16979] usb 6-1: No valid video chain found. [ 674.903046][T25664] netlink: 'syz.4.8622': attribute type 1 has an invalid length. [ 674.990068][T25664] bond4: entered promiscuous mode [ 675.023034][T25664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 675.068290][ T5921] usb 6-1: USB disconnect, device number 39 [ 675.129415][T25671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 675.168895][T25671] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 675.206472][T25671] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 675.265524][T25671] bond4: (slave vcan1): making interface the new active one [ 675.301213][T25671] vcan1: entered promiscuous mode [ 675.317347][T25671] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 675.351171][ T5952] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 675.511264][ T5952] usb 10-1: Using ep0 maxpacket: 32 [ 675.523354][ T5952] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.544454][ T5952] usb 10-1: config 0 has no interfaces? [ 675.550164][ T5952] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 675.577604][ T5952] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.612497][ T5952] usb 10-1: config 0 descriptor?? [ 675.910564][T25675] program syz.9.8624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 675.992100][ T5853] Bluetooth: hci2: command 0x0405 tx timeout [ 676.161794][ C1] sd 0:0:1:0: [sda] tag#827 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 676.172338][ C1] sd 0:0:1:0: [sda] tag#827 CDB: Write(6) 0a 00 00 00 00 00 [ 676.344575][ T5952] usb 10-1: USB disconnect, device number 24 [ 676.838454][T25714] netlink: 'syz.5.8630': attribute type 10 has an invalid length. [ 676.886004][T25714] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8630'. [ 676.988042][T25714] team0: Port device geneve0 added [ 677.351950][ T5853] Bluetooth: hci0: command 0x0405 tx timeout [ 677.483172][T25722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.524976][ T30] audit: type=1326 audit(2000001004.132:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.5.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be938ebe9 code=0x7ffc0000 [ 677.675810][ T30] audit: type=1326 audit(2000001004.132:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.5.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0be938ebe9 code=0x7ffc0000 [ 677.835311][ T30] audit: type=1326 audit(2000001004.132:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.5.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be938ebe9 code=0x7ffc0000 [ 677.990082][ T30] audit: type=1326 audit(2000001004.132:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.5.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be938ebe9 code=0x7ffc0000 [ 678.303189][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 678.309438][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 678.508414][T16979] libceph: connect (1)[c::]:6789 error -101 [ 678.523390][T16979] libceph: mon0 (1)[c::]:6789 connect error [ 678.612075][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 678.636998][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 678.784099][T16979] libceph: connect (1)[c::]:6789 error -101 [ 678.797593][T16979] libceph: mon0 (1)[c::]:6789 connect error [ 679.001000][T25754] netlink: 'syz.5.8640': attribute type 5 has an invalid length. [ 679.105719][T25736] ceph: No mds server is up or the cluster is laggy [ 679.126386][T25740] ceph: No mds server is up or the cluster is laggy [ 679.172164][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 679.178343][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 679.553031][T16979] libceph: connect (1)[c::]:6789 error -101 [ 679.553298][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 679.571360][T16979] libceph: mon0 (1)[c::]:6789 connect error [ 679.663819][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 679.851477][T16979] libceph: connect (1)[c::]:6789 error -101 [ 679.858487][T16979] libceph: mon0 (1)[c::]:6789 connect error [ 679.952046][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 679.958331][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 