last executing test programs: 42.232677262s ago: executing program 3 (id=213): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, &(0x7f0000000000)=[{0x5, 0x2, 0x3, 0x7}, {0xd, 0x9, 0x5, 0x8}, {0x3, 0xd, 0x2, 0x5}, {0x6, 0x4, 0xfe, 0x6}, {0x975, 0xa0, 0x7, 0x3}, {0x7, 0x7, 0xe, 0x6}, {0x6, 0xc3, 0x4}, {0xb439, 0x8, 0x81, 0x10000}, {0x49c0, 0x40, 0x3, 0x5}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000000c0)={0x0, 0xc1, 0x40, 0xfffffffd, 0x400007f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x80, 0x4, 0x10008e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x10000, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x142b, 0x400, 0x4003bfff, 0x320, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6270, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 42.122137531s ago: executing program 3 (id=217): write$sysctl(0xffffffffffffffff, &(0x7f0000000180)='2\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffff9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="58010000100001000000000000000000ac1e0101002000000000000000000000fc0200000000000000000000000000000000ecdf00000003000000000000000040ac20a4f89351030211dbafe3ede24e3a9cf6cf603d958d0cb6f142a29dd559d42c69ebd4958841248030107eac78d647b5aa88abf9f59780cc9149351120c3b43cf5375854770b4085dc03d45a35c47b8db908a02484638fa281fd50556fa97520e0d80dcfce6e4323a03216658c455f32164f5b6bbce43ba0e391b8df9f2344d460604a4254aaa55e6116c3d7d94c", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000004000fcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000800000000002000000000000001000000000000000020000000000000000000000020001734c000000680002006362632863616d656c6c6961290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000051ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b27056624"], 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFSYNC(r3, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf256a0000003800060008021100000100000a00060008021100000000000a000600fffffbffffff00000a0006000802110000010000a803c265effb7b2e54ca8e15fbebdbd086f24e0b"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 40.93332528s ago: executing program 3 (id=229): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000b680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005700)="64d633a7b9470d04b3b76760ada8d1ccb25ffb050034549a645766b01e950848950361e43b60fd38ba894f978fe1c0e0e03d902a9643df8e37df2d44731d3d8712106b5d4ab9fceacb633808756cf1860c17f9580ed14c7edceb42227d5d3b40a957179bfd8cc5152fbe09c95a2baa0a3824aef85985c3b665f1188a02ef4d70a80c0dbd5b9fcc7bd25c8dca864880d53396a42aad0e4043bffd66e174561049939380057ca8b17c60541dafc4102c56c2679d3cd6fd2b32b3e40a5b1b61cc55d70da450923bd0a793263651320684cae66937e0551b1146da990b466a06000000a8161c85945ca2e75d1d6299fd743968cabcb14fc846d739388fb5e505c454b762e95a8792b77b44e72cae2978627439a4e03264e0268bec94a536cc5848eaa7", 0x121}, {&(0x7f0000000180)="cb4c", 0x2}, {&(0x7f00000001c0)="7e1c992c83a641220efc38fa543efe6fe290666c6dd56c6f6c7c8611b9e756a4afbbb2d0d18573b550aa7a6ac06ae8d277554b09fbfd371ba453baf5493473610197b807c57d4b5c3124ac7327ba710415632372552779dc15d8765cdfff3a9026df394126bfc375077d9bb2ec3c15ab018433a6b6c4f78849d419f668b2c2b38c8f8367af3216db7fa11e3f99ab378fb326df2ac5072b7926d511c25c834382cd1a7cb31ffe76b7a7116e615f6c0e994bbc2ed02f329ddeca07e6a2de05828f50f9c036d96ac265caa06cf1afd6cc8f60fbe5a51a5d30eef8f527e2b0ee06f1", 0xe0}, {&(0x7f0000000380)="1c9de57d69882eef6fafc3e52f25f689a24bc22e4ce19d0465493d5eb11cf404ff686af11b50883a5d41b105e96883b3f347e632d3434e56843cdd9c01a43e2bdd7b96f9da72b4772a43f9b3c6bcda57bf2ac5b18c47e413c9d6f16a4c03448d0bb523463ce1ae0304da613aede9cc5168d187948ebb5f1fa6dc3f177afece69ff8793160de0", 0x86}], 0x4, 0x0, 0x0, 0x80}}, {{&(0x7f0000000480)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="89496bfcafaa6525eecfa7fcb9659200da4c267e9a6ff18a1ddc3f79a4241de94417d1690be6470189402c43932fdc29767744f7a46468554a2ae0f68589760b695cf19e1bd5e67ca575e9103d6276b4f3876a04aa2ed6a1d260409bb16e4ba53a0316d6378eb2b07cf75a96da3e38aa7f448050c22bf938d01d6b49dc99268739b73328c6726d4b38f98dff241b272bf863547c8f4ba983f0a64c00fa4e9f94746dc30dfc16905fcf36489e7e2506a1789a2a10cd9e53be1922834f8ea186550a116392cbd1ceb570e02e8999d83080abba779d956d8aad21", 0xd9}], 0x2, &(0x7f0000003800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, r0, r0, r1]}}, @rights={{0xc}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}], 0x8c}}, {{&(0x7f00000041c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004340)=[{&(0x7f0000004240)="2de96d820d8a86c3b3d7c470c234c8e0c063595f6a3a", 0x16}, {&(0x7f0000004280)="4edac182dc3029d90b942db5cd26ee77cf3c2aafc0350735e6bcb8bbc71a6e445e48505cd4b48eb732fa48bd6341d22ca55ed792dca57f991da66b5a2f2bd12466309459fc94753572ea1beae9e8cf94ad9fcfe08a25e8436afc982c830b5b3257e2c6cb70609fecfe8e7b2e2e7b00288e5ff61577760e615b146fdf65793e9257ef9ef00732d0992abd0c3fe09c94c1a887bcedc27b1484dd5725edcf24a9b3314dd097c2b210ab63d7ff", 0xab}], 0x2, &(0x7f0000004380)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xa0, 0x4010}}, {{&(0x7f0000004440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000056c0)=[{&(0x7f00000044c0)="a08b8e494d735134fb4cbd8f494706b74e8d340ad383b603cf6d1066491cfeee5faa1018f539272a7e4dda6cfb83a61b39d9551f1587fc047bc292c47bb3a742a6367497d7113c6309f21c07c8d0148f05cc85196f803f105f2de0236aa41bc129eafb455714d92f53b9e5f6443b78a3d88143aca42f17dae1ba195a27f3b9bed566147453ae3e518c72a8f4d3920fe629c033e94d709672cbddf0561b42db1f", 0xa0}, {&(0x7f0000004580)="924954ccb02efcabba737228ebc9d69d43fbf22ce3b2b6b3406fa209101d9dde3916", 0x22}, {&(0x7f00000045c0)="ca757650fe7568bd098a27407dd1c68faa0c46e75a3df677f9a54af50dc8c17d92baa11dff654366a204df135c601749fa2bde006e4c6464535b50b84d3e428bb7e90d66297598f832d683afde497aa3e1de6289973b976d3b0a8c41cd62e47f9b5035556242f15761a217256d130f6543035bc4f7db4859e2fe184799647d85347bad0123de6f7ea245007677fc72288562af41f95e2aea91d80b15b61f90eab2fbeb6f5e767feba1adef10671924a3e16c4a5efdaa17ea51db223ebb86fd4ec511e3199575dc417d16e9a2361a357566017e", 0xd3}, {&(0x7f00000046c0)="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", 0x1000}], 0x4, &(0x7f0000005840)=[@rights={{0x10, 0x1, 0x1, [r1]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x18}}, @cred={{0x18}}], 0x64, 0x4800}}, {{&(0x7f00000058c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005940)="b1c72974c847", 0x6}, {&(0x7f0000005980)="ce27e7492f6a300899e639cf7f", 0xd}, {&(0x7f00000059c0)="5230341e9b79c0f51be04b140ce9eee5ce3f3625c7c1064b9458751ed16ba23f6df726f1e4776b207fe2e49a6a0a5b4896573c2ba601984ef937715ce0c5f4547ac44008cb4c7116b2da630e62a8806e34c5b1375b50007e76f509d6b2768096bcab92c17727f8dfae85d4feb4700e25b1a43a650fd90fbb2316d6506e19e7540a876a6d2219fee731de832eebe3dd9b4187f3b936dd22c67cfc9a944f40caff33660b57bef86f413fda6de1e4452532d088e9489e62dd873a07bee199d44451", 0xc0}, {&(0x7f0000005a80)}, {&(0x7f0000005ac0)="89d2f442f942eab23619835ee65a961e176fe7ad4d61b5d4f3839b7cfe28baae23182ed8fd2151cef8391299422984bdceb32b600c59c45f9787ce40b139fce4f5ea9e4655987f00f19c6748635e745953452ea73ef85832656024a6634633112c6c8e2b14db83d45191d822cc56", 0x6e}, {&(0x7f0000005b40)="ef580b4c6f26f57726aee20107000000000000001f0a96ab3538956cc9d9aabdaa59df642ac496c3620f046f8e67e3dcd26206e4ff63b0f44a2fddd2b31462e42ec3896a100c07ab88c8f86ba097414c7b0c28570bbf95078a66c0d2769938ffcfdd14c97d8e20fa1608d7f76899ade7eab73442337a3b2c75a9d38d56753af42c81bcf74c01000000386d54ee5f68a16b976aa78dbf44be", 0x98}, {&(0x7f0000005c00)="d3e48a9ec0c265df38259d7b2659e11e0c8c37a4e8f9554888693daba99501e28e4573dfe6bb847230ad85febf2303dc1976e5464ba88fc44f82839623bd3452572e581e2f2b7e9e33fe177155cde6ff897c2dbf57430a76611e8179a9ce2ad44bd15165dec76c054c", 0x69}], 0x7, &(0x7f000000b600)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r1, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}], 0x78, 0x4008000}}], 0x5, 0xc004) 40.932847948s ago: executing program 3 (id=230): openat(0xffffffffffffff9c, 0x0, 0x2a442, 0x21) r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000980)=@hat={'changehat ', 0x3, 0x5e, [',-)#&\xe6@\x00', 'audit', 'changeprofile ', 'rootcontext', '\x00', 'sys_exit\x00']}, 0xfffffffffffffe8e) timer_settime(0x0, 0x1, 0x0, 0x0) unshare(0x60000600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) mkdir(&(0x7f0000000000)='./trace\x00', 0x0) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x13, 0x0, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r5, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3cc42895390538876ec93c1189e0a96e", @ANYRES16=r6, @ANYBLOB="0500c25a00", @ANYRES16=r6, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, &(0x7f0000000340)=ANY=[@ANYBLOB="00000080bf000000cab0b3a097c6f3c3b19ba6e2a5d66e9f791e7714ee8f263065c3ea0602c0c37b1aa611cce9cac4a4dfbb5402ac40156f79fae4f26070651bbaa1016415e1ff245dd2ce561a0f6d755457a92028928223c4e36e1e76c9f9d81da317c8370d921d60fe47b8cf09ef97dfa9639d3777b3ac4d7242755d9673f62aac604172a83193172e669d3d0efc3ccfe89388811509da7ac7ad5920f207b454d534bb68fa831fe2d8690223c01f8174e78d7c57845598219ce48efe2ee576332e"]) 40.773953575s ago: executing program 3 (id=235): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 40.433565314s ago: executing program 3 (id=238): timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000240)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = io_uring_setup(0x7a69, &(0x7f0000000140)={0x0, 0x12cb, 0x20, 0x1, 0x143}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000001c0)=[0x840, 0xeb], 0x2) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') symlinkat(&(0x7f0000000180)='.\x00', r4, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7a) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3405000000000000007800dea5806fda8aa7021c00000e0001dd53d7490225a5febe1fe641bae9be2d0ca15f63616368650000000200000002000800030000040000"], 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x28a4081, &(0x7f0000000680)={[{@verity_require}, {@metacopy_on}, {@redirect_dir_off}, {@metacopy_off}, {@redirect_dir_off}, {@index_off}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, 'my_sys/bus/pci/devices/0000:00:03.0/resource1'}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@seclabel}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'net/arp\x00'}}, {@uid_gt}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_eq}]}) chdir(&(0x7f00000003c0)='./bus\x00') 40.379249199s ago: executing program 32 (id=238): timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000240)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = io_uring_setup(0x7a69, &(0x7f0000000140)={0x0, 0x12cb, 0x20, 0x1, 0x143}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000001c0)=[0x840, 0xeb], 0x2) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') symlinkat(&(0x7f0000000180)='.\x00', r4, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7a) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3405000000000000007800dea5806fda8aa7021c00000e0001dd53d7490225a5febe1fe641bae9be2d0ca15f63616368650000000200000002000800030000040000"], 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x28a4081, &(0x7f0000000680)={[{@verity_require}, {@metacopy_on}, {@redirect_dir_off}, {@metacopy_off}, {@redirect_dir_off}, {@index_off}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, 'my_sys/bus/pci/devices/0000:00:03.0/resource1'}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@seclabel}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'net/arp\x00'}}, {@uid_gt}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_eq}]}) chdir(&(0x7f00000003c0)='./bus\x00') 28.191458866s ago: executing program 2 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 28.103684081s ago: executing program 2 (id=381): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) 28.102611721s ago: executing program 2 (id=383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 28.0512218s ago: executing program 2 (id=384): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x2) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000440), 0x424100, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000480)={{@hyper, 0x7}, 0x2, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0xfffffffffffeffff, 0x7203}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000620afcff0000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="18005a8014000080050002004f"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x34}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x810) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x1800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) r11 = open$dir(&(0x7f00000000c0)='./proc\x00', 0x2000, 0x80) r12 = openat(r11, &(0x7f0000000140)='./proc\x00', 0x21e402, 0x0) write(r12, &(0x7f0000000000)='7', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 27.9336181s ago: executing program 2 (id=387): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x3}, 0x8) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) 27.631449546s ago: executing program 2 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 27.578014705s ago: executing program 33 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 4.683338111s ago: executing program 4 (id=612): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008"], 0x184}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.720117171s ago: executing program 4 (id=623): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0xf48, 0x4}}}}}}, 0x0) (fail_nth: 6) 3.658182452s ago: executing program 4 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0xc96, 0xffffffff00000001, 0x7fff, 0x5c8e}}]}) 3.553373288s ago: executing program 4 (id=627): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100"/18], 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_usb_control_io$uac3(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) 3.241406085s ago: executing program 5 (id=630): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$fuse(0xffffff9c, &(0x7f0000002400), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240100001a0001002904000000dbdf2502142000fe000007000000000800100094a00000"], 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0xea5bc50b6199977e) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [], [0xfffffffffffffffc]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r2}, 0x68) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fcntl$setstatus(r4, 0x4, 0x800) waitid$P_PIDFD(0x3, r4, 0x0, 0x8, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x334, 0x0, 0x11, 0x148, 0x15c, 0x0, 0x2a0, 0x2a8, 0x2a8, 0x2a0, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xffffffff, 0xff000000, 'macvlan0\x00', 'caif0\x00', {}, {0xff}, 0x73, 0x3, 0x54}, 0x0, 0xf4, 0x15c, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'veth1_virt_wifi\x00', {}, 'vlan1\x00', {0xff}, 0x0, 0x8}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x9, 0x8, 0x8, '\x00', 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'erspan0\x00', 'ipvlan1\x00', {0xff}, {0xff}}, 0x0, 0xe4, 0x144, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x80}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x2, 0x6, 0x3, 0x6], 0x3, 0x1}, {0x4, [0x4, 0x5, 0x7, 0x5, 0x2, 0x5], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x390) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000023c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)=ANY=[@ANYBLOB="a1050000", @ANYRES16=r8, @ANYBLOB="080028bd7000fbdbdf25060000000c0099000b000000120000000a00e80008021100000100000a00e800ffffffffffff00000a00e800ffffffffffff000020001780040004000400050004000300040006000400050004000200040006000a00e800ffffffffffff00000500530001000000050053000100000014001780040005000400010004000600040001001c00e70076a892ef791ca03f9935e157be495abbc75ebaaf4593a30e0a00e8000802110000010000"], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0xc004) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='r', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 3.09961904s ago: executing program 5 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0xb, 0x42, 0x40, 0xc0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{r7, r8+60000000}}, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r10, r10, 0x0, 0xc3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000140)="ffffffffffff00112233", 0xa, 0x0, &(0x7f0000000800)={0x11, 0x300, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630"], 0x34}}, 0x0) 2.988485481s ago: executing program 5 (id=634): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x5b67, 0x3, 0x7b05, 0xfffc}}}}, 0xe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x42) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x24e, 0x0, 0x8}]}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f00000004c0)="64400f01c5410f01cb66b873000f00d0f3f0450fc74935b9800000c00f3235001000000f30c7442400e2000000c744240203000000ff2c240f01f866baf80cb8aac4d78bef66bafc0c66b80f0066efc401f96e2766ba610066ed", 0x5a}], 0x1, 0x4, &(0x7f0000000580)=[@dstype0={0x6, 0x5}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x80000000}, 0x0) 1.962846749s ago: executing program 1 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) map_shadow_stack(&(0x7f00004b7000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000cde1a800800048004000480abd63e2001380d2bbc6da15d92248900f885b776ec7ff8409aba63221709fee2701305ebd66da0ce8d435dca4f244345b26302254eac"], 0x2c}}, 0x0) 1.692347512s ago: executing program 0 (id=642): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) syz_usb_connect(0x1, 0x1ac, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0xeb, 0xb6, 0xd3, 0x40, 0x12d1, 0x64a6, 0x12dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19a, 0x2, 0x0, 0xe6, 0x70, 0xe, "", [{{0x9, 0x4, 0xa4, 0xd1, 0x0, 0xff, 0x6, 0x3b, 0x80}}, {{0x9, 0x4, 0x77, 0xd, 0xa, 0x7b, 0x51, 0xe3, 0x7, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0xeb, 0x2, 0x9c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x97, 0x4}, @generic={0x21, 