680.284788][T25774] ceph: No mds server is up or the cluster is laggy [ 680.284788][T25781] ceph: No mds server is up or the cluster is laggy [ 680.311251][T16979] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 680.403417][T16988] libceph: connect (1)[c::]:6789 error -101 [ 680.410099][T16988] libceph: mon0 (1)[c::]:6789 connect error [ 680.410199][ T979] kworker/0:2 (979) used greatest stack depth: 17880 bytes left [ 680.511596][T16979] usb 5-1: Using ep0 maxpacket: 16 [ 680.520570][T16979] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 680.571433][T25815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25815 comm=syz.9.8655 [ 680.588757][T16979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.631156][T16979] usb 5-1: Product: syz [ 680.635960][T16979] usb 5-1: Manufacturer: syz [ 680.640740][T16979] usb 5-1: SerialNumber: syz [ 680.688998][T16979] usb 5-1: config 0 descriptor?? [ 680.733384][T16979] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 680.769334][T25820] lo speed is unknown, defaulting to 1000 [ 681.013227][T25834] [ 681.015586][T25834] ===================================================== [ 681.022528][T25834] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 681.030085][T25834] syzkaller #0 Not tainted [ 681.034788][T25834] ----------------------------------------------------- [ 681.041750][T25834] syz.5.8664/25834 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 681.049563][T25834] ffff8880746fb948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 681.058327][T25834] [ 681.058327][T25834] and this task is already holding: [ 681.065877][T25834] ffff88802a398028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 681.075721][T25834] which would create a new lock dependency: [ 681.081850][T25834] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 681.090030][T25834] [ 681.090030][T25834] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 681.099750][T25834] (&dev->event_lock#2){..-.}-{3:3} [ 681.099788][T25834] [ 681.099788][T25834] ... which became SOFTIRQ-irq-safe at: [ 681.112856][T25834] lock_acquire+0x179/0x350 [ 681.117587][T25834] _raw_spin_lock_irqsave+0x3a/0x60 [ 681.123406][T25834] input_event+0x74/0xd0 [ 681.127751][T25834] xpad360_process_packet.part.0+0x689/0xce0 [ 681.133991][T25834] xpad_irq_in+0x8b5/0x2ac0 [ 681.138733][T25834] __usb_hcd_giveback_urb+0x388/0x610 [ 681.144502][T25834] usb_hcd_giveback_urb+0x39b/0x450 [ 681.149819][T25834] dummy_timer+0x1814/0x3a30 [ 681.154663][T25834] __hrtimer_run_queues+0x1ff/0xad0 [ 681.160036][T25834] hrtimer_run_softirq+0x17d/0x350 [ 681.165342][T25834] handle_softirqs+0x216/0x8e0 [ 681.170271][T25834] __irq_exit_rcu+0x109/0x170 [ 681.175021][T25834] irq_exit_rcu+0x9/0x30 [ 681.179437][T25834] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 681.185176][T25834] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 681.191249][T25834] preempt_count_sub+0x46/0x160 [ 681.196282][T25834] _raw_spin_unlock_irqrestore+0x3b/0x80 [ 681.202082][T25834] get_partial_node.part.0+0x1b0/0x360 [ 681.207627][T25834] ___slab_alloc+0x63b/0x1740 [ 681.212403][T25834] __slab_alloc.constprop.0+0x56/0xb0 [ 681.217851][T25834] kmem_cache_alloc_noprof+0xef/0x3b0 [ 681.223303][T25834] getname_flags.part.0+0x4c/0x550 [ 681.228579][T25834] getname_flags+0x93/0xf0 [ 681.233247][T25834] do_readlinkat+0xb4/0x3a0 [ 681.237830][T25834] __x64_sys_readlink+0x78/0xc0 [ 681.242832][T25834] do_syscall_64+0xcd/0x4c0 [ 681.247606][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.253698][T25834] [ 681.253698][T25834] to a SOFTIRQ-irq-unsafe lock: [ 681.260992][T25834] (tasklist_lock){.+.+}-{3:3} [ 681.261021][T25834] [ 681.261021][T25834] ... which became SOFTIRQ-irq-unsafe at: [ 681.274093][T25834] ... [ 681.274104][T25834] lock_acquire+0x179/0x350 [ 681.281653][T25834] _raw_read_lock+0x5f/0x70 [ 681.286388][T25834] __do_wait+0x105/0x890 [ 681.290849][T25834] do_wait+0x21e/0x5a0 [ 681.295108][T25834] kernel_wait+0x9f/0x160 [ 681.299577][T25834] call_usermodehelper_exec_work+0xf1/0x170 [ 681.305587][T25834] process_one_work+0x9cf/0x1b70 [ 681.310618][T25834] worker_thread+0x6c8/0xf10 [ 681.315388][T25834] kthread+0x3c5/0x780 [ 681.319575][T25834] ret_from_fork+0x5d7/0x6f0 [ 681.324951][T25834] ret_from_fork_asm+0x1a/0x30 [ 681.329944][T25834] [ 681.329944][T25834] other info that might help us debug this: [ 681.329944][T25834] [ 681.340259][T25834] Chain exists of: [ 681.340259][T25834] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 681.340259][T25834] [ 681.354357][T25834] Possible interrupt unsafe locking scenario: [ 681.354357][T25834] [ 681.363007][T25834] CPU0 CPU1 [ 681.368450][T25834] ---- ---- [ 681.373816][T25834] lock(tasklist_lock); [ 681.378049][T25834] local_irq_disable(); [ 681.384813][T25834] lock(&dev->event_lock#2); [ 681.392004][T25834] lock(&client->buffer_lock); [ 681.399367][T25834] [ 681.402813][T25834] lock(&dev->event_lock#2); [ 681.408005][T25834] [ 681.408005][T25834] *** DEADLOCK *** [ 681.408005][T25834] [ 681.416563][T25834] 7 locks held by syz.5.8664/25834: [ 681.421758][T25834] #0: ffff888146b8f118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 681.431426][T25834] #1: ffff888021f38230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 681.441891][T25834] #2: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 681.451767][T25834] #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 681.461427][T25834] #4: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 681.470652][T25834] #5: ffff88802a398028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 681.481172][T25834] #6: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 681.490507][T25834] [ 681.490507][T25834] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 681.500980][T25834] -> (&dev->event_lock#2){..-.}-{3:3} { [ 681.507196][T25834] IN-SOFTIRQ-W at: [ 681.511257][T25834] lock_acquire+0x179/0x350 [ 681.517677][T25834] _raw_spin_lock_irqsave+0x3a/0x60 [ 681.524990][T25834] input_event+0x74/0xd0 [ 681.531678][T25834] xpad360_process_packet.part.0+0x689/0xce0 [ 681.540182][T25834] xpad_irq_in+0x8b5/0x2ac0 [ 681.547041][T25834] __usb_hcd_giveback_urb+0x388/0x610 [ 681.554544][T25834] usb_hcd_giveback_urb+0x39b/0x450 [ 681.561842][T25834] dummy_timer+0x1814/0x3a30 [ 681.568353][T25834] __hrtimer_run_queues+0x1ff/0xad0 [ 681.575388][T25834] hrtimer_run_softirq+0x17d/0x350 [ 681.583212][T25834] handle_softirqs+0x216/0x8e0 [ 681.589995][T25834] __irq_exit_rcu+0x109/0x170 [ 681.596594][T25834] irq_exit_rcu+0x9/0x30 [ 681.602881][T25834] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 681.610616][T25834] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 681.618728][T25834] preempt_count_sub+0x46/0x160 [ 681.625416][T25834] _raw_spin_unlock_irqrestore+0x3b/0x80 [ 681.632901][T25834] get_partial_node.part.0+0x1b0/0x360 [ 681.640389][T25834] ___slab_alloc+0x63b/0x1740 [ 681.647083][T25834] __slab_alloc.constprop.0+0x56/0xb0 [ 681.654434][T25834] kmem_cache_alloc_noprof+0xef/0x3b0 [ 681.661914][T25834] getname_flags.part.0+0x4c/0x550 [ 681.668843][T25834] getname_flags+0x93/0xf0 [ 681.675351][T25834] do_readlinkat+0xb4/0x3a0 [ 681.681967][T25834] __x64_sys_readlink+0x78/0xc0 [ 681.688735][T25834] do_syscall_64+0xcd/0x4c0 [ 681.695754][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.703735][T25834] INITIAL USE at: [ 681.707810][T25834] lock_acquire+0x179/0x350 [ 681.715820][T25834] _raw_spin_lock_irqsave+0x3a/0x60 [ 681.722873][T25834] input_inject_event+0x9f/0x3b0 [ 681.729570][T25834] led_set_brightness+0x217/0x290 [ 681.736429][T25834] kbd_led_trigger_activate+0xcb/0x110 [ 681.743624][T25834] led_trigger_set+0x59a/0xc50 [ 681.750326][T25834] led_trigger_set_default+0x1e0/0x2e0 [ 681.757550][T25834] led_classdev_register_ext+0x7b8/0xa10 [ 681.765697][T25834] input_leds_connect+0x552/0x8e0 [ 681.772455][T25834] input_attach_handler.isra.0+0x176/0x250 [ 681.780002][T25834] input_register_device+0xab9/0x1180 [ 681.787391][T25834] atkbd_connect+0x5f8/0xa40 [ 681.794176][T25834] serio_driver_probe+0x7c/0xd0 [ 681.800858][T25834] really_probe+0x241/0xa90 [ 681.807202][T25834] __driver_probe_device+0x1de/0x440 [ 681.814226][T25834] driver_probe_device+0x4c/0x1b0 [ 681.821104][T25834] __driver_attach+0x283/0x580 [ 681.833348][T25834] bus_for_each_dev+0x13e/0x1d0 [ 681.841093][T25834] serio_handle_event+0x335/0xc30 [ 681.848393][T25834] process_one_work+0x9cf/0x1b70 [ 681.855070][T25834] worker_thread+0x6c8/0xf10 [ 681.861640][T25834] kthread+0x3c5/0x780 [ 681.867552][T25834] ret_from_fork+0x5d7/0x6f0 [ 681.873983][T25834] ret_from_fork_asm+0x1a/0x30 [ 681.880526][T25834] } [ 681.883219][T25834] ... key at: [] __key.7+0x0/0x40 [ 681.893047][T25834] -> (&client->buffer_lock){....