0x18, "4517044bfdbd167294f0f1210bc78abb1419f014a8155eff13f89ce32d85f0"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x90, 0x40, 0x9, [@generic={0xbc, 0xe, "aae3c6e4b3097b6dd9fb7dcd3799643a54bc6b6f512b7cc796206b0ba4ffc1054f76360f7c82d768e869f47cf922d6849668cb29b6b61747cce6127b4794ecfcc4b24e0697d7d0daf6a5a8164caab1f3071fdbe6e7814b324ff14ff10d7c01e03a77b35eb9670df95c90edc55ee3233f4b74fef8f7acc6316ce16f461abd66706bc3e7ec1931336be90aab10d610dad9dc4c8a2ed336273009b302063d7b87a3c1bfd199289aeefd7c9a27b7312f14cbe711bba0ae35c351c875"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xb, 0x4, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x5}]}}, {{0x9, 0x5, 0x749fc2989c7e5da9, 0x1, 0x200, 0x10, 0x2, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0xa, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x8, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x8, 0x7, 0x0, [@generic={0x2c, 0xa, "a620a1e6746804b05c39436fb338bd896f632c19aabfa683a97d5684a3f374c4246514e1c57ab322bbeb"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x587, 0x6, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x3, 0x5, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x1, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0x1}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x300, 0x8, 0x80, 0xfe, 0x40, 0x6}, 0x1b, &(0x7f0000000700)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x51, 0xb, 0x6, 0x8, 0x10}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0xc, 0x1c, 0x7d}]}, 0x5, [{0xf0, &(0x7f0000000740)=@string={0xf0, 0x3, "916af5bc424c7a3e82877d3321862fca095c42ebd076668db5ceb82bc6259aeb000b430723a20827729f616848439dc04ab00819e301b752b6a9d69a2dce6317549d56eaf438328f7285417567dbf4f299fec03d0e245f0b7eaeb7636cd7b5f3b37fc254b8b8bf90829c6b78439b2ef2decefb2894561ed1160408b28dd821f0562e5f968f0f6db96649b09984ae4d12b004ee0f2f819fa28350f3d7e071e6adeae01416599fcfaa83ba0b61870646c060bcb6e9e4b63b56c5cca059784455c3cac75fed308d3bf4c32f6ac1cc014498985f746e9ca569aeb1564d16f931f497e12f7b9b96d0419507866492b7fa"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x457}}, {0x5c, &(0x7f00000008c0)=@string={0x5c, 0x3, "bc4143e0588d1fa7d88ac949ae3ca05258af1dff4d92e499c38fca3bff8377354d712afd295f397a16e9ef1228dffee3245a64375cb1e3488cd1f0f5e60c3cb761e4afc5eadf5db5d90ea1ef287c598ef3166c378c178809c605"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x3801}}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x7}, 0x10}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x5, 0xe0, 0x5, 0xd, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0x1000, 0x4, 0x7, 0x7}, @sadb_x_sa2={0x2, 0x13, 0xc2, 0x0, 0x0, 0x70bd26, 0x3506}, @sadb_key={0x5, 0x9, 0xd8, 0x0, "51d0a8f0591b8e5a200bf8656e8b9aacbfb03f646d4e7e3380a7a6"}]}, 0x68}}, 0x4810) 1.692053523s ago: executing program 1 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001500)={&(0x7f0000822000/0x2000)=nil, &(0x7f000061c000/0x3000)=nil, &(0x7f000081a000/0x2000)=nil, &(0x7f00003f6000/0x1000)=nil, &(0x7f0000a28000/0x12000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00009d2000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000a63000/0x2000)=nil, &(0x7f00000aa000/0x4000)=nil, &(0x7f0000954000/0x2000)=nil, &(0x7f0000000500)="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", 0x1000, r0}, 0x64) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) readv(r1, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/15, 0xf}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f0000000100)={0x5, 0x5, 0xfffffffb, 0x5, 0x101, 0x0, 0x25}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480340001800c00010062697477697365002400028008000340e5ff00040800014000000014080002400000001208000640000000010900010073797a3000"], 0xd4}}, 0x0) 1.562803007s ago: executing program 1 (id=644): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x4c) 1.535084311s ago: executing program 1 (id=645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000254}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x252, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 1.534902205s ago: executing program 5 (id=646): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c1) pipe2$watch_queue(&(0x7f0000000180), 0x80) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB], 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xce, 0x0, &(0x7f0000000380)) sendto$inet6(r3, &(0x7f0000000040)="0584c0dfdfb820b54aa29a70fba88ff398161d7685c82a32ed8452ebbfed08121c", 0x21, 0x1, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @mcast2, 0x4}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYRES16=r2], 0x74}, 0x1, 0x0, 0x0, 0x10040043}, 0x3927a99e0269c28b) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 975.912517ms ago: executing program 1 (id=647): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 973.042438ms ago: executing program 0 (id=655): r0 = io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f0000000054cab2d725309fa2cd002e05fc00000000000000800000000000008a20d14c9aab20cf1e28149d4f908be8fe9069443db32d54c22deffacac955eb", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=@mpls_getnetconf={0x14, 0x52, 0x7dc1ef03f111e94f}, 0x14}}, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 903.232992ms ago: executing program 0 (id=648): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 880.439616ms ago: executing program 1 (id=649): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e00"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 860.333891ms ago: executing program 0 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x20040800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x38, 0x68, 0x1, 0x2, 0x7ffffff9, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 763.162807ms ago: executing program 0 (id=651): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$fuse(0xffffff9c, &(0x7f0000002400), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240100001a0001002904000000dbdf2502142000fe000007000000000800100094a00000"], 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0xea5bc50b6199977e) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [], [0xfffffffffffffffc]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r2}, 0x68) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fcntl$setstatus(r4, 0x4, 0x800) waitid$P_PIDFD(0x3, r4, 0x0, 0x8, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x334, 0x0, 0x11, 0x148, 0x15c, 0x0, 0x2a0, 0x2a8, 0x2a8, 0x2a0, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xffffffff, 0xff000000, 'macvlan0\x00', 'caif0\x00', {}, {0xff}, 0x73, 0x3, 0x54}, 0x0, 0xf4, 0x15c, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'veth1_virt_wifi\x00', {}, 'vlan1\x00', {0xff}, 0x0, 0x8}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x9, 0x8, 0x8, '\x00', 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff, 'erspan0\x00', 'ipvlan1\x00', {0xff}, {0xff}}, 0x0, 0xe4, 0x144, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x80}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x2, 0x6, 0x3, 0x6], 0x3, 0x1}, {0x4, [0x4, 0x5, 0x7, 0x5, 0x2, 0x5], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x390) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000023c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)=ANY=[@ANYBLOB="a1050000", @ANYRES16=r8, @ANYBLOB="080028bd7000fbdbdf25060000000c0099000b000000120000000a00e80008021100000100000a00e800ffffffffffff00000a00e800ffffffffffff000020001780040004000400050004000300040006000400050004000200040006000a00e800ffffffffffff00000500530001000000050053000100000014001780040005000400010004000600040001001c00e70076a892ef791ca03f9935e157be495abbc75ebaaf4593a30e0a00e8000802110000010000"], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0xc004) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='r', 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 612.557476ms ago: executing program 0 (id=652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000254}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x252, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 482.925749ms ago: executing program 4 (id=653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x4c) 413.290908ms ago: executing program 4 (id=654): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) read(r4, &(0x7f0000000140)=""/247, 0xf7) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x311200, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) unshare(0x60600) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d0e, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000240)='INVITE sip:test@12\r\nCall-ID: `', 0x1e, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @multicast1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x102, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x3) ioctl(r12, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c746970617468") read$FUSE(r12, &(0x7f0000002480)={0x2020}, 0x2020) ppoll(&(0x7f0000000040)=[{r11, 0x80a0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000002440)=0xd) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r10, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fbdbdf2500000e0001006e657464657673696d0000000f0030000008000300000000001f1eea1c02e9f27decb3bc86e989d01a3afc3ff106cd2c350cc5965ae0ce5234ba27b1a39c4c8114585932f17d34d93ff398496dad0d5edb90bae31906f426b50137533dc5a9e438bc93cc1d8f543c4d48869986c46880e75c273386a1984cfaa8ef04218f77b73aa2ec3d25bcb453967400e153548a00d3f565e96e01ede839d2b10476f8a96cfe9b24410ef2ef"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00082dbd7000fddbdf489487bc194e8338006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) 142.531081ms ago: executing program 5 (id=656): io_setup(0x2278, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=657): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x18) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x3}, 0xa) landlock_restrict_self(r0, 0xe) kernel console output (not intermixed with test programs): sing maximum allowed: 30 [ 77.647974][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.647999][ T5823] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.648019][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.648065][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.648087][ T5823] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 77.648109][ T5823] usb 8-1: config 168 interface 0 has no altsetting 0 [ 77.649393][ T5823] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 77.649420][ T5823] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 77.649449][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.649470][ T5823] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.649520][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.649542][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.649562][ T5823] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 77.649583][ T5823] usb 8-1: config 168 interface 0 has no altsetting 0 [ 77.652792][ T5823] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 77.652819][ T5823] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 77.652851][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.652873][ T5823] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.652891][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.652910][ T5823] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.652928][ T5823] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 77.652948][ T5823] usb 8-1: config 168 interface 0 has no altsetting 0 [ 77.655528][ T5823] usb 8-1: string descriptor 0 read error: -22 [ 77.655622][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.674709][ T5823] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 77.755477][ T6634] FAULT_INJECTION: forcing a failure. [ 77.755477][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 77.755504][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) [ 77.755524][ T6634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.755535][ T6634] Call Trace: [ 77.755541][ T6634] [ 77.755548][ T6634] dump_stack_lvl+0x100/0x190 [ 77.755578][ T6634] should_fail_ex.cold+0x5/0xa [ 77.755603][ T6634] should_failslab+0xc2/0x120 [ 77.755631][ T6634] __kmalloc_noprof+0xfc/0x840 [ 77.755653][ T6634] ? aa_label_asxprint+0x75/0x130 [ 77.755675][ T6634] aa_label_asxprint+0x75/0x130 [ 77.755695][ T6634] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 77.755718][ T6634] security_lsmprop_to_secctx+0x146/0x1a0 [ 77.755745][ T6634] audit_log_subj_ctx+0x34f/0x460 [ 77.755768][ T6634] ? map_id_range_up+0x2ce/0x3b0 [ 77.755793][ T6634] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 77.755818][ T6634] ? audit_log_format+0xe8/0x130 [ 77.755839][ T6634] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 77.755860][ T6634] audit_log_task_context+0x88/0xb0 [ 77.755882][ T6634] ? __pfx_audit_log_task_context+0x10/0x10 [ 77.755910][ T6634] audit_log_task+0x1b7/0x3a0 [ 77.755937][ T6634] ? __pfx_audit_log_task+0x10/0x10 [ 77.755965][ T6634] ? file_init_path+0x48e/0x670 [ 77.756021][ T6634] audit_seccomp+0x79/0x190 [ 77.756072][ T6634] __seccomp_filter+0x88c/0x1130 [ 77.756099][ T6634] ? __pfx___seccomp_filter+0x10/0x10 [ 77.756120][ T6634] ? fd_install+0x252/0x580 [ 77.756147][ T6634] ? __pfx___sys_socket+0x10/0x10 [ 77.756180][ T6634] __seccomp_permit_syscall+0x207/0x2d0 [ 77.756204][ T6634] __do_fast_syscall_32+0x420/0x8b0 [ 77.756233][ T6634] do_fast_syscall_32+0x32/0x70 [ 77.756256][ T6634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.756288][ T6634] RIP: 0023:0xf7f78fec [ 77.756311][ T6634] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 77.756319][ T6634] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 77.756339][ T6634] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 77.756352][ T6634] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 77.756364][ T6634] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 77.756376][ T6634] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.756386][ T6634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.756408][ T6634] [ 77.796510][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 77.796529][ T5824] dw2102: command 0x0e transfer failed. [ 77.796535][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 77.796545][ T5824] dw2102: command 0x0e transfer failed. [ 77.796552][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 77.796561][ T5824] dw2102: command 0x51 transfer failed. [ 77.821820][ T5824] DVB: Unable to find symbol ds3000_attach() [ 77.821834][ T5824] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 77.876110][ T5824] rc_core: IR keymap rc-su3000 not found [ 77.876123][ T5824] Registered IR keymap rc-empty [ 77.876422][ T1352] usb 8-1: USB disconnect, device number 10 [ 77.878427][ T5824] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 77.891247][ T5824] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input13 [ 77.901017][ T5824] dvb-usb: schedule remote query interval to 150 msecs. [ 77.901036][ T5824] dw2102: su3000_power_ctrl: 0, initialized 1 [ 77.901047][ T5824] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 77.913558][ T6638] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 77.940819][ T5823] usb 6-1: USB disconnect, device number 6 [ 77.977019][ T5823] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 78.563776][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 78.664668][ T6662] ovs_dp0: entered promiscuous mode [ 79.128245][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.128913][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.130461][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.132133][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.132672][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.329689][ T5809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.369187][ T6693] netlink: 264 bytes leftover after parsing attributes in process `syz.0.242'. [ 79.377649][ T6693] input: syz0 as /devices/virtual/input/input14 [ 79.562873][ T5809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.665888][ T5809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.693094][ T6703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.731245][ T5809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.756388][ T5095] Bluetooth: hci0: command tx timeout [ 79.898798][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 79.923295][ T5809] bridge_slave_1: left allmulticast mode [ 79.923321][ T5809] bridge_slave_1: left promiscuous mode [ 79.923868][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.936711][ T5809] bridge_slave_0: left allmulticast mode [ 79.936735][ T5809] bridge_slave_0: left promiscuous mode [ 79.936893][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.065589][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 80.065777][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 80.068426][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 80.068509][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 80.085024][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.086274][ T5095] Bluetooth: hci3: command tx timeout [ 80.092479][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.095798][ T5809] bond0 (unregistering): Released all slaves [ 80.107386][ T5809] bond1 (unregistering): Released all slaves [ 80.136220][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 80.150269][ T6747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.270348][ T6753] netlink: 64 bytes leftover after parsing attributes in process `syz.1.257'. [ 80.282927][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.282974][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.283042][ T6678] bridge_slave_0: entered allmulticast mode [ 80.284266][ T6678] bridge_slave_0: entered promiscuous mode [ 80.286255][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 80.287356][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.287485][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.287576][ T6678] bridge_slave_1: entered allmulticast mode [ 80.288288][ T30] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.288881][ T6678] bridge_slave_1: entered promiscuous mode [ 80.292004][ T30] usb 5-1: config 0 has no interfaces? [ 80.292088][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.303701][ T30] usb 5-1: config 0 descriptor?? [ 80.328337][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 80.328469][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 80.341275][ T6678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.348771][ T6678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.369668][ T6678] team0: Port device team_slave_0 added [ 80.399259][ T6678] team0: Port device team_slave_1 added [ 80.420386][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.420402][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.420422][ T6678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.421857][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.421867][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.421887][ T6678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.512837][ T1352] usb 5-1: USB disconnect, device number 8 [ 80.525855][ T6678] hsr_slave_0: entered promiscuous mode [ 80.526667][ T6678] hsr_slave_1: entered promiscuous mode [ 80.526960][ T6678] debugfs: 'hsr0' already exists in 'hsr' [ 80.526971][ T6678] Cannot create hsr debugfs directory [ 80.550588][ T5809] hsr_slave_0: left promiscuous mode [ 80.551070][ T5809] hsr_slave_1: left promiscuous mode [ 80.551504][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.551520][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.553906][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.553918][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.569391][ T5809] veth1_macvtap: left promiscuous mode [ 80.569487][ T5809] veth0_macvtap: left promiscuous mode [ 80.569741][ T5809] veth1_vlan: left promiscuous mode [ 80.569840][ T5809] veth0_vlan: left promiscuous mode [ 80.847610][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 80.847738][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 80.855801][ T6739] ceph: No mds server is up or the cluster is laggy [ 80.885039][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 81.077651][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 81.077669][ T43] audit: type=1326 audit(1791100689.286:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 81.078350][ T43] audit: type=1326 audit(1791100689.286:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 81.078505][ T43] audit: type=1326 audit(1791100689.286:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.260" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf706efec code=0x7ffc0000 [ 81.127676][ T6678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.142835][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.143508][ T6678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.145481][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.146593][ T6678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.160513][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.161138][ T6678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.170289][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.196505][ T5095] Bluetooth: hci1: command tx timeout [ 81.232981][ T43] audit: type=1326 audit(1791100689.436:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.260" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706f008 code=0x7ffc0000 [ 81.234927][ T43] audit: type=1326 audit(1791100689.436:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 81.234965][ T43] audit: type=1326 audit(1791100689.436:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 81.249025][ T6678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.406702][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 81.409187][ T6678] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.452806][ T6678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.452821][ T6678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.498588][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.498636][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.499564][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.499605][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.899045][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 81.976419][ T1485] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 82.128124][ T1485] usb 5-1: Using ep0 maxpacket: 32 [ 82.134663][ T1485] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.134702][ T1485] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 82.138547][ T1485] usb 5-1: string descriptor 0 read error: -22 [ 82.138629][ T1485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.148644][ T1485] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 82.148679][ T1485] dw2102: su3000_power_ctrl: 1, initialized 0 [ 82.148692][ T1485] dvb-usb: bulk message failed: -22 (2/0) [ 82.154756][ T1485] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.155347][ T1485] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 82.155369][ T1485] usb 5-1: media controller created [ 82.155383][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 82.155390][ T1485] dw2102: i2c transfer failed. [ 82.155397][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 82.155403][ T1485] dw2102: i2c transfer failed. [ 82.155409][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 82.155416][ T1485] dw2102: i2c transfer failed. [ 82.155422][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 82.155428][ T1485] dw2102: i2c transfer failed. [ 82.155434][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 82.155441][ T1485] dw2102: i2c transfer failed. [ 82.155447][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 82.155453][ T1485] dw2102: i2c transfer failed. [ 82.155457][ T1485] dvb-usb: MAC address: 02:02:02:02:02:02 [ 82.164409][ T1485] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.187899][ T1485] dvb-usb: bulk message failed: -22 (3/0) [ 82.187917][ T1485] dw2102: command 0x0e transfer failed. [ 82.187924][ T1485] dvb-usb: bulk message failed: -22 (3/0) [ 82.187936][ T1485] dw2102: command 0x0e transfer failed. [ 82.322700][ T6678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.497323][ T1485] dvb-usb: bulk message failed: -22 (3/0) [ 82.497337][ T1485] dw2102: command 0x0e transfer failed. [ 82.497342][ T1485] dvb-usb: bulk message failed: -22 (3/0) [ 82.497348][ T1485] dw2102: command 0x0e transfer failed. [ 82.497352][ T1485] dvb-usb: bulk message failed: -22 (1/0) [ 82.497359][ T1485] dw2102: command 0x51 transfer failed. [ 82.525034][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 82.534600][ T6678] veth0_vlan: entered promiscuous mode [ 82.549577][ T1485] DVB: Unable to find symbol ds3000_attach() [ 82.549588][ T1485] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 82.551052][ T6678] veth1_vlan: entered promiscuous mode [ 82.594885][ T6678] veth0_macvtap: entered promiscuous mode [ 82.598699][ T6678] veth1_macvtap: entered promiscuous mode [ 82.613161][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.633098][ T1485] rc_core: IR keymap rc-su3000 not found [ 82.633111][ T1485] Registered IR keymap rc-empty [ 82.635549][ T1485] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 82.658534][ T1485] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input16 [ 82.663997][ T1485] dvb-usb: schedule remote query interval to 150 msecs. [ 82.664033][ T1485] dw2102: su3000_power_ctrl: 0, initialized 1 [ 82.664042][ T1485] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 82.673858][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.771711][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.771733][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.801234][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.801252][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.808992][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.809028][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.809055][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.809076][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.817466][ T1485] dvb-usb: bulk message failed: -22 (1/0) [ 82.817478][ T1485] dw2102: i2c transfer failed. [ 82.849719][ T6849] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 82.863384][ T6849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.864741][ T5823] usb 5-1: USB disconnect, device number 9 [ 82.871185][ T6852] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 82.894419][ T6852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.899434][ T5823] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 83.276221][ T1485] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 83.276482][ T5735] Bluetooth: hci1: command tx timeout [ 83.408652][ T6877] netlink: 64 bytes leftover after parsing attributes in process `syz.0.281'. [ 83.426311][ T1485] usb 6-1: Using ep0 maxpacket: 32 [ 83.428170][ T1485] usb 6-1: unable to get BOS descriptor or descriptor too short [ 83.428193][ T1485] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 83.431368][ T1485] usb 6-1: string descriptor 0 read error: -22 [ 83.431423][ T1485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.437664][ T1485] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 83.437683][ T1485] dw2102: su3000_power_ctrl: 1, initialized 0 [ 83.437694][ T1485] dvb-usb: bulk message failed: -22 (2/0) [ 83.442338][ T1485] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.444543][ T1485] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 83.444565][ T1485] usb 6-1: media controller created [ 83.444578][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 83.444585][ T1485] dw2102: i2c transfer failed. [ 83.444591][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 83.444597][ T1485] dw2102: i2c transfer failed. [ 83.444602][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 83.444608][ T1485] dw2102: i2c transfer failed. [ 83.444614][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 83.444622][ T1485] dw2102: i2c transfer failed. [ 83.444627][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 83.444633][ T1485] dw2102: i2c transfer failed. [ 83.444638][ T1485] dvb-usb: bulk message failed: -22 (6/0) [ 83.444644][ T1485] dw2102: i2c transfer failed. [ 83.444648][ T1485] dvb-usb: MAC address: 02:02:02:02:02:02 [ 83.446324][ T5881] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 83.462093][ T1485] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.477435][ T1485] dvb-usb: bulk message failed: -22 (3/0) [ 83.477447][ T1485] dw2102: command 0x0e transfer failed. [ 83.477451][ T1485] dvb-usb: bulk message failed: -22 (3/0) [ 83.477457][ T1485] dw2102: command 0x0e transfer failed. [ 83.636772][ T5881] usb 7-1: device descriptor read/64, error -71 [ 83.786078][ T1485] dvb-usb: bulk message failed: -22 (3/0) [ 83.786093][ T1485] dw2102: command 0x0e transfer failed. [ 83.786097][ T1485] dvb-usb: bulk message failed: -22 (3/0) [ 83.786103][ T1485] dw2102: command 0x0e transfer failed. [ 83.786107][ T1485] dvb-usb: bulk message failed: -22 (1/0) [ 83.786113][ T1485] dw2102: command 0x51 transfer failed. [ 83.818758][ T1485] DVB: Unable to find symbol ds3000_attach() [ 83.818773][ T1485] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 83.886417][ T5881] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 84.019234][ T1485] rc_core: IR keymap rc-su3000 not found [ 84.019251][ T1485] Registered IR keymap rc-empty [ 84.020156][ T1485] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 84.025886][ T1485] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input19 [ 84.036399][ T1485] dvb-usb: schedule remote query interval to 150 msecs. [ 84.036417][ T1485] dw2102: su3000_power_ctrl: 0, initialized 1 [ 84.036427][ T1485] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 84.044939][ T1485] usb 6-1: USB disconnect, device number 7 [ 84.045189][ T5881] usb 7-1: device descriptor read/64, error -71 [ 84.086154][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 84.148475][ T5881] usb usb7-port1: attempt power cycle [ 84.154713][ T1485] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 84.365482][ T6904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.292'. [ 84.486641][ T5881] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 84.516909][ T5881] usb 7-1: device descriptor read/8, error -71 [ 84.536179][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 84.606285][ T1352] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 84.686121][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 84.690430][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.690458][ T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 84.693493][ T30] usb 5-1: string descriptor 0 read error: -22 [ 84.693551][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.697966][ T30] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 84.697992][ T30] dw2102: su3000_power_ctrl: 1, initialized 0 [ 84.698007][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 84.702889][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 84.704108][ T30] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 84.704138][ T30] usb 5-1: media controller created [ 84.704152][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 84.704160][ T30] dw2102: i2c transfer failed. [ 84.704167][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 84.704177][ T30] dw2102: i2c transfer failed. [ 84.704187][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 84.704198][ T30] dw2102: i2c transfer failed. [ 84.704207][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 84.704217][ T30] dw2102: i2c transfer failed. [ 84.704225][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 84.704235][ T30] dw2102: i2c transfer failed. [ 84.704244][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 84.704254][ T30] dw2102: i2c transfer failed. [ 84.704260][ T30] dvb-usb: MAC address: 02:02:02:02:02:02 [ 84.712877][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.729534][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 84.729553][ T30] dw2102: command 0x0e transfer failed. [ 84.729560][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 84.729573][ T30] dw2102: command 0x0e transfer failed. [ 84.756142][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 84.756646][ T1352] usb 6-1: Using ep0 maxpacket: 8 [ 84.757135][ T1352] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 84.757946][ T1352] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 84.757963][ T1352] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 84.757981][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.757994][ T1352] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.758007][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.758019][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.758032][ T1352] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 84.758045][ T1352] usb 6-1: config 168 interface 0 has no altsetting 0 [ 84.758813][ T1352] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 84.758829][ T1352] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 84.758848][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.758861][ T1352] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.758873][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.758885][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.758898][ T1352] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 84.758911][ T1352] usb 6-1: config 168 interface 0 has no altsetting 0 [ 84.759652][ T1352] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 84.759668][ T1352] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 84.759684][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.759696][ T1352] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.759708][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.759720][ T1352] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.759732][ T1352] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 84.759750][ T1352] usb 6-1: config 168 interface 0 has no altsetting 0 [ 84.763045][ T1352] usb 6-1: string descriptor 0 read error: -22 [ 84.763101][ T1352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.777103][ T5881] usb 7-1: device descriptor read/8, error -71 [ 84.780082][ T1352] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 84.886414][ T5881] usb usb7-port1: unable to enumerate USB device [ 84.985251][ T9] usb 6-1: USB disconnect, device number 8 [ 85.036162][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 85.036179][ T30] dw2102: command 0x0e transfer failed. [ 85.036184][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 85.036190][ T30] dw2102: command 0x0e transfer failed. [ 85.036194][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 85.036201][ T30] dw2102: command 0x51 transfer failed. [ 85.058638][ T30] DVB: Unable to find symbol ds3000_attach() [ 85.058651][ T30] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 85.106068][ T30] rc_core: IR keymap rc-su3000 not found [ 85.106086][ T30] Registered IR keymap rc-empty [ 85.107427][ T30] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 85.109631][ T30] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input20 [ 85.113830][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 85.113848][ T30] dw2102: su3000_power_ctrl: 0, initialized 1 [ 85.113860][ T30] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 85.116481][ T30] usb 5-1: USB disconnect, device number 10 [ 85.164492][ T30] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 85.356329][ T5095] Bluetooth: hci1: command tx timeout [ 85.576148][ T5839] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 85.598904][ T6916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.676763][ T5095] Bluetooth: hci0: command tx timeout [ 85.739451][ T5839] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.740331][ T5839] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.740347][ T5839] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.740366][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.949418][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 85.950001][ T5839] usb 9-1: usb_control_msg returned -32 [ 85.950023][ T5839] usbtmc 9-1:16.0: can't read capabilities [ 86.156235][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 86.182034][ T6938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.302191][ T6939] netlink: 'syz.4.293': attribute type 3 has an invalid length. [ 86.490756][ T6949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.606092][ T1352] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.816319][ T1352] usb 6-1: Using ep0 maxpacket: 32 [ 86.818086][ T1352] usb 6-1: unable to get BOS descriptor or descriptor too short [ 86.818127][ T1352] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 86.821589][ T1352] usb 6-1: string descriptor 0 read error: -22 [ 86.821651][ T1352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.844968][ T1352] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 86.845002][ T1352] dw2102: su3000_power_ctrl: 1, initialized 0 [ 86.845015][ T1352] dvb-usb: bulk message failed: -22 (2/0) [ 86.857581][ T1352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.858246][ T1352] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 86.858288][ T1352] usb 6-1: media controller created [ 86.858305][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 86.858314][ T1352] dw2102: i2c transfer failed. [ 86.858324][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 86.858334][ T1352] dw2102: i2c transfer failed. [ 86.858344][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 86.858353][ T1352] dw2102: i2c transfer failed. [ 86.858362][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 86.858372][ T1352] dw2102: i2c transfer failed. [ 86.858380][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 86.858389][ T1352] dw2102: i2c transfer failed. [ 86.858394][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 86.858403][ T1352] dw2102: i2c transfer failed. [ 86.858409][ T1352] dvb-usb: MAC address: 02:02:02:02:02:02 [ 86.904922][ T1352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.924696][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 86.924714][ T1352] dw2102: command 0x0e transfer failed. [ 86.924722][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 86.924732][ T1352] dw2102: command 0x0e transfer failed. [ 87.086141][ T1485] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 87.216114][ T1485] usb 7-1: device descriptor read/64, error -71 [ 87.228559][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 87.228573][ T1352] dw2102: command 0x0e transfer failed. [ 87.228577][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 87.228583][ T1352] dw2102: command 0x0e transfer failed. [ 87.228587][ T1352] dvb-usb: bulk message failed: -22 (1/0) [ 87.228592][ T1352] dw2102: command 0x51 transfer failed. [ 87.252016][ T1352] DVB: Unable to find symbol ds3000_attach() [ 87.252030][ T1352] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 87.296117][ T1352] rc_core: IR keymap rc-su3000 not found [ 87.296129][ T1352] Registered IR keymap rc-empty [ 87.297231][ T1352] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 87.298080][ T1352] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input23 [ 87.301188][ T1352] dvb-usb: schedule remote query interval to 150 msecs. [ 87.301201][ T1352] dw2102: su3000_power_ctrl: 0, initialized 1 [ 87.301208][ T1352] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 87.302906][ T1352] usb 6-1: USB disconnect, device number 9 [ 87.333183][ T1352] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 87.397050][ T6976] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 87.397090][ T6976] binder: 6975:6976 ioctl 4018620d 80000080 returned -1 [ 87.436212][ T5095] Bluetooth: hci1: command tx timeout [ 87.476135][ T1485] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 87.616405][ T1485] usb 7-1: device descriptor read/64, error -71 [ 87.726881][ T1485] usb usb7-port1: attempt power cycle [ 88.026334][ T5839] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 88.086101][ T1485] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 88.106640][ T1485] usb 7-1: device descriptor read/8, error -71 [ 88.176178][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 88.178572][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.178614][ T5839] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 88.183017][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 88.183118][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.187765][ T5839] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 88.187787][ T5839] dw2102: su3000_power_ctrl: 1, initialized 0 [ 88.187796][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 88.190870][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.191463][ T5839] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 88.191499][ T5839] usb 5-1: media controller created [ 88.191532][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 88.191543][ T5839] dw2102: i2c transfer failed. [ 88.191555][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 88.191565][ T5839] dw2102: i2c transfer failed. [ 88.191575][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 88.191586][ T5839] dw2102: i2c transfer failed. [ 88.191596][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 88.191606][ T5839] dw2102: i2c transfer failed. [ 88.191615][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 88.191625][ T5839] dw2102: i2c transfer failed. [ 88.191634][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 88.191644][ T5839] dw2102: i2c transfer failed. [ 88.191650][ T5839] dvb-usb: MAC address: 02:02:02:02:02:02 [ 88.200135][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.210325][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 88.210345][ T5839] dw2102: command 0x0e transfer failed. [ 88.210352][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 88.210364][ T5839] dw2102: command 0x0e transfer failed. [ 88.236338][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 88.346195][ T1485] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 88.364546][ T5840] usb 9-1: USB disconnect, device number 2 [ 88.367234][ T1485] usb 7-1: device descriptor read/8, error -71 [ 88.476339][ T1485] usb usb7-port1: unable to enumerate USB device [ 88.516320][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 88.516342][ T5839] dw2102: command 0x0e transfer failed. [ 88.516350][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 88.516362][ T5839] dw2102: command 0x0e transfer failed. [ 88.516369][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 88.516380][ T5839] dw2102: command 0x51 transfer failed. [ 88.547652][ T5839] DVB: Unable to find symbol ds3000_attach() [ 88.547667][ T5839] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 88.606798][ T5839] rc_core: IR keymap rc-su3000 not found [ 88.606811][ T5839] Registered IR keymap rc-empty [ 88.607722][ T5839] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 88.608575][ T5839] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input25 [ 88.614156][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 88.614180][ T5839] dw2102: su3000_power_ctrl: 0, initialized 1 [ 88.614194][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 88.620156][ T5839] usb 5-1: USB disconnect, device number 11 [ 88.673087][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 89.016118][ T30] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 89.036160][ T5095] Bluetooth: hci0: command tx timeout [ 89.187120][ T30] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.188452][ T30] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.188477][ T30] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.188509][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.516214][ T30] usb 9-1: usb_control_msg returned -32 [ 89.516251][ T30] usbtmc 9-1:16.0: can't read capabilities [ 89.725092][ T7046] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 89.725122][ T7046] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.772687][ T7046] vhci_hcd vhci_hcd.0: Device attached [ 89.917848][ T7061] netlink: 'syz.4.336': attribute type 3 has an invalid length. [ 90.014493][ T7030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.056925][ T30] usb 40-1: SetAddress Request (2) to port 0 [ 90.058570][ T30] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 90.175747][ T7073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.396153][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 90.488032][ T7049] vhci_hcd: connection reset by peer [ 90.490789][ T6666] vhci_hcd vhci_hcd.1: stop threads [ 90.491042][ T6666] vhci_hcd vhci_hcd.1: release socket [ 90.491659][ T6666] vhci_hcd vhci_hcd.1: disconnect device [ 90.833528][ T7101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.012142][ T7116] FAULT_INJECTION: forcing a failure. [ 91.012142][ T7116] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 91.012176][ T7116] CPU: 3 UID: 0 PID: 7116 Comm: syz.2.373 Not tainted syzkaller #0 PREEMPT(full) [ 91.012200][ T7116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.012211][ T7116] Call Trace: [ 91.012218][ T7116] [ 91.012226][ T7116] dump_stack_lvl+0x100/0x190 [ 91.012258][ T7116] should_fail_ex.cold+0x5/0xa [ 91.012277][ T7116] ? prepare_alloc_pages+0x16d/0x5b0 [ 91.012308][ T7116] should_fail_alloc_page+0xeb/0x140 [ 91.012337][ T7116] prepare_alloc_pages+0x1f0/0x5b0 [ 91.012363][ T7116] ? is_bpf_text_address+0x94/0x1a0 [ 91.012394][ T7116] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 91.012426][ T7116] ? stack_trace_save+0x8e/0xc0 [ 91.012449][ T7116] ? __pfx_stack_trace_save+0x10/0x10 [ 91.012473][ T7116] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 91.012508][ T7116] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 91.012528][ T7116] ? is_bpf_text_address+0x94/0x1a0 [ 91.012560][ T7116] ? kasan_save_stack+0x3f/0x50 [ 91.012586][ T7116] ? kasan_save_stack+0x30/0x50 [ 91.012609][ T7116] ? kasan_save_track+0x14/0x30 [ 91.012633][ T7116] ? __kasan_slab_alloc+0x89/0x90 [ 91.012660][ T7116] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 91.012684][ T7116] ? alloc_vmap_area+0x1814/0x2bb0 [ 91.012707][ T7116] ? __get_vm_area_node+0x1ed/0x350 [ 91.012734][ T7116] ? get_vm_area_caller+0x71/0xa0 [ 91.012758][ T7116] ? vmap+0x132/0x2e0 [ 91.012781][ T7116] ? ringbuf_map_alloc+0x363/0x860 [ 91.012806][ T7116] ? map_create+0x874/0x30d0 [ 91.012825][ T7116] ? __sys_bpf+0x12a0/0x4a30 [ 91.012845][ T7116] ? __ia32_sys_bpf+0xcc/0x170 [ 91.012891][ T7116] ? __do_fast_syscall_32+0x13a/0x8b0 [ 91.012919][ T7116] ? do_fast_syscall_32+0x32/0x70 [ 91.012945][ T7116] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.012981][ T7116] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.013010][ T7116] ? policy_nodemask+0xed/0x4f0 [ 91.013039][ T7116] alloc_pages_mpol+0x201/0x550 [ 91.013068][ T7116] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 91.013100][ T7116] alloc_pages_noprof+0x1a/0x160 [ 91.013119][ T7116] get_free_pages_noprof+0x10/0xb0 [ 91.013143][ T7116] __kasan_populate_vmalloc+0xa0/0x210 [ 91.013171][ T7116] alloc_vmap_area+0x95d/0x2bb0 [ 91.013204][ T7116] ? kasan_save_track+0x14/0x30 [ 91.013229][ T7116] ? __kasan_kmalloc+0xaa/0xb0 [ 91.013253][ T7116] ? __pfx_alloc_vmap_area+0x10/0x10 [ 91.013281][ T7116] ? __get_vm_area_node+0x124/0x350 [ 91.013310][ T7116] __get_vm_area_node+0x1ed/0x350 [ 91.013340][ T7116] ? ringbuf_map_alloc+0x363/0x860 [ 91.013372][ T7116] get_vm_area_caller+0x71/0xa0 [ 91.013399][ T7116] ? ringbuf_map_alloc+0x363/0x860 [ 91.013425][ T7116] vmap+0x132/0x2e0 [ 91.013452][ T7116] ? __pfx_vmap+0x10/0x10 [ 91.013477][ T7116] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 91.013508][ T7116] ? __bpf_map_area_alloc+0x13a/0x200 [ 91.013543][ T7116] ringbuf_map_alloc+0x363/0x860 [ 91.013575][ T7116] map_create+0x874/0x30d0 [ 91.013598][ T7116] ? __lock_acquire+0x5c0/0x1f40 [ 91.013632][ T7116] ? __pfx_map_create+0x10/0x10 [ 91.013654][ T7116] ? lock_acquire+0x1d1/0x380 [ 91.013679][ T7116] ? __might_fault+0xc5/0x140 [ 91.013700][ T7116] ? __might_fault+0xc5/0x140 [ 91.013731][ T7116] __sys_bpf+0x12a0/0x4a30 [ 91.013758][ T7116] ? __pfx___sys_bpf+0x10/0x10 [ 91.013778][ T7116] ? find_held_lock+0x2b/0x80 [ 91.013799][ T7116] ? futex_wake+0x4ea/0x5e0 [ 91.013841][ T7116] ? up_write+0x2dc/0x5b0 [ 91.013877][ T7116] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 91.013903][ T7116] ? xfd_validate_state+0x129/0x190 [ 91.013938][ T7116] ? __ia32_sys_bpf+0xcc/0x170 [ 91.013959][ T7116] __ia32_sys_bpf+0xcc/0x170 [ 91.013981][ T7116] ? __do_fast_syscall_32+0xb3/0x8b0 [ 91.014008][ T7116] __do_fast_syscall_32+0x13a/0x8b0 [ 91.014038][ T7116] do_fast_syscall_32+0x32/0x70 [ 91.014064][ T7116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.014086][ T7116] RIP: 0023:0xf706efec [ 91.014108][ T7116] Code: Unable to access opcode bytes at 0xf706efc2. [ 91.014117][ T7116] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 91.014137][ T7116] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 91.014150][ T7116] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.014163][ T7116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.014175][ T7116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 91.014187][ T7116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.014212][ T7116] [ 91.253436][ T7130] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 91.253456][ T7130] binder: 7129:7130 ioctl 4018620d 80000080 returned -1 [ 91.378645][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 91.726286][ T1352] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 91.781089][ T5607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.794046][ T5840] usb 9-1: USB disconnect, device number 3 [ 91.850255][ T5607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.874812][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.876594][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.877161][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.878254][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.878703][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.888980][ T1352] usb 5-1: Using ep0 maxpacket: 32 [ 91.892538][ T1352] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.892563][ T1352] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 91.895799][ T1352] usb 5-1: string descriptor 0 read error: -22 [ 91.895857][ T1352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.903223][ T5607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.994134][ T1352] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 91.994155][ T1352] dw2102: su3000_power_ctrl: 1, initialized 0 [ 91.994164][ T1352] dvb-usb: bulk message failed: -22 (2/0) [ 91.998322][ T1352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.999311][ T1352] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 91.999334][ T1352] usb 5-1: media controller created [ 91.999349][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 91.999357][ T1352] dw2102: i2c transfer failed. [ 91.999364][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 91.999371][ T1352] dw2102: i2c transfer failed. [ 91.999377][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 91.999384][ T1352] dw2102: i2c transfer failed. [ 91.999390][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 91.999397][ T1352] dw2102: i2c transfer failed. [ 91.999403][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 91.999409][ T1352] dw2102: i2c transfer failed. [ 91.999415][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 91.999423][ T1352] dw2102: i2c transfer failed. [ 91.999427][ T1352] dvb-usb: MAC address: 02:02:02:02:02:02 [ 92.007153][ T1352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.014151][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 92.014164][ T1352] dw2102: command 0x0e transfer failed. [ 92.014169][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 92.014176][ T1352] dw2102: command 0x0e transfer failed. [ 92.097635][ T5607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.209848][ T7169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 92.209890][ T7169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.210208][ T7169] vhci_hcd vhci_hcd.0: Device attached [ 92.317862][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 92.319054][ T1352] dw2102: command 0x0e transfer failed. [ 92.319288][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 92.319653][ T1352] dw2102: command 0x0e transfer failed. [ 92.320021][ T1352] dvb-usb: bulk message failed: -22 (1/0) [ 92.320754][ T1352] dw2102: command 0x51 transfer failed. [ 92.388293][ T5607] bridge_slave_1: left allmulticast mode [ 92.388317][ T5607] bridge_slave_1: left promiscuous mode [ 92.388497][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.395255][ T5607] bridge_slave_0: left allmulticast mode [ 92.395272][ T5607] bridge_slave_0: left promiscuous mode [ 92.395418][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.460796][ T1352] DVB: Unable to find symbol ds3000_attach() [ 92.460861][ T1352] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 92.526266][ T1352] rc_core: IR keymap rc-su3000 not found [ 92.526609][ T1352] Registered IR keymap rc-empty [ 92.547871][ T5881] usb 46-1: SetAddress Request (2) to port 0 [ 92.549166][ T5881] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 92.552149][ T1352] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 92.563274][ T1352] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input28 [ 92.568549][ T1352] dvb-usb: schedule remote query interval to 150 msecs. [ 92.568567][ T1352] dw2102: su3000_power_ctrl: 0, initialized 1 [ 92.568579][ T1352] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 92.571423][ T1352] usb 5-1: USB disconnect, device number 12 [ 92.622565][ T1352] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 92.625622][ T5607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.636528][ T5607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.639619][ T5607] bond0 (unregistering): Released all slaves [ 92.707021][ T5607] ovs_dp0: left promiscuous mode [ 92.908317][ T7170] vhci_hcd: connection reset by peer [ 92.910597][ T12] vhci_hcd vhci_hcd.4: stop threads [ 92.910614][ T12] vhci_hcd vhci_hcd.4: release socket [ 92.914618][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 92.922268][ T7200] overlayfs: overlapping lowerdir path [ 92.967172][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 93.000712][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.000796][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.000857][ T7153] bridge_slave_0: entered allmulticast mode [ 93.001840][ T7153] bridge_slave_0: entered promiscuous mode [ 93.019147][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.019227][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.019346][ T7153] bridge_slave_1: entered allmulticast mode [ 93.020643][ T7153] bridge_slave_1: entered promiscuous mode [ 93.079458][ T7153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.081160][ T7153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.110079][ T7153] team0: Port device team_slave_0 added [ 93.121271][ T7153] team0: Port device team_slave_1 added [ 93.134308][ T5607] hsr_slave_0: left promiscuous mode [ 93.138422][ T5607] hsr_slave_1: left promiscuous mode [ 93.139035][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.139052][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.141452][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.141468][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.148323][ T5607] veth1_macvtap: left promiscuous mode [ 93.148351][ T5607] veth0_macvtap: left promiscuous mode [ 93.148429][ T5607] veth1_vlan: left promiscuous mode [ 93.148459][ T5607] veth0_vlan: left promiscuous mode [ 93.285401][ T5607] team0 (unregistering): Port device team_slave_1 removed [ 93.306955][ T5607] team0 (unregistering): Port device team_slave_0 removed [ 93.384065][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.384076][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.384089][ T7153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.386863][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 93.387540][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.387549][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.387562][ T7153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.417251][ T7153] hsr_slave_0: entered promiscuous mode [ 93.418053][ T7153] hsr_slave_1: entered promiscuous mode [ 93.646504][ T7153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.658960][ T7153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.659601][ T7153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.663218][ T7153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.663673][ T7153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.678408][ T7153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.683085][ T7153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.684954][ T7153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.731469][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.738754][ T7153] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.750368][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.750418][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.752485][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.752531][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.775883][ T7153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.917150][ T5095] Bluetooth: hci3: command tx timeout [ 94.023211][ T7153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.098561][ T7289] 8021q: VLANs not supported on ipvlan1 [ 94.147088][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 94.230977][ T7153] veth0_vlan: entered promiscuous mode [ 94.236085][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 94.255013][ T7153] veth1_vlan: entered promiscuous mode [ 94.287859][ T7153] veth0_macvtap: entered promiscuous mode [ 94.301487][ T7304] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 94.301512][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.304161][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 94.307679][ T7153] veth1_macvtap: entered promiscuous mode [ 94.509535][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.512052][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 94.526570][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.566839][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566897][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566933][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566952][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.614998][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.615012][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.626216][ T42] usb 38-1: SetAddress Request (2) to port 0 [ 94.626269][ T42] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 94.655107][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.655121][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.848474][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 95.121469][ T30] usb 40-1: device descriptor read/8, error -110 [ 95.130106][ T7305] vhci_hcd: connection reset by peer [ 95.132119][ T5607] vhci_hcd vhci_hcd.0: stop threads [ 95.132143][ T5607] vhci_hcd vhci_hcd.0: release socket [ 95.132207][ T5607] vhci_hcd vhci_hcd.0: disconnect device [ 95.334436][ T7362] binder: 7361:7362 ioctl 4018620d 0 returned -22 [ 95.508075][ T30] usb usb40-port1: attempt power cycle [ 95.830994][ T43] audit: type=1326 audit(1791100704.036:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 95.831719][ T43] audit: type=1326 audit(1791100704.036:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 95.832537][ T43] audit: type=1326 audit(1791100704.036:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.443" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 95.832637][ T43] audit: type=1326 audit(1791100704.036:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 95.832732][ T43] audit: type=1326 audit(1791100704.036:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 95.832925][ T43] audit: type=1326 audit(1791100704.036:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.443" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 95.833113][ T43] audit: type=1326 audit(1791100704.036:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 95.833254][ T43] audit: type=1326 audit(1791100704.036:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 95.834133][ T7376] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 95.891934][ T7384] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.445'. [ 95.892709][ T7384] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.445'. [ 95.996236][ T5095] Bluetooth: hci3: command tx timeout [ 96.067798][ T30] usb usb40-port1: unable to enumerate USB device [ 96.208602][ T43] audit: type=1326 audit(1791100704.416:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.453" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x0 [ 96.673124][ T7433] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.457'. [ 96.673924][ T7433] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.457'. [ 96.781354][ T7441] Bluetooth: MGMT ver 1.23 [ 96.846194][ T7440] FAULT_INJECTION: forcing a failure. [ 96.846194][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 96.846224][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.4.459 Not tainted syzkaller #0 PREEMPT(full) [ 96.846245][ T7440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.846256][ T7440] Call Trace: [ 96.846261][ T7440] [ 96.846268][ T7440] dump_stack_lvl+0x100/0x190 [ 96.846296][ T7440] should_fail_ex.cold+0x5/0xa [ 96.846319][ T7440] should_failslab+0xc2/0x120 [ 96.846345][ T7440] __kmalloc_node_noprof+0xff/0x880 [ 96.846368][ T7440] ? lockdep_init_map_type+0x5c/0x250 [ 96.846394][ T7440] ? blk_mq_alloc_tag_set+0x477/0x1330 [ 96.846437][ T7440] blk_mq_alloc_tag_set+0x477/0x1330 [ 96.846457][ T7440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.846481][ T7440] ? idr_alloc+0xdd/0x130 [ 96.846504][ T7440] ? __pfx_idr_alloc+0x10/0x10 [ 96.846532][ T7440] loop_add+0x3b7/0xb60 [ 96.846556][ T7440] ? __pfx_loop_add+0x10/0x10 [ 96.846591][ T7440] ? __fget_files+0x34/0x3d0 [ 96.846612][ T7440] ? find_held_lock+0x2b/0x80 [ 96.846632][ T7440] ? __fget_files+0x215/0x3d0 [ 96.846655][ T7440] loop_control_ioctl+0xae/0x620 [ 96.846680][ T7440] ? __pfx_loop_control_ioctl+0x10/0x10 [ 96.846708][ T7440] ? __pfx_loop_control_ioctl+0x10/0x10 [ 96.846731][ T7440] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 96.846754][ T7440] __do_fast_syscall_32+0x13a/0x8b0 [ 96.846780][ T7440] do_fast_syscall_32+0x32/0x70 [ 96.846802][ T7440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.846824][ T7440] RIP: 0023:0xf7f92fec [ 96.846843][ T7440] Code: Unable to access opcode bytes at 0xf7f92fc2. [ 96.846851][ T7440] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 96.846869][ T7440] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000004c80 [ 96.846881][ T7440] RDX: 0000000087000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.846893][ T7440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.846903][ T7440] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.846913][ T7440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.846935][ T7440] [ 96.951138][ T7410] cgroup: fork rejected by pids controller in /syz0 [ 96.955549][ T7455] binder: 7454:7455 ioctl 4018620d 0 returned -22 [ 97.176885][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 97.292258][ T43] audit: type=1326 audit(1791100705.496:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz.5.468" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 97.336349][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 97.338474][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 97.338498][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 97.341739][ T10] usb 9-1: string descriptor 0 read error: -22 [ 97.341793][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.347287][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 97.347306][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 97.347314][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 97.356800][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.359593][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 97.359693][ T10] usb 9-1: media controller created [ 97.359713][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 97.359725][ T10] dw2102: i2c transfer failed. [ 97.359735][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 97.359744][ T10] dw2102: i2c transfer failed. [ 97.359753][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 97.359762][ T10] dw2102: i2c transfer failed. [ 97.359770][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 97.359779][ T10] dw2102: i2c transfer failed. [ 97.359788][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 97.359797][ T10] dw2102: i2c transfer failed. [ 97.359805][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 97.359814][ T10] dw2102: i2c transfer failed. [ 97.359820][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 97.374800][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.386894][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 97.386906][ T10] dw2102: command 0x0e transfer failed. [ 97.386910][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 97.386916][ T10] dw2102: command 0x0e transfer failed. [ 97.596159][ T5881] usb 46-1: device descriptor read/8, error -110 [ 97.696182][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 97.696204][ T10] dw2102: command 0x0e transfer failed. [ 97.696211][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 97.697383][ T10] dw2102: command 0x0e transfer failed. [ 97.697394][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 97.697406][ T10] dw2102: command 0x51 transfer failed. [ 97.740384][ T10] DVB: Unable to find symbol ds3000_attach() [ 97.740396][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 97.786137][ T10] rc_core: IR keymap rc-su3000 not found [ 97.786155][ T10] Registered IR keymap rc-empty [ 97.787027][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 97.789310][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input32 [ 97.791965][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 97.791980][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 97.791987][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 97.796345][ T10] usb 9-1: USB disconnect, device number 4 [ 97.829204][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 97.987070][ T5881] usb usb46-port1: attempt power cycle [ 98.086237][ T5095] Bluetooth: hci3: command tx timeout [ 98.190207][ T7501] batman_adv: batadv0: Adding interface: syzkaller0 [ 98.190218][ T7501] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.190234][ T7501] batman_adv: batadv0: Interface activated: syzkaller0 [ 98.211687][ T7506] 9pnet_fd: Insufficient options for proto=fd [ 98.213285][ T7505] batman_adv: batadv0: Adding interface: syzkaller0 [ 98.213296][ T7505] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.213312][ T7505] batman_adv: batadv0: Interface activated: syzkaller0 [ 98.215103][ T7507] 9pnet_fd: Insufficient options for proto=fd [ 98.542097][ T7500] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 98.553591][ T7500] batman_adv: batadv0: Removing interface: syzkaller0 [ 98.766895][ T5881] usb usb46-port1: unable to enumerate USB device [ 98.866123][ T5823] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 99.016743][ T5823] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 99.017589][ T5823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.017618][ T5823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 99.017634][ T5823] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 99.017654][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.047663][ T7504] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 99.093943][ T7504] batman_adv: batadv0: Removing interface: syzkaller0 [ 99.396278][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 99.453288][ T5823] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 99.453304][ T5823] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 99.459086][ T5823] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 99.462600][ T5823] usb 5-1: USB disconnect, device number 13 [ 99.546133][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 99.546735][ T25] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 99.547626][ T25] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.547638][ T25] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 99.547655][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.556475][ T1352] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 99.596130][ T5095] Bluetooth: hci1: command tx timeout [ 99.686170][ T42] usb 38-1: device descriptor read/8, error -110 [ 99.726167][ T1352] usb 9-1: Using ep0 maxpacket: 32 [ 99.729102][ T1352] usb 9-1: unable to get BOS descriptor or descriptor too short [ 99.729128][ T1352] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 99.734654][ T1352] usb 9-1: string descriptor 0 read error: -22 [ 99.734712][ T1352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.739878][ T1352] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 99.739897][ T1352] dw2102: su3000_power_ctrl: 1, initialized 0 [ 99.739906][ T1352] dvb-usb: bulk message failed: -22 (2/0) [ 99.743277][ T1352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.743748][ T1352] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 99.743770][ T1352] usb 9-1: media controller created [ 99.743784][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 99.743791][ T1352] dw2102: i2c transfer failed. [ 99.743798][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 99.743804][ T1352] dw2102: i2c transfer failed. [ 99.743810][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 99.743816][ T1352] dw2102: i2c transfer failed. [ 99.743821][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 99.743827][ T1352] dw2102: i2c transfer failed. [ 99.743833][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 99.743839][ T1352] dw2102: i2c transfer failed. [ 99.743844][ T1352] dvb-usb: bulk message failed: -22 (6/0) [ 99.743850][ T1352] dw2102: i2c transfer failed. [ 99.743854][ T1352] dvb-usb: MAC address: 02:02:02:02:02:02 [ 99.750927][ T1352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.759467][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 99.759479][ T1352] dw2102: command 0x0e transfer failed. [ 99.759483][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 99.759489][ T1352] dw2102: command 0x0e transfer failed. [ 99.763416][ T7524] overlayfs: failed to resolve 'upper': -2 [ 100.066293][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 100.066315][ T1352] dw2102: command 0x0e transfer failed. [ 100.066322][ T1352] dvb-usb: bulk message failed: -22 (3/0) [ 100.066333][ T1352] dw2102: command 0x0e transfer failed. [ 100.066340][ T1352] dvb-usb: bulk message failed: -22 (1/0) [ 100.066350][ T1352] dw2102: command 0x51 transfer failed. [ 100.091231][ T42] usb usb38-port1: attempt power cycle [ 100.097662][ T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 100.102113][ T1352] DVB: Unable to find symbol ds3000_attach() [ 100.102127][ T1352] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 100.161172][ T5095] Bluetooth: hci3: command tx timeout [ 100.161597][ T1352] rc_core: IR keymap rc-su3000 not found [ 100.161609][ T1352] Registered IR keymap rc-empty [ 100.162538][ T1352] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 100.166827][ T1352] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input34 [ 100.171246][ T1352] dvb-usb: schedule remote query interval to 150 msecs. [ 100.171258][ T1352] dw2102: su3000_power_ctrl: 0, initialized 1 [ 100.171265][ T1352] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 100.177693][ T9] usb 9-1: USB disconnect, device number 5 [ 100.213872][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 100.248709][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.250241][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.250268][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.250304][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.463344][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 100.464307][ T10] usb 6-1: usb_control_msg returned -32 [ 100.464331][ T10] usbtmc 6-1:16.0: can't read capabilities [ 100.585658][ T7569] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 100.667322][ T42] usb usb38-port1: unable to enumerate USB device [ 100.825199][ T7574] netlink: 'syz.1.488': attribute type 3 has an invalid length. [ 101.092378][ T10] usb 10-1: USB disconnect, device number 2 [ 101.412649][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.509'. [ 101.576243][ T42] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 101.726098][ T42] usb 9-1: Using ep0 maxpacket: 32 [ 101.729785][ T42] usb 9-1: unable to get BOS descriptor or descriptor too short [ 101.729823][ T42] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 101.733951][ T42] usb 9-1: string descriptor 0 read error: -22 [ 101.734063][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.740459][ T42] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 101.740492][ T42] dw2102: su3000_power_ctrl: 1, initialized 0 [ 101.740505][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 101.751086][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.751722][ T42] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 101.751761][ T42] usb 9-1: media controller created [ 101.751783][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 101.751794][ T42] dw2102: i2c transfer failed. [ 101.751806][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 101.751816][ T42] dw2102: i2c transfer failed. [ 101.751825][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 101.751836][ T42] dw2102: i2c transfer failed. [ 101.751846][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 101.751856][ T42] dw2102: i2c transfer failed. [ 101.751866][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 101.751876][ T42] dw2102: i2c transfer failed. [ 101.751885][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 101.751895][ T42] dw2102: i2c transfer failed. [ 101.751901][ T42] dvb-usb: MAC address: 02:02:02:02:02:02 [ 101.756175][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 101.763366][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.774306][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 101.774323][ T42] dw2102: command 0x0e transfer failed. [ 101.774329][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 101.774340][ T42] dw2102: command 0x0e transfer failed. [ 101.916098][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 101.916656][ T25] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 101.917684][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.917697][ T25] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 101.917716][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.957011][ T7606] FAULT_INJECTION: forcing a failure. [ 101.957011][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.957030][ T7606] CPU: 2 UID: 0 PID: 7606 Comm: syz.5.513 Not tainted syzkaller #0 PREEMPT(full) [ 101.957043][ T7606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.957049][ T7606] Call Trace: [ 101.957054][ T7606] [ 101.957059][ T7606] dump_stack_lvl+0x100/0x190 [ 101.957078][ T7606] should_fail_ex.cold+0x5/0xa [ 101.957093][ T7606] _copy_to_user+0x32/0xd0 [ 101.957110][ T7606] simple_read_from_buffer+0xcb/0x170 [ 101.957126][ T7606] proc_fail_nth_read+0x1af/0x230 [ 101.957140][ T7606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.957155][ T7606] ? rw_verify_area+0xce/0x6d0 [ 101.957167][ T7606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.957180][ T7606] vfs_read+0x1e4/0xb40 [ 101.957193][ T7606] ? lock_acquire+0x1d1/0x380 [ 101.957209][ T7606] ? __fget_files+0x34/0x3d0 [ 101.957223][ T7606] ? __pfx_vfs_read+0x10/0x10 [ 101.957235][ T7606] ? find_held_lock+0x2b/0x80 [ 101.957249][ T7606] ? __fget_files+0x215/0x3d0 [ 101.957264][ T7606] ? __fget_files+0x21f/0x3d0 [ 101.957282][ T7606] ksys_read+0x12a/0x250 [ 101.957295][ T7606] ? __pfx_ksys_read+0x10/0x10 [ 101.957312][ T7606] do_int80_emulation+0x166/0x650 [ 101.957329][ T7606] asm_int80_emulation+0x1a/0x20 [ 101.957340][ T7606] RIP: 0023:0xf71575ab [ 101.957349][ T7606] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 101.957360][ T7606] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 101.957371][ T7606] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f540d5d0 [ 101.957378][ T7606] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 101.957385][ T7606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.957391][ T7606] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.957397][ T7606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.957411][ T7606] [ 101.996823][ T5095] Bluetooth: hci1: command tx timeout [ 102.086585][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 102.086607][ T42] dw2102: command 0x0e transfer failed. [ 102.086614][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 102.086624][ T42] dw2102: command 0x0e transfer failed. [ 102.086630][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 102.086639][ T42] dw2102: command 0x51 transfer failed. [ 102.118598][ T42] DVB: Unable to find symbol ds3000_attach() [ 102.118613][ T42] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 102.135770][ T7602] overlayfs: failed to resolve 'upper': -2 [ 102.170710][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 102.170762][ T7612] FAULT_INJECTION: forcing a failure. [ 102.170762][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 102.170790][ T7612] CPU: 1 UID: 0 PID: 7612 Comm: syz.5.515 Not tainted syzkaller #0 PREEMPT(full) [ 102.170808][ T7612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.170818][ T7612] Call Trace: [ 102.170824][ T7612] [ 102.170831][ T7612] dump_stack_lvl+0x100/0x190 [ 102.170861][ T7612] should_fail_ex.cold+0x5/0xa [ 102.170885][ T7612] should_failslab+0xc2/0x120 [ 102.170914][ T7612] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 102.170947][ T7612] ? __alloc_skb+0x5b7/0x710 [ 102.170964][ T7612] ? __alloc_skb+0x140/0x710 [ 102.170984][ T7612] __alloc_skb+0x140/0x710 [ 102.170999][ T7612] ? __alloc_skb+0x5b7/0x710 [ 102.171016][ T7612] ? __pfx___alloc_skb+0x10/0x10 [ 102.171042][ T7612] netlink_ack+0x117/0xb80 [ 102.171081][ T7612] netlink_rcv_skb+0x333/0x420 [ 102.171110][ T7612] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.171135][ T7612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.171174][ T7612] ? netlink_deliver_tap+0x1ae/0xcc0 [ 102.171208][ T7612] netlink_unicast+0x585/0x850 [ 102.171240][ T7612] ? __pfx_netlink_unicast+0x10/0x10 [ 102.171278][ T7612] netlink_sendmsg+0x8b0/0xda0 [ 102.171312][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.171344][ T7612] ? apparmor_socket_sendmsg+0x165/0x280 [ 102.171380][ T7612] ____sys_sendmsg+0xa4d/0xbe0 [ 102.171404][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.171435][ T7612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.171487][ T7612] ___sys_sendmsg+0x190/0x1e0 [ 102.171515][ T7612] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.171554][ T7612] ? find_held_lock+0x2b/0x80 [ 102.171595][ T7612] __sys_sendmsg+0x160/0x210 [ 102.171616][ T7612] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.171645][ T7612] ? __pfx_ksys_write+0x10/0x10 [ 102.171673][ T7612] __do_fast_syscall_32+0x13a/0x8b0 [ 102.171699][ T7612] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.171726][ T7612] do_fast_syscall_32+0x32/0x70 [ 102.171753][ T7612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.171778][ T7612] RIP: 0023:0xf701efec [ 102.171801][ T7612] Code: Unable to access opcode bytes at 0xf701efc2. [ 102.171810][ T7612] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 102.171831][ T7612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 102.171844][ T7612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.171855][ T7612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.171867][ T7612] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.171878][ T7612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.171904][ T7612] [ 102.187266][ T42] rc_core: IR keymap rc-su3000 not found [ 102.187281][ T42] Registered IR keymap rc-empty [ 102.188731][ T42] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 102.195858][ T42] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input37 [ 102.203351][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 102.203370][ T42] dw2102: su3000_power_ctrl: 0, initialized 1 [ 102.203382][ T42] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 102.221501][ T25] usb 9-1: USB disconnect, device number 6 [ 102.282119][ T25] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 102.368473][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.518'. [ 102.860945][ T9] usb 6-1: USB disconnect, device number 10 [ 102.897678][ T7629] syz.1.522 uses obsolete (PF_INET,SOCK_PACKET) [ 103.066092][ T42] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 103.236117][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 103.237035][ T42] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 103.238886][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.238904][ T42] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 103.239172][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.473258][ T7627] overlayfs: failed to resolve 'upper': -2 [ 104.078021][ T5095] Bluetooth: hci1: command tx timeout [ 104.157699][ T42] usb 5-1: USB disconnect, device number 14 [ 104.508341][ T7687] bridge1: entered allmulticast mode [ 104.520947][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 104.637927][ T42] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 104.646351][ T5840] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 104.799506][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.801068][ T5840] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.801875][ T5840] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.801891][ T5840] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.801910][ T5840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.803997][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.804024][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.804058][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.032518][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.530'. [ 105.039171][ T5840] usb 10-1: usb_control_msg returned -32 [ 105.039194][ T5840] usbtmc 10-1:16.0: can't read capabilities [ 105.054763][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 105.059388][ T42] usb 5-1: usb_control_msg returned -32 [ 105.059426][ T42] usbtmc 5-1:16.0: can't read capabilities [ 105.302141][ T5840] usb 9-1: USB disconnect, device number 7 [ 105.391487][ T7708] netlink: 'syz.5.530': attribute type 3 has an invalid length. [ 105.413741][ T7709] netlink: 'syz.0.527': attribute type 3 has an invalid length. [ 106.886157][ T5839] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 107.046124][ T5839] usb 9-1: Using ep0 maxpacket: 32 [ 107.048427][ T5839] usb 9-1: unable to get BOS descriptor or descriptor too short [ 107.048465][ T5839] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 107.052332][ T5839] usb 9-1: string descriptor 0 read error: -22 [ 107.052423][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.059733][ T5839] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 107.059764][ T5839] dw2102: su3000_power_ctrl: 1, initialized 0 [ 107.059777][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 107.073449][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.074069][ T5839] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 107.074104][ T5839] usb 9-1: media controller created [ 107.074125][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 107.074136][ T5839] dw2102: i2c transfer failed. [ 107.074146][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 107.074157][ T5839] dw2102: i2c transfer failed. [ 107.074166][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 107.074175][ T5839] dw2102: i2c transfer failed. [ 107.074184][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 107.074195][ T5839] dw2102: i2c transfer failed. [ 107.074204][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 107.074213][ T5839] dw2102: i2c transfer failed. [ 107.074223][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 107.074233][ T5839] dw2102: i2c transfer failed. [ 107.074239][ T5839] dvb-usb: MAC address: 02:02:02:02:02:02 [ 107.094834][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.096944][ T7757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.117334][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 107.117353][ T5839] dw2102: command 0x0e transfer failed. [ 107.117360][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 107.117371][ T5839] dw2102: command 0x0e transfer failed. [ 107.347395][ T10] usb 5-1: USB disconnect, device number 15 [ 107.415574][ T42] usb 10-1: USB disconnect, device number 3 [ 107.437410][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 107.437431][ T5839] dw2102: command 0x0e transfer failed. [ 107.437438][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 107.437448][ T5839] dw2102: command 0x0e transfer failed. [ 107.437455][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 107.437465][ T5839] dw2102: command 0x51 transfer failed. [ 107.479039][ T5839] DVB: Unable to find symbol ds3000_attach() [ 107.479054][ T5839] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 107.546840][ T5839] rc_core: IR keymap rc-su3000 not found [ 107.546853][ T5839] Registered IR keymap rc-empty [ 107.547354][ T5839] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 107.548254][ T5839] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input40 [ 107.552993][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 107.553012][ T5839] dw2102: su3000_power_ctrl: 0, initialized 1 [ 107.553019][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 107.559141][ T5839] usb 9-1: USB disconnect, device number 8 [ 107.602996][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 107.715288][ T7781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.836517][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 107.928610][ T7797] 9p: Bad value for 'rfdno' [ 108.036642][ T10] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 108.045629][ T10] usb 5-1: Dual-Role OTG device on HNP port [ 108.046251][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.197587][ C0] configfs-gadget.g1 gadget.0: Using interface 0 [ 108.294997][ T10] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0000 pid 0x0000 [ 108.441364][ T7809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 108.946332][ T5839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 109.106158][ T5839] usb 10-1: Using ep0 maxpacket: 32 [ 109.109202][ T5839] usb 10-1: unable to get BOS descriptor or descriptor too short [ 109.109243][ T5839] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 109.116588][ T5839] usb 10-1: string descriptor 0 read error: -22 [ 109.116691][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.147016][ T5839] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 109.147052][ T5839] dw2102: su3000_power_ctrl: 1, initialized 0 [ 109.147067][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 109.151590][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.153495][ T5839] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 109.153534][ T5839] usb 10-1: media controller created [ 109.153554][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 109.153566][ T5839] dw2102: i2c transfer failed. [ 109.153577][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 109.153587][ T5839] dw2102: i2c transfer failed. [ 109.153597][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 109.153608][ T5839] dw2102: i2c transfer failed. [ 109.153618][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 109.153628][ T5839] dw2102: i2c transfer failed. [ 109.153638][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 109.153649][ T5839] dw2102: i2c transfer failed. [ 109.153658][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 109.153669][ T5839] dw2102: i2c transfer failed. [ 109.153675][ T5839] dvb-usb: MAC address: 02:02:02:02:02:02 [ 109.177279][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.202732][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 109.202749][ T5839] dw2102: command 0x0e transfer failed. [ 109.202756][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 109.202767][ T5839] dw2102: command 0x0e transfer failed. [ 109.276276][ T5095] Bluetooth: hci1: command tx timeout [ 109.508317][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 109.508338][ T5839] dw2102: command 0x0e transfer failed. [ 109.508345][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 109.508356][ T5839] dw2102: command 0x0e transfer failed. [ 109.508362][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 