}-{3:3} { [ 681.898808][T25834] INITIAL USE at: [ 681.902696][T25834] lock_acquire+0x179/0x350 [ 681.908811][T25834] _raw_spin_lock+0x2e/0x40 [ 681.914979][T25834] evdev_pass_values+0x10e/0x9b0 [ 681.921485][T25834] evdev_events+0x1bb/0x390 [ 681.927757][T25834] input_pass_values+0x74e/0x880 [ 681.934816][T25834] input_handle_event+0xf00/0x14d0 [ 681.941867][T25834] input_inject_event+0x1e8/0x3b0 [ 681.949418][T25834] evdev_write+0x457/0x750 [ 681.955513][T25834] vfs_write+0x29d/0x11d0 [ 681.961584][T25834] ksys_write+0x1f8/0x250 [ 681.967679][T25834] do_syscall_64+0xcd/0x4c0 [ 681.974192][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.981735][T25834] } [ 681.984226][T25834] ... key at: [] __key.1+0x0/0x40 [ 681.991333][T25834] ... acquired at: [ 681.995321][T25834] _raw_spin_lock+0x2e/0x40 [ 682.000211][T25834] evdev_pass_values+0x10e/0x9b0 [ 682.005336][T25834] evdev_events+0x1bb/0x390 [ 682.010008][T25834] input_pass_values+0x74e/0x880 [ 682.015382][T25834] input_handle_event+0xf00/0x14d0 [ 682.020787][T25834] input_inject_event+0x1e8/0x3b0 [ 682.026040][T25834] evdev_write+0x457/0x750 [ 682.030661][T25834] vfs_write+0x29d/0x11d0 [ 682.035162][T25834] ksys_write+0x1f8/0x250 [ 682.039800][T25834] do_syscall_64+0xcd/0x4c0 [ 682.044476][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.050623][T25834] [ 682.052965][T25834] [ 682.052965][T25834] the dependencies between the lock to be acquired [ 682.052976][T25834] and SOFTIRQ-irq-unsafe lock: [ 682.066520][T25834] -> (tasklist_lock){.+.+}-{3:3} { [ 682.071913][T25834] HARDIRQ-ON-R at: [ 682.076048][T25834] lock_acquire+0x179/0x350 [ 682.082544][T25834] _raw_read_lock+0x5f/0x70 [ 682.089116][T25834] __do_wait+0x105/0x890 [ 682.095434][T25834] do_wait+0x21e/0x5a0 [ 682.101502][T25834] kernel_wait+0x9f/0x160 [ 682.108084][T25834] call_usermodehelper_exec_work+0xf1/0x170 [ 682.116098][T25834] process_one_work+0x9cf/0x1b70 [ 682.123477][T25834] worker_thread+0x6c8/0xf10 [ 682.130062][T25834] kthread+0x3c5/0x780 [ 682.136177][T25834] ret_from_fork+0x5d7/0x6f0 [ 682.142758][T25834] ret_from_fork_asm+0x1a/0x30 [ 682.149530][T25834] SOFTIRQ-ON-R at: [ 682.153695][T25834] lock_acquire+0x179/0x350 [ 682.160193][T25834] _raw_read_lock+0x5f/0x70 [ 682.166862][T25834] __do_wait+0x105/0x890 [ 682.173233][T25834] do_wait+0x21e/0x5a0 [ 682.179380][T25834] kernel_wait+0x9f/0x160 [ 682.185891][T25834] call_usermodehelper_exec_work+0xf1/0x170 [ 682.193863][T25834] process_one_work+0x9cf/0x1b70 [ 682.200819][T25834] worker_thread+0x6c8/0xf10 [ 682.207406][T25834] kthread+0x3c5/0x780 [ 682.213546][T25834] ret_from_fork+0x5d7/0x6f0 [ 682.220207][T25834] ret_from_fork_asm+0x1a/0x30 [ 682.226956][T25834] INITIAL USE at: [ 682.231026][T25834] lock_acquire+0x179/0x350 [ 682.237645][T25834] _raw_write_lock_irq+0x36/0x50 [ 682.244695][T25834] copy_process+0x4caf/0x7690 [ 682.251288][T25834] kernel_clone+0xfc/0x930 [ 682.257814][T25834] user_mode_thread+0xc7/0x110 [ 682.264515][T25834] rest_init+0x23/0x2b0 [ 682.270693][T25834] start_kernel+0x3ee/0x4d0 [ 682.277389][T25834] x86_64_start_reservations+0x18/0x30 [ 682.284997][T25834] x86_64_start_kernel+0x130/0x190 [ 682.292277][T25834] common_startup_64+0x13e/0x148 [ 682.299205][T25834] INITIAL READ USE at: [ 682.303775][T25834] lock_acquire+0x179/0x350 [ 682.310799][T25834] _raw_read_lock+0x5f/0x70 [ 682.317662][T25834] __do_wait+0x105/0x890 [ 682.324271][T25834] do_wait+0x21e/0x5a0 [ 682.330772][T25834] kernel_wait+0x9f/0x160 [ 682.338248][T25834] call_usermodehelper_exec_work+0xf1/0x170 [ 682.346594][T25834] process_one_work+0x9cf/0x1b70 [ 682.354844][T25834] worker_thread+0x6c8/0xf10 [ 682.361858][T25834] kthread+0x3c5/0x780 [ 682.368317][T25834] ret_from_fork+0x5d7/0x6f0 [ 682.375434][T25834] ret_from_fork_asm+0x1a/0x30 [ 682.382572][T25834] } [ 682.385260][T25834] ... key at: [] tasklist_lock+0x18/0x40 [ 682.393261][T25834] ... acquired at: [ 682.397237][T25834] _raw_read_lock+0x5f/0x70 [ 682.402019][T25834] send_sigurg+0xed/0xc80 [ 682.406536][T25834] sk_send_sigurg+0x76/0x360 [ 682.411325][T25834] unix_stream_sendmsg+0xfa5/0x1340 [ 682.418016][T25834] ____sys_sendmsg+0xa98/0xc70 [ 682.423273][T25834] ___sys_sendmsg+0x134/0x1d0 [ 682.428285][T25834] __sys_sendmsg+0x16d/0x220 [ 682.433119][T25834] do_syscall_64+0xcd/0x4c0 [ 682.437806][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.444026][T25834] [ 682.446339][T25834] -> (&f_owner->lock){....}-{3:3} { [ 682.451893][T25834] INITIAL USE at: [ 682.455943][T25834] lock_acquire+0x179/0x350 [ 682.462279][T25834] _raw_write_lock_irq+0x36/0x50 [ 682.469036][T25834] __f_setown+0x61/0x3c0 [ 682.475188][T25834] generic_setlease+0xeef/0x1300 [ 682.482156][T25834] kernel_setlease+0x106/0x140 [ 682.488930][T25834] vfs_setlease+0x258/0x2d0 [ 682.495343][T25834] fcntl_setlease+0x3ed/0x5a0 [ 682.502371][T25834] do_fcntl+0x751/0x15a0 [ 682.508449][T25834] __x64_sys_fcntl+0x163/0x200 [ 682.515237][T25834] do_syscall_64+0xcd/0x4c0 [ 682.521673][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.529455][T25834] INITIAL READ USE at: [ 682.534118][T25834] lock_acquire+0x179/0x350 [ 682.541012][T25834] _raw_read_lock_irq+0x67/0x80 [ 682.548658][T25834] f_getown+0x57/0x300 [ 682.555434][T25834] do_fcntl+0xf5f/0x15a0 [ 682.562813][T25834] __x64_sys_fcntl+0x163/0x200 [ 682.569904][T25834] do_syscall_64+0xcd/0x4c0 [ 682.576694][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.585127][T25834] } [ 682.587795][T25834] ... key at: [] __key.1+0x0/0x40 [ 682.595446][T25834] ... acquired at: [ 682.599377][T25834] _raw_read_lock_irqsave+0x74/0x90 [ 682.604874][T25834] send_sigio+0x31/0x3e0 [ 682.609482][T25834] kill_fasync+0x214/0x510 [ 682.614095][T25834] n_tty_receive_handle_newline+0x116/0x170 [ 682.620926][T25834] n_tty_receive_buf_standard+0x2060/0x3140 [ 682.627487][T25834] n_tty_receive_buf_common+0x8eb/0x1980 [ 682.633535][T25834] tty_ioctl+0x580/0x1680 [ 682.638185][T25834] __x64_sys_ioctl+0x18b/0x210 [ 682.643655][T25834] do_syscall_64+0xcd/0x4c0 [ 682.648357][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.654895][T25834] [ 682.657265][T25834] -> (&new->fa_lock){....}-{3:3} { [ 682.662501][T25834] INITIAL USE at: [ 682.666423][T25834] lock_acquire+0x179/0x350 [ 682.672586][T25834] _raw_write_lock_irq+0x36/0x50 [ 682.679796][T25834] fasync_insert_entry+0x1ca/0x2a0 [ 682.686707][T25834] lease_setup+0x9d/0x160 [ 682.693311][T25834] generic_setlease+0xeef/0x1300 [ 682.700182][T25834] kernel_setlease+0x106/0x140 [ 682.707078][T25834] vfs_setlease+0x258/0x2d0 [ 682.713782][T25834] fcntl_setlease+0x3ed/0x5a0 [ 682.720205][T25834] do_fcntl+0x751/0x15a0 [ 682.726374][T25834] __x64_sys_fcntl+0x163/0x200 [ 682.734157][T25834] do_syscall_64+0xcd/0x4c0 [ 682.740432][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.748968][T25834] INITIAL READ USE at: [ 682.753594][T25834] lock_acquire+0x179/0x350 [ 682.760276][T25834] _raw_read_lock_irqsave+0x74/0x90 [ 682.767557][T25834] kill_fasync+0x138/0x510 [ 682.774689][T25834] sock_wake_async+0x132/0x160 [ 682.782096][T25834] sk_wake_async+0x102/0x2e0 [ 682.790189][T25834] tcp_rcv_state_process+0x192e/0x4ec0 [ 682.798759][T25834] tcp_v4_do_rcv+0x1ad/0xa90 [ 682.806075][T25834] __release_sock+0x31b/0x400 [ 682.813187][T25834] release_sock+0x5a/0x220 [ 682.819818][T25834] __inet_stream_connect+0x65a/0xf60 [ 682.827671][T25834] tcp_sendmsg_fastopen+0x3ed/0x750 [ 682.835398][T25834] tcp_sendmsg_locked+0x23ff/0x42a0 [ 682.842974][T25834] tcp_sendmsg+0x2e/0x50 [ 682.849914][T25834] inet_sendmsg+0xb9/0x140 [ 682.856658][T25834] ____sys_sendmsg+0x973/0xc70 [ 682.863636][T25834] ___sys_sendmsg+0x134/0x1d0 [ 682.870442][T25834] __sys_sendmsg+0x16d/0x220 [ 682.877483][T25834] do_syscall_64+0xcd/0x4c0 [ 682.884030][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.892916][T25834] } [ 682.895955][T25834] ... key at: [] __key.0+0x0/0x40 [ 682.903802][T25834] ... acquired at: [ 682.908043][T25834] lock_acquire+0x179/0x350 [ 682.912990][T25834] _raw_read_lock_irqsave+0x74/0x90 [ 682.918632][T25834] kill_fasync+0x138/0x510 [ 682.923657][T25834] evdev_pass_values+0x619/0x9b0 [ 682.929382][T25834] evdev_events+0x1bb/0x390 [ 682.934196][T25834] input_pass_values+0x74e/0x880 [ 682.939859][T25834] input_handle_event+0xf00/0x14d0 [ 682.945269][T25834] input_inject_event+0x1e8/0x3b0 [ 682.950760][T25834] evdev_write+0x457/0x750 [ 682.955500][T25834] vfs_write+0x29d/0x11d0 [ 682.961147][T25834] ksys_write+0x1f8/0x250 [ 682.966545][T25834] do_syscall_64+0xcd/0x4c0 [ 682.971456][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.977896][T25834] [ 682.980219][T25834] [ 682.980219][T25834] stack backtrace: [ 682.986698][T25834] CPU: 1 UID: 0 PID: 25834 Comm: syz.5.8664 Not tainted syzkaller #0 PREEMPT(full) [ 682.986720][T25834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 682.986740][T25834] Call Trace: [ 682.986750][T25834] [ 682.986758][T25834] dump_stack_lvl+0x116/0x1f0 [ 682.986784][T25834] check_irq_usage+0x7dc/0x920 [ 682.986807][T25834] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 682.986834][T25834] ? check_path.constprop.0+0x24/0x50 [ 682.986863][T25834] ? __lock_acquire+0x12bc/0x1ce0 [ 682.986891][T25834] __lock_acquire+0x12bc/0x1ce0 [ 682.986917][T25834] lock_acquire+0x179/0x350 [ 682.986940][T25834] ? kill_fasync+0x138/0x510 [ 682.986964][T25834] _raw_read_lock_irqsave+0x74/0x90 [ 682.986980][T25834] ? kill_fasync+0x138/0x510 [ 682.987000][T25834] kill_fasync+0x138/0x510 [ 682.987021][T25834] evdev_pass_values+0x619/0x9b0 [ 682.987046][T25834] evdev_events+0x1bb/0x390 [ 682.987067][T25834] input_pass_values+0x74e/0x880 [ 682.987091][T25834] input_handle_event+0xf00/0x14d0 [ 682.987112][T25834] ? _copy_from_user+0x59/0xd0 [ 682.987135][T25834] input_inject_event+0x1e8/0x3b0 [ 682.987157][T25834] evdev_write+0x457/0x750 [ 682.987179][T25834] ? __pfx_evdev_write+0x10/0x10 [ 682.987209][T25834] ? bpf_lsm_file_permission+0x9/0x10 [ 682.987233][T25834] ? security_file_permission+0x71/0x210 [ 682.987259][T25834] ? rw_verify_area+0xcf/0x6c0 [ 682.987282][T25834] ? __pfx_evdev_write+0x10/0x10 [ 682.987302][T25834] vfs_write+0x29d/0x11d0 [ 682.987320][T25834] ? __pfx_vfs_write+0x10/0x10 [ 682.987334][T25834] ? find_held_lock+0x2b/0x80 [ 682.987352][T25834] ? __fget_files+0x204/0x3c0 [ 682.987370][T25834] ? __fget_files+0x20e/0x3c0 [ 682.987389][T25834] ksys_write+0x1f8/0x250 [ 682.987404][T25834] ? __pfx_ksys_write+0x10/0x10 [ 682.987422][T25834] do_syscall_64+0xcd/0x4c0 [ 682.987441][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.987457][T25834] RIP: 0033:0x7f0be938ebe9 [ 682.987472][T25834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.987488][T25834] RSP: 002b:00007f0bea182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 682.987503][T25834] RAX: ffffffffffffffda RBX: 00007f0be95b5fa0 RCX: 00007f0be938ebe9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 682.987515][T25834] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 682.987524][T25834] RBP: 00007f0be9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 682.987534][T25834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.987544][T25834] R13: 00007f0be95b6038 R14: 00007f0be95b5fa0 R15: 00007ffd601d02e8 [ 682.987560][T25834] [ 683.284626][ T30] audit: type=1400 audit(2000001009.912:1934): avc: denied { write } for pid=5833 comm="syz-executor" path="pipe:[5239]" dev="pipefs" ino=5239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 683.309434][T16979] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 683.314527][T16979] usb 5-1: USB disconnect, device number 84 [ 684.688980][T23109] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.747013][T23109] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.805116][T23109] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.877885][T23109] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.962023][T23109] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.973960][T23109] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.045519][T23109] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.058158][T23109] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.095291][T23109] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.106819][T23109] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.155277][T23109] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.167823][T23109] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.239359][T23109] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.251497][T23109] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.314362][T23109] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.325449][T23109] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.384110][T23109] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.396243][T23109] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.424301][T23109] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.434823][T23109] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.513228][T23109] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.556512][T23109] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.605063][T23109] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.665120][T23109] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.742943][T23109] bridge_slave_1: left allmulticast mode [ 685.748968][T23109] bridge_slave_1: left promiscuous mode [ 685.755092][T23109] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.764022][T23109] bridge_slave_0: left allmulticast mode [ 685.770730][T23109] bridge_slave_0: left promiscuous mode [ 685.777768][T23109] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.786600][T23109] bridge_slave_1: left allmulticast mode [ 685.793115][T23109] bridge_slave_1: left promiscuous mode [ 685.800227][T23109] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.809523][T23109] bridge_slave_0: left allmulticast mode [ 685.816479][T23109] bridge_slave_0: left promiscuous mode [ 685.822303][T23109] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.832938][T23109] bridge_slave_1: left allmulticast mode [ 685.839130][T23109] bridge_slave_1: left promiscuous mode [ 685.846013][T23109] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.855068][T23109] bridge_slave_0: left allmulticast mode [ 685.861381][T23109] bridge_slave_0: left promiscuous mode [ 685.867266][T23109] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.878276][T23109] dummy0: left allmulticast mode [ 685.883676][T23109] bridge0: port 3(dummy0) entered disabled state [ 685.893285][T23109] bridge_slave_1: left allmulticast mode [ 685.899952][T23109] bridge_slave_1: left promiscuous mode [ 685.905894][T23109] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.914862][T23109] bridge_slave_0: left allmulticast mode [ 685.920617][T23109] bridge_slave_0: left promiscuous mode [ 685.927171][T23109] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.076002][T23109] bridge_slave_1: left allmulticast mode [ 686.083691][T23109] bridge_slave_1: left promiscuous mode [ 686.089397][T23109] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.101301][T23109] bridge_slave_0: left allmulticast mode [ 686.108225][T23109] bridge_slave_0: left promiscuous mode [ 686.114807][T23109] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.124471][T23109] tipc: Resetting bearer [ 686.591684][T23109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.602054][T23109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.611706][T23109] bond0 (unregistering): Released all slaves [ 686.650967][T23109] team0: Port device geneve0 removed [ 686.727279][T23109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.737289][T23109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.746847][T23109] bond0 (unregistering): Released all slaves [ 686.780027][T23109] erspan0 (unregistering): left promiscuous mode [ 686.789781][T23109] gretap0 (unregistering): left promiscuous mode [ 686.898520][T23109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.907459][T23109] bond_slave_0: left allmulticast mode [ 686.914357][T23109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.923841][T23109] bond_slave_1: left allmulticast mode [ 686.930074][T23109] bond0 (unregistering): Released all slaves [ 687.064129][T23109] tipc: Disabling bearer [ 687.457654][T23109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.467843][T23109] bond_slave_0: left allmulticast mode [ 687.474754][T23109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.485526][T23109] bond_slave_1: left allmulticast mode [ 687.492182][T23109] bond0 (unregistering): (slave bond1): Releasing backup interface [ 687.502682][T23109] bond1 (unregistering): left allmulticast mode [ 687.509453][T23109] bond0 (unregistering): Released all slaves [ 687.707228][T23109] bond1 (unregistering): Released all slaves [ 687.719059][T23109] bond2 (unregistering): (slave bond3): Releasing backup interface [ 687.727943][T23109] bond3 (unregistering): left promiscuous mode [ 687.737153][T23109] bond2 (unregistering): Released all slaves [ 687.922608][T23109] bond3 (unregistering): Released all slaves [ 688.115394][T23109] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 688.124466][T23109] vcan1: left promiscuous mode [ 688.130426][T23109] bond4 (unregistering): Released all slaves [ 688.188605][T23109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.198680][T23109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.209526][T23109] bond0 (unregistering): Released all slaves [ 689.673526][T23109] tipc: Disabling bearer [ 689.679158][T23109] tipc: Left network mode [ 690.310637][T23109] hsr_slave_0: left promiscuous mode [ 690.316961][T23109] hsr_slave_1: left promiscuous mode [ 690.324047][T23109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.332807][T23109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.344306][T23109] hsr_slave_0: left promiscuous mode [ 690.350673][T23109] hsr_slave_1: left promiscuous mode [ 690.356847][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.364796][T23109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.372811][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.380917][T23109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.389979][T23109] hsr_slave_0: left promiscuous mode [ 690.396029][T23109] hsr_slave_1: left promiscuous mode [ 690.403908][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.411876][T23109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.420103][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.428342][T23109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.439067][T23109] hsr_slave_0: left promiscuous mode [ 690.445942][T23109] hsr_slave_1: left promiscuous mode [ 690.452073][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.459520][T23109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.468502][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.476714][T23109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.486740][T23109] hsr_slave_0: left promiscuous mode [ 690.492730][T23109] hsr_slave_1: left promiscuous mode [ 690.498890][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.507164][T23109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.515704][T23109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.523691][T23109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.539370][T23109] veth1_macvtap: left promiscuous mode [ 690.546139][T23109] veth0_macvtap: left promiscuous mode [ 690.552266][T23109] veth1_vlan: left promiscuous mode [ 690.557808][T23109] veth0_vlan: left promiscuous mode [ 690.564766][T23109] veth1_macvtap: left promiscuous mode [ 690.570416][T23109] veth1_vlan: left promiscuous mode [ 690.577363][T23109] veth0_vlan: left promiscuous mode [ 690.583885][T23109] veth1_macvtap: left promiscuous mode [ 690.589481][T23109] veth0_macvtap: left promiscuous mode [ 690.595494][T23109] veth1_vlan: left promiscuous mode [ 690.600781][T23109] veth0_vlan: left promiscuous mode [ 690.607291][T23109] veth1_macvtap: left promiscuous mode [ 690.613055][T23109] veth0_macvtap: left promiscuous mode [ 690.618703][T23109] veth1_vlan: left promiscuous mode [ 690.624594][T23109] veth0_vlan: left promiscuous mode