109.508373][ T5839] dw2102: command 0x51 transfer failed. [ 109.549604][ T5839] DVB: Unable to find symbol ds3000_attach() [ 109.549620][ T5839] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 109.550532][ T7837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.606118][ T5839] rc_core: IR keymap rc-su3000 not found [ 109.606130][ T5839] Registered IR keymap rc-empty [ 109.608901][ T5839] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 109.610850][ T5839] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input41 [ 109.615342][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 109.615361][ T5839] dw2102: su3000_power_ctrl: 0, initialized 1 [ 109.615372][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 109.625084][ T5839] usb 10-1: USB disconnect, device number 4 [ 109.670223][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 109.882633][ T7858] 9p: Bad value for 'rfdno' [ 110.366090][ T5824] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 110.516255][ T5824] usb 10-1: Using ep0 maxpacket: 8 [ 110.517138][ T5824] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 110.520430][ T5824] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.520449][ T5824] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 110.520476][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.723269][ T7871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.748009][ T7864] overlayfs: failed to resolve 'upper': -2 [ 110.886175][ T1036] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 111.025829][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.026764][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.031634][ T7885] overlayfs: failed to resolve 'upper': -2 [ 111.037017][ T1036] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.038307][ T1036] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.038332][ T1036] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.038350][ T1036] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.038386][ T1036] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 111.038409][ T1036] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 111.040458][ T1036] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.040480][ T1036] usb 6-1: Product: syz [ 111.040495][ T1036] usb 6-1: Manufacturer: syz [ 111.051287][ T1036] cdc_wdm 6-1:1.0: skipping garbage [ 111.051712][ T1036] cdc_wdm 6-1:1.0: skipping garbage [ 111.053796][ T1036] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 111.053814][ T1036] cdc_wdm 6-1:1.0: Unknown control protocol [ 111.356782][ T5095] Bluetooth: hci3: command tx timeout [ 111.546095][ T5824] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 111.634898][ T7892] xt_CT: No such helper "pptp" [ 111.696217][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 111.698864][ T5824] usb 9-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice= 0.00 [ 111.698896][ T5824] usb 9-1: no configurations [ 111.698906][ T5824] usb 9-1: can't read configurations, error -22 [ 111.799347][ T7894] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 111.836140][ T5824] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 112.006178][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 112.006636][ T5824] usb 9-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice= 0.00 [ 112.006656][ T5824] usb 9-1: no configurations [ 112.006663][ T5824] usb 9-1: can't read configurations, error -22 [ 112.006888][ T5824] usb usb9-port1: attempt power cycle [ 112.346121][ T5824] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 112.366962][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 112.367435][ T5824] usb 9-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice= 0.00 [ 112.367455][ T5824] usb 9-1: no configurations [ 112.367462][ T5824] usb 9-1: can't read configurations, error -22 [ 112.496115][ T5824] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 112.516824][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 112.517582][ T5824] usb 9-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice= 0.00 [ 112.517613][ T5824] usb 9-1: no configurations [ 112.517624][ T5824] usb 9-1: can't read configurations, error -22 [ 112.517890][ T5824] usb usb9-port1: unable to enumerate USB device [ 112.569664][ T7895] syz.1.584 (7895) used greatest stack depth: 19560 bytes left [ 113.162423][ T5839] usb 10-1: USB disconnect, device number 5 [ 113.286200][ T7899] FAULT_INJECTION: forcing a failure. [ 113.286200][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.286258][ T7899] CPU: 3 UID: 0 PID: 7899 Comm: syz.5.592 Not tainted syzkaller #0 PREEMPT(full) [ 113.286272][ T7899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.286279][ T7899] Call Trace: [ 113.286283][ T7899] [ 113.286287][ T7899] dump_stack_lvl+0x100/0x190 [ 113.286306][ T7899] should_fail_ex.cold+0x5/0xa [ 113.286321][ T7899] _copy_from_user+0x2e/0xd0 [ 113.286349][ T7899] video_usercopy+0x9e0/0x14c0 [ 113.286366][ T7899] ? __pfx___video_do_ioctl+0x10/0x10 [ 113.286381][ T7899] ? __pfx_video_usercopy+0x10/0x10 [ 113.286398][ T7899] ? __fget_files+0x215/0x3d0 [ 113.286412][ T7899] ? hook_file_ioctl_common+0x140/0x440 [ 113.286428][ T7899] v4l2_ioctl+0x1bd/0x250 [ 113.286443][ T7899] v4l2_compat_ioctl32+0x20f/0x2d0 [ 113.286454][ T7899] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 113.286465][ T7899] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 113.286480][ T7899] __do_fast_syscall_32+0x13a/0x8b0 [ 113.286497][ T7899] do_fast_syscall_32+0x32/0x70 [ 113.286512][ T7899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.286531][ T7899] RIP: 0023:0xf701efec [ 113.286544][ T7899] Code: Unable to access opcode bytes at 0xf701efc2. [ 113.286549][ T7899] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 113.286561][ T7899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 113.286567][ T7899] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.286574][ T7899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.286580][ T7899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.286587][ T7899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.286600][ T7899] [ 113.674451][ T5881] usb 6-1: USB disconnect, device number 11 [ 113.823396][ T7910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 114.071852][ T7919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.261590][ T7935] 8021q: adding VLAN 0 to HW filter on device bond5 [ 114.310177][ T7940] FAULT_INJECTION: forcing a failure. [ 114.310177][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 114.310206][ T7940] CPU: 3 UID: 0 PID: 7940 Comm: syz.0.605 Not tainted syzkaller #0 PREEMPT(full) [ 114.310225][ T7940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.310235][ T7940] Call Trace: [ 114.310241][ T7940] [ 114.310247][ T7940] dump_stack_lvl+0x100/0x190 [ 114.310274][ T7940] should_fail_ex.cold+0x5/0xa [ 114.310296][ T7940] should_failslab+0xc2/0x120 [ 114.310320][ T7940] __kvmalloc_node_noprof+0x113/0x9b0 [ 114.310341][ T7940] ? __kmalloc_cache_noprof+0x2c1/0x6d0 [ 114.310359][ T7940] ? percpu_ref_init+0xec/0x3f0 [ 114.310377][ T7940] ? io_alloc_cache_init+0x38/0x170 [ 114.310400][ T7940] io_alloc_cache_init+0x38/0x170 [ 114.310420][ T7940] io_uring_setup.cold+0x46e/0x1c5e [ 114.310446][ T7940] ? rcu_read_lock_any_held+0x6a/0x90 [ 114.310467][ T7940] ? find_held_lock+0x2b/0x80 [ 114.310486][ T7940] ? __pfx_io_uring_setup+0x10/0x10 [ 114.310510][ T7940] ? ksys_write+0x190/0x250 [ 114.310530][ T7940] ? lock_acquire+0x1d1/0x380 [ 114.310554][ T7940] ? __mutex_unlock_slowpath+0x35d/0x930 [ 114.310586][ T7940] ? fput+0x7c/0x100 [ 114.310607][ T7940] ? ksys_write+0x1ac/0x250 [ 114.310626][ T7940] ? __pfx_ksys_write+0x10/0x10 [ 114.310647][ T7940] __ia32_sys_io_uring_setup+0xc2/0x170 [ 114.310664][ T7940] __do_fast_syscall_32+0x13a/0x8b0 [ 114.310685][ T7940] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.310706][ T7940] do_fast_syscall_32+0x32/0x70 [ 114.310727][ T7940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.310748][ T7940] RIP: 0023:0xf7f78fec [ 114.310767][ T7940] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 114.310774][ T7940] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000001a9 [ 114.310791][ T7940] RAX: ffffffffffffffda RBX: 0000000000000667 RCX: 0000000080000000 [ 114.310801][ T7940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.310811][ T7940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.310820][ T7940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.310829][ T7940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.310850][ T7940] [ 114.382815][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.383137][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.386887][ T7942] overlayfs: failed to resolve 'upper': -2 [ 114.462897][ T7948] FAULT_INJECTION: forcing a failure. [ 114.462897][ T7948] name failslab, interval 1, probability 0, space 0, times 0 [ 114.462920][ T7948] CPU: 1 UID: 0 PID: 7948 Comm: syz.5.610 Not tainted syzkaller #0 PREEMPT(full) [ 114.462933][ T7948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.462940][ T7948] Call Trace: [ 114.462945][ T7948] [ 114.462950][ T7948] dump_stack_lvl+0x100/0x190 [ 114.462970][ T7948] should_fail_ex.cold+0x5/0xa [ 114.462990][ T7948] should_failslab+0xc2/0x120 [ 114.463014][ T7948] __kmalloc_cache_noprof+0x91/0x6d0 [ 114.463033][ T7948] ? tunnel_key_init+0x3d5/0x1a70 [ 114.463066][ T7948] tunnel_key_init+0x3d5/0x1a70 [ 114.463103][ T7948] ? __pfx_tunnel_key_init+0x10/0x10 [ 114.463148][ T7948] ? tcf_action_init_1+0x2d8/0x6c0 [ 114.463166][ T7948] ? __asan_memcpy+0x3c/0x60 [ 114.463191][ T7948] ? tcf_action_init_1+0x466/0x6c0 [ 114.463204][ T7948] tcf_action_init_1+0x466/0x6c0 [ 114.463217][ T7948] ? __pfx_tcf_action_init_1+0x10/0x10 [ 114.463227][ T7948] ? tc_action_load_ops+0x1f5/0x3e0 [ 114.463246][ T7948] ? __nla_parse+0x40/0x60 [ 114.463262][ T7948] tcf_action_init+0x43f/0xa60 [ 114.463279][ T7948] ? __pfx_tcf_action_init+0x10/0x10 [ 114.463301][ T7948] ? __kernel_text_address+0xd/0x30 [ 114.463316][ T7948] ? unwind_get_return_address+0x59/0xa0 [ 114.463331][ T7948] ? arch_stack_walk+0xa6/0xf0 [ 114.463354][ T7948] ? kfree_skbmem+0x19a/0x210 [ 114.463368][ T7948] ? kasan_save_stack+0x3f/0x50 [ 114.463383][ T7948] ? kasan_save_stack+0x30/0x50 [ 114.463397][ T7948] ? kasan_save_track+0x14/0x30 [ 114.463411][ T7948] ? kasan_save_free_info+0x3b/0x70 [ 114.463423][ T7948] ? __kasan_slab_free+0x5f/0x80 [ 114.463438][ T7948] ? kmem_cache_free+0x127/0x6c0 [ 114.463450][ T7948] ? kfree_skbmem+0x19a/0x210 [ 114.463464][ T7948] ? consume_skb+0xd1/0x110 [ 114.463475][ T7948] ? nlmon_xmit+0xa5/0xe0 [ 114.463491][ T7948] tcf_action_add+0xed/0x5c0 [ 114.463505][ T7948] ? __pfx_tcf_action_add+0x10/0x10 [ 114.463536][ T7948] ? __nla_parse+0x40/0x60 [ 114.463551][ T7948] tc_ctl_action+0x2e3/0x470 [ 114.463564][ T7948] ? __pfx_tc_ctl_action+0x10/0x10 [ 114.463580][ T7948] ? __pfx_tc_ctl_action+0x10/0x10 [ 114.463593][ T7948] rtnetlink_rcv_msg+0x3c9/0xe90 [ 114.463613][ T7948] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.463631][ T7948] ? ref_tracker_free+0x37e/0x6c0 [ 114.463664][ T7948] netlink_rcv_skb+0x159/0x420 [ 114.463683][ T7948] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.463697][ T7948] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.463721][ T7948] ? netlink_deliver_tap+0x1ae/0xcc0 [ 114.463742][ T7948] netlink_unicast+0x585/0x850 [ 114.463762][ T7948] ? __pfx_netlink_unicast+0x10/0x10 [ 114.463784][ T7948] netlink_sendmsg+0x8b0/0xda0 [ 114.463804][ T7948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.463824][ T7948] ? apparmor_socket_sendmsg+0x165/0x280 [ 114.463844][ T7948] ____sys_sendmsg+0xa4d/0xbe0 [ 114.463876][ T7948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.463897][ T7948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.463920][ T7948] ___sys_sendmsg+0x190/0x1e0 [ 114.463938][ T7948] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.463955][ T7948] ? futex_wait+0x11e/0x370 [ 114.463977][ T7948] ? find_held_lock+0x2b/0x80 [ 114.464001][ T7948] __sys_sendmsg+0x160/0x210 [ 114.464014][ T7948] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.464034][ T7948] __do_fast_syscall_32+0x13a/0x8b0 [ 114.464052][ T7948] do_fast_syscall_32+0x32/0x70 [ 114.464068][ T7948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.464083][ T7948] RIP: 0023:0xf701efec [ 114.464097][ T7948] Code: Unable to access opcode bytes at 0xf701efc2. [ 114.464102][ T7948] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 114.464117][ T7948] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000300 [ 114.464126][ T7948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.464133][ T7948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.464141][ T7948] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.464149][ T7948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.464164][ T7948] [ 114.681901][ T7952] netlink: 256 bytes leftover after parsing attributes in process `syz.4.612'. [ 114.681921][ T7952] netlink: 48 bytes leftover after parsing attributes in process `syz.4.612'. [ 114.816152][ T5839] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 114.966163][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 114.969453][ T5839] usb 6-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice= 0.00 [ 114.969490][ T5839] usb 6-1: no configurations [ 114.969502][ T5839] usb 6-1: can't read configurations, error -22 [ 115.106070][ T5839] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 115.266213][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 115.266921][ T5839] usb 6-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice= 0.00 [ 115.266971][ T5839] usb 6-1: no configurations [ 115.266983][ T5839] usb 6-1: can't read configurations, error -22 [ 115.267311][ T5839] usb usb6-port1: attempt power cycle [ 115.351265][ T7971] bond0: invalid NS target ff00:: specified for addition [ 115.351293][ T7971] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 115.585611][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.586107][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.598862][ T7979] overlayfs: failed to resolve 'upper': -2 [ 115.626210][ T5839] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 115.646730][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 115.647150][ T5839] usb 6-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice= 0.00 [ 115.647170][ T5839] usb 6-1: no configurations [ 115.647177][ T5839] usb 6-1: can't read configurations, error -22 [ 115.668988][ T7984] FAULT_INJECTION: forcing a failure. [ 115.668988][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 115.669010][ T7984] CPU: 3 UID: 0 PID: 7984 Comm: syz.4.623 Not tainted syzkaller #0 PREEMPT(full) [ 115.669022][ T7984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.669029][ T7984] Call Trace: [ 115.669033][ T7984] [ 115.669037][ T7984] dump_stack_lvl+0x100/0x190 [ 115.669056][ T7984] should_fail_ex.cold+0x5/0xa [ 115.669071][ T7984] should_failslab+0xc2/0x120 [ 115.669089][ T7984] __kmalloc_noprof+0xfc/0x840 [ 115.669103][ T7984] ? fib6_info_alloc+0x40/0x160 [ 115.669122][ T7984] fib6_info_alloc+0x40/0x160 [ 115.669137][ T7984] ip6_route_info_create+0x14c/0xad0 [ 115.669165][ T7984] ? rt6_add_dflt_router+0x139/0x4b0 [ 115.669182][ T7984] ip6_route_add+0x4b/0x1d0 [ 115.669194][ T7984] rt6_add_dflt_router+0x269/0x4b0 [ 115.669211][ T7984] ? __pfx_rt6_add_dflt_router+0x10/0x10 [ 115.669232][ T7984] ? __pfx_rt6_get_dflt_router+0x10/0x10 [ 115.669245][ T7984] ? ndisc_parse_options+0x42e/0x850 [ 115.669259][ T7984] ndisc_router_discovery+0x2dc6/0x3c50 [ 115.669277][ T7984] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 115.669289][ T7984] ? __local_bh_enable_ip+0xa5/0x120 [ 115.669307][ T7984] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.669320][ T7984] ? ip6t_do_table+0xbed/0x1c90 [ 115.669337][ T7984] ? __local_bh_enable_ip+0xa5/0x120 [ 115.669354][ T7984] ? ip6t_do_table+0xc1d/0x1c90 [ 115.669377][ T7984] ? skb_checksum+0x7f4/0x950 [ 115.669398][ T7984] ndisc_rcv+0x507/0x7a0 [ 115.669411][ T7984] icmpv6_rcv+0x15ac/0x1ae0 [ 115.669430][ T7984] ? __pfx_icmpv6_rcv+0x10/0x10 [ 115.669448][ T7984] ip6_protocol_deliver_rcu+0x1021/0x15b0 [ 115.669469][ T7984] ip6_input_finish+0x1e4/0x4a0 [ 115.669482][ T7984] ip6_input+0x105/0x2f0 [ 115.669495][ T7984] ip6_mc_input+0x513/0x1050 [ 115.669508][ T7984] ? __pfx_ip6_mc_input+0x10/0x10 [ 115.669521][ T7984] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 115.669535][ T7984] ? __pfx_ip6_mc_input+0x10/0x10 [ 115.669548][ T7984] ipv6_rcv+0x34c/0x3d0 [ 115.669560][ T7984] ? __pfx_ipv6_rcv+0x10/0x10 [ 115.669570][ T7984] __netif_receive_skb_one_core+0x12d/0x1e0 [ 115.669588][ T7984] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 115.669605][ T7984] ? lock_acquire+0x1d1/0x380 [ 115.669625][ T7984] __netif_receive_skb+0x1f/0x120 [ 115.669641][ T7984] netif_receive_skb+0x139/0x7d0 [ 115.669658][ T7984] ? __pfx_netif_receive_skb+0x10/0x10 [ 115.669678][ T7984] tun_rx_batched.isra.0+0x3f6/0x750 [ 115.669697][ T7984] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 115.669716][ T7984] ? tun_get_user+0x1e1e/0x3cc0 [ 115.669736][ T7984] tun_get_user+0x1f53/0x3cc0 [ 115.669758][ T7984] ? __lock_acquire+0x5c0/0x1f40 [ 115.669774][ T7984] ? __pfx_tun_get_user+0x10/0x10 [ 115.669792][ T7984] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 115.669809][ T7984] ? find_held_lock+0x2b/0x80 [ 115.669821][ T7984] ? tun_get+0x191/0x370 [ 115.669836][ T7984] ? tun_get+0x191/0x370 [ 115.669855][ T7984] tun_chr_write_iter+0xdc/0x200 [ 115.669867][ T7984] vfs_write+0x6af/0x1050 [ 115.669881][ T7984] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 115.669892][ T7984] ? __pfx_vfs_write+0x10/0x10 [ 115.669904][ T7984] ? find_held_lock+0x2b/0x80 [ 115.669925][ T7984] ksys_write+0x12a/0x250 [ 115.669938][ T7984] ? __pfx_ksys_write+0x10/0x10 [ 115.669959][ T7984] do_int80_emulation+0x166/0x650 [ 115.669975][ T7984] asm_int80_emulation+0x1a/0x20 [ 115.669987][ T7984] RIP: 0023:0xf71975ab [ 115.669998][ T7984] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 115.670010][ T7984] RSP: 002b:00000000f545644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 115.670023][ T7984] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 115.670029][ T7984] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.670036][ T7984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.670042][ T7984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.670048][ T7984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.670062][ T7984] [ 115.670095][ T7984] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 115.764493][ T7989] FAULT_INJECTION: forcing a failure. [ 115.764493][ T7989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.764519][ T7989] CPU: 1 UID: 0 PID: 7989 Comm: syz.5.625 Not tainted syzkaller #0 PREEMPT(full) [ 115.764534][ T7989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.764541][ T7989] Call Trace: [ 115.764545][ T7989] [ 115.764550][ T7989] dump_stack_lvl+0x100/0x190 [ 115.764572][ T7989] should_fail_ex.cold+0x5/0xa [ 115.764587][ T7989] get_futex_key+0x293/0x14f0 [ 115.764600][ T7989] ? __pfx_get_futex_key+0x10/0x10 [ 115.764612][ T7989] ? __mutex_unlock_slowpath+0x35d/0x930 [ 115.764630][ T7989] futex_wake+0xf4/0x5e0 [ 115.764646][ T7989] ? __pfx_futex_wake+0x10/0x10 [ 115.764662][ T7989] ? detach_task_ctx_data+0x83/0x490 [ 115.764676][ T7989] do_futex+0x2b2/0x440 [ 115.764689][ T7989] ? __pfx_do_futex+0x10/0x10 [ 115.764700][ T7989] ? __might_fault+0xc5/0x140 [ 115.764731][ T7989] mm_exit_exec_release+0x256/0x2f0 [ 115.764744][ T7989] do_exit+0x707/0x2a50 [ 115.764759][ T7989] ? __pfx_do_exit+0x10/0x10 [ 115.764771][ T7989] ? do_raw_spin_lock+0x128/0x260 [ 115.764783][ T7989] ? find_held_lock+0x2b/0x80 [ 115.764795][ T7989] ? get_signal+0x7e0/0x21e0 [ 115.764813][ T7989] do_group_exit+0xd5/0x2a0 [ 115.764827][ T7989] get_signal+0x1ec7/0x21e0 [ 115.764849][ T7989] ? __pfx_get_signal+0x10/0x10 [ 115.764869][ T7989] ? do_futex+0x190/0x440 [ 115.764883][ T7989] arch_do_signal_or_restart+0x91/0x7a0 [ 115.764899][ T7989] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 115.764918][ T7989] ? xfd_validate_state+0x129/0x190 [ 115.764939][ T7989] exit_to_user_mode_loop+0x139/0x700 [ 115.764950][ T7989] ? rcu_is_watching+0x13/0xc0 [ 115.764963][ T7989] __do_fast_syscall_32+0x59f/0x8b0 [ 115.764980][ T7989] do_fast_syscall_32+0x32/0x70 [ 115.764995][ T7989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.765009][ T7989] RIP: 0023:0xf701efec [ 115.765027][ T7989] Code: Unable to access opcode bytes at 0xf701efc2. [ 115.765032][ T7989] RSP: 002b:00000000f53ec5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 115.765043][ T7989] RAX: fffffffffffffe00 RBX: 00000000f7415020 RCX: 0000000000000080 [ 115.765050][ T7989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7415024 [ 115.765057][ T7989] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 115.765063][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.765069][ T7989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.765083][ T7989] [ 115.779924][ T5839] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 115.828768][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 115.829374][ T5839] usb 6-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice= 0.00 [ 115.829414][ T5839] usb 6-1: no configurations [ 115.829426][ T5839] usb 6-1: can't read configurations, error -22 [ 115.829626][ T5839] usb usb6-port1: unable to enumerate USB device [ 115.848601][ T7994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.056179][ T5824] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 116.178662][ T8003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.217115][ T5824] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.218352][ T5824] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.218378][ T5824] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.218410][ T5824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.434186][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 116.435094][ T5824] usb 9-1: usb_control_msg returned -32 [ 116.435131][ T5824] usbtmc 9-1:16.0: can't read capabilities [ 116.450727][ T8014] FAULT_INJECTION: forcing a failure. [ 116.450727][ T8014] name failslab, interval 1, probability 0, space 0, times 0 [ 116.450749][ T8014] CPU: 1 UID: 0 PID: 8014 Comm: syz.0.635 Not tainted syzkaller #0 PREEMPT(full) [ 116.450762][ T8014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.450770][ T8014] Call Trace: [ 116.450774][ T8014] [ 116.450779][ T8014] dump_stack_lvl+0x100/0x190 [ 116.450800][ T8014] should_fail_ex.cold+0x5/0xa [ 116.450818][ T8014] should_failslab+0xc2/0x120 [ 116.450837][ T8014] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 116.450854][ T8014] ? __alloc_skb+0x5b7/0x710 [ 116.450866][ T8014] ? __alloc_skb+0x140/0x710 [ 116.450880][ T8014] __alloc_skb+0x140/0x710 [ 116.450891][ T8014] ? __alloc_skb+0x5b7/0x710 [ 116.450901][ T8014] ? __pfx___alloc_skb+0x10/0x10 [ 116.450911][ T8014] ? common_file_perm+0x266/0x500 [ 116.450928][ T8014] vhci_write+0xc1/0x490 [ 116.450944][ T8014] vfs_write+0x6af/0x1050 [ 116.450959][ T8014] ? __pfx_vhci_write+0x10/0x10 [ 116.450974][ T8014] ? __pfx_vfs_write+0x10/0x10 [ 116.450998][ T8014] ? find_held_lock+0x2b/0x80 [ 116.451032][ T8014] ksys_write+0x12a/0x250 [ 116.451053][ T8014] ? __pfx_ksys_write+0x10/0x10 [ 116.451081][ T8014] do_int80_emulation+0x166/0x650 [ 116.451111][ T8014] asm_int80_emulation+0x1a/0x20 [ 116.451131][ T8014] RIP: 0023:0xf71775ab [ 116.451148][ T8014] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 116.451166][ T8014] RSP: 002b:00000000f543644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 116.451186][ T8014] RAX: ffffffffffffffda RBX: 00000000000000ca RCX: 0000000080000180 [ 116.451200][ T8014] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.451213][ T8014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.451225][ T8014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.451238][ T8014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.451262][ T8014] [ 116.476847][ T8014] FAULT_INJECTION: forcing a failure. [ 116.476847][ T8014] name fail_futex, interval 1, probability 0, space 0, times 0 [ 116.476874][ T8014] CPU: 2 UID: 0 PID: 8014 Comm: syz.0.635 Not tainted syzkaller #0 PREEMPT(full) [ 116.476897][ T8014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.476909][ T8014] Call Trace: [ 116.476916][ T8014] [ 116.476924][ T8014] dump_stack_lvl+0x100/0x190 [ 116.476957][ T8014] should_fail_ex.cold+0x5/0xa [ 116.476979][ T8014] get_futex_key+0x1d0/0x14f0 [ 116.477003][ T8014] ? __pfx_get_futex_key+0x10/0x10 [ 116.477033][ T8014] futex_wait_setup+0x91/0x540 [ 116.477066][ T8014] __futex_wait+0x19f/0x300 [ 116.477091][ T8014] ? __pfx___futex_wait+0x10/0x10 [ 116.477122][ T8014] ? __pfx_try_to_wake_up+0x10/0x10 [ 116.477151][ T8014] ? futex_hash+0x311/0x400 [ 116.477173][ T8014] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.477200][ T8014] ? find_held_lock+0x2b/0x80 [ 116.477222][ T8014] ? futex_wake+0x4ea/0x5e0 [ 116.477255][ T8014] futex_wait+0xe6/0x370 [ 116.477283][ T8014] ? __pfx_futex_wait+0x10/0x10 [ 116.477311][ T8014] ? percpu_counter_add_batch+0xb9/0x230 [ 116.477338][ T8014] ? errseq_sample+0x51/0x70 [ 116.477364][ T8014] ? file_init_path+0x48e/0x670 [ 116.477395][ T8014] do_futex+0x265/0x440 [ 116.477418][ T8014] ? __pfx_do_futex+0x10/0x10 [ 116.477437][ T8014] ? fd_install+0x223/0x580 [ 116.477465][ T8014] __ia32_sys_futex_time32+0x2f4/0x470 [ 116.477491][ T8014] ? xfd_validate_state+0x129/0x190 [ 116.477519][ T8014] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 116.477551][ T8014] __do_fast_syscall_32+0x13a/0x8b0 [ 116.477575][ T8014] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.477600][ T8014] do_fast_syscall_32+0x32/0x70 [ 116.477624][ T8014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.477648][ T8014] RIP: 0023:0xf7f78fec [ 116.477669][ T8014] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 116.477677][ T8014] RSP: 002b:00000000f54365bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 116.477697][ T8014] RAX: ffffffffffffffda RBX: 00000000f7434f88 RCX: 0000000000000080 [ 116.477710][ T8014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 116.477723][ T8014] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 116.477735][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.477747][ T8014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.477774][ T8014] [ 116.656189][ T5881] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 116.791319][ T8015] netlink: 'syz.4.627': attribute type 3 has an invalid length. [ 116.806223][ T5881] usb 10-1: Using ep0 maxpacket: 32 [ 116.809537][ T5881] usb 10-1: unable to get BOS descriptor or descriptor too short [ 116.809562][ T5881] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 116.812703][ T5881] usb 10-1: string descriptor 0 read error: -22 [ 116.813248][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.817987][ T5881] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 116.818006][ T5881] dw2102: su3000_power_ctrl: 1, initialized 0 [ 116.818015][ T5881] dvb-usb: bulk message failed: -22 (2/0) [ 116.820136][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.820702][ T5881] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 116.820742][ T5881] usb 10-1: media controller created [ 116.820761][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 116.820771][ T5881] dw2102: i2c transfer failed. [ 116.820781][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 116.820791][ T5881] dw2102: i2c transfer failed. [ 116.820800][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 116.820809][ T5881] dw2102: i2c transfer failed. [ 116.820818][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 116.820827][ T5881] dw2102: i2c transfer failed. [ 116.820836][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 116.820845][ T5881] dw2102: i2c transfer failed. [ 116.820854][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 116.820864][ T5881] dw2102: i2c transfer failed. [ 116.820870][ T5881] dvb-usb: MAC address: 02:02:02:02:02:02 [ 116.829758][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.838064][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 116.838075][ T5881] dw2102: command 0x0e transfer failed. [ 116.838080][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 116.838086][ T5881] dw2102: command 0x0e transfer failed. [ 117.078093][ T8017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.146206][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 117.146228][ T5881] dw2102: command 0x0e transfer failed. [ 117.146235][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 117.146245][ T5881] dw2102: command 0x0e transfer failed. [ 117.146252][ T5881] dvb-usb: bulk message failed: -22 (1/0) [ 117.146262][ T5881] dw2102: command 0x51 transfer failed. [ 117.171226][ T5881] DVB: Unable to find symbol ds3000_attach() [ 117.171236][ T5881] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 117.226152][ T5881] rc_core: IR keymap rc-su3000 not found [ 117.226170][ T5881] Registered IR keymap rc-empty [ 117.227752][ T5881] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 117.230141][ T5881] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input42 [ 117.232007][ T5881] dvb-usb: schedule remote query interval to 150 msecs. [ 117.232024][ T5881] dw2102: su3000_power_ctrl: 0, initialized 1 [ 117.232034][ T5881] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 117.253489][ T5839] usb 10-1: USB disconnect, device number 6 [ 117.284599][ T5839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 117.672877][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.673580][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.196153][ T5824] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 118.357145][ T5824] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 118.358790][ T5824] usb 10-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.361920][ T5824] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 118.362016][ T5824] usb 10-1: Manufacturer: syz [ 118.362030][ T5824] usb 10-1: SerialNumber: syz [ 118.599231][ T5824] usbhid 10-1:36.0: couldn't find an input interrupt endpoint [ 118.605338][ T5824] usb 10-1: USB disconnect, device number 7 [ 118.618243][ T8061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.846739][ T10] usb 9-1: USB disconnect, device number 13 [ 118.976199][ T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 119.046270][ T5095] Bluetooth: hci3: command tx timeout [ 119.136121][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 119.138039][ T25] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.138079][ T25] usb 6-1: no configurations [ 119.138091][ T25] usb 6-1: can't read configurations, error -22 [ 119.276278][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 119.416513][ T8111] [ 119.417615][ T8111] ====================================================== [ 119.420584][ T8111] WARNING: possible circular locking dependency detected [ 119.423532][ T8111] syzkaller #0 Not tainted [ 119.425519][ T8111] ------------------------------------------------------ [ 119.428476][ T8111] syz.5.657/8111 is trying to acquire lock: [ 119.430960][ T8111] ffff8880569f80b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 119.434812][ T8111] [ 119.434812][ T8111] but task is already holding lock: [ 119.437963][ T8111] ffffffff90f86f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 119.441959][ T8111] [ 119.441959][ T8111] which lock already depends on the new lock. [ 119.441959][ T8111] [ 119.446186][ T8111] [ 119.446186][ T8111] the existing dependency chain (in reverse order) is: [ 119.449770][ T8111] [ 119.449770][ T8111] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 119.452741][ T8111] lock_acquire+0x1d1/0x380 [ 119.454817][ T8111] __mutex_lock+0x1a4/0x1bd0 [ 119.457084][ T8111] rfcomm_security_cfm+0x3f/0x4b0 [ 119.459423][ T8111] hci_auth_complete_evt+0x811/0x1180 [ 119.461946][ T8111] hci_event_packet+0x8e9/0xcd0 [ 119.464248][ T8111] hci_rx_work+0x451/0xfc0 [ 119.466341][ T8111] process_one_work+0xac7/0x1b10 [ 119.468705][ T8111] worker_thread+0x5ef/0xe50 [ 119.470871][ T8111] kthread+0x373/0x450 [ 119.472878][ T8111] ret_from_fork+0x730/0xd60 [ 119.474962][ T8111] ret_from_fork_asm+0x1a/0x30 [ 119.477116][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 119.477693][ T25] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.478316][ T25] usb 6-1: no configurations [ 119.478372][ T25] usb 6-1: can't read configurations, error -22 [ 119.478525][ T25] usb usb6-port1: attempt power cycle [ 119.490284][ T8111] [ 119.490284][ T8111] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 119.493710][ T8111] lock_acquire+0x1d1/0x380 [ 119.495910][ T8111] __mutex_lock+0x1a4/0x1bd0 [ 119.497878][ T8111] hci_remote_features_evt+0x485/0x9b0 [ 119.500394][ T8111] hci_event_packet+0x8e9/0xcd0 [ 119.502570][ T8111] hci_rx_work+0x451/0xfc0 [ 119.504497][ T8111] process_one_work+0xac7/0x1b10 [ 119.506374][ T8111] worker_thread+0x5ef/0xe50 [ 119.508150][ T8111] kthread+0x373/0x450 [ 119.510195][ T8111] ret_from_fork+0x730/0xd60 [ 119.512269][ T8111] ret_from_fork_asm+0x1a/0x30 [ 119.513941][ T8111] [ 119.513941][ T8111] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 119.516269][ T8111] check_prev_add+0xeb/0xe60 [ 119.517891][ T8111] __lock_acquire+0x1528/0x1f40 [ 119.520100][ T8111] lock_acquire+0x1d1/0x380 [ 119.521764][ T8111] __mutex_lock+0x1a4/0x1bd0 [ 119.523441][ T8111] l2cap_chan_connect+0xac/0x2110 [ 119.525237][ T8111] l2cap_sock_connect+0x37a/0x770 [ 119.527028][ T8111] kernel_connect+0x107/0x160 [ 119.528873][ T8111] rfcomm_dlc_open+0x838/0xac0 [ 119.531017][ T8111] rfcomm_sock_connect+0x42c/0x690 [ 119.532857][ T8111] __sys_connect_file+0x146/0x1a0 [ 119.534624][ T8111] __sys_connect+0x141/0x170 [ 119.536314][ T8111] __ia32_sys_connect+0x71/0xb0 [ 119.538259][ T8111] __do_fast_syscall_32+0x13a/0x8b0 [ 119.540548][ T8111] do_fast_syscall_32+0x32/0x70 [ 119.542405][ T8111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.545186][ T8111] [ 119.545186][ T8111] other info that might help us debug this: [ 119.545186][ T8111] [ 119.549080][ T8111] Chain exists of: [ 119.549080][ T8111] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 119.549080][ T8111] [ 119.553167][ T8111] Possible unsafe locking scenario: [ 119.553167][ T8111] [ 119.555579][ T8111] CPU0 CPU1 [ 119.557277][ T8111] ---- ---- [ 119.558923][ T8111] lock(rfcomm_mutex); [ 119.560479][ T8111] lock(hci_cb_list_lock); [ 119.562892][ T8111] lock(rfcomm_mutex); [ 119.565235][ T8111] lock(&hdev->lock); [ 119.566638][ T8111] [ 119.566638][ T8111] *** DEADLOCK *** [ 119.566638][ T8111] [ 119.570078][ T8111] locks held by syz.5.657/8111: 1, last CPU#1: [ 119.572430][ T8111] #0: ffffffff90f86f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 119.575617][ T8111] [ 119.575617][ T8111] stack backtrace: [ 119.577445][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.5.657 Not tainted syzkaller #0 PREEMPT(full) [ 119.580765][ T8111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.585194][ T8111] Call Trace: [ 119.586697][ T8111] [ 119.588046][ T8111] dump_stack_lvl+0x100/0x190 [ 119.590164][ T8111] print_circular_bug.cold+0x178/0x1be [ 119.592609][ T8111] check_noncircular+0x146/0x160 [ 119.594886][ T8111] check_prev_add+0xeb/0xe60 [ 119.597049][ T8111] __lock_acquire+0x1528/0x1f40 [ 119.599274][ T8111] lock_acquire+0x1d1/0x380 [ 119.601364][ T8111] ? l2cap_chan_connect+0xac/0x2110 [ 119.603778][ T8111] ? __pfx___might_resched+0x10/0x10 [ 119.606180][ T8111] __mutex_lock+0x1a4/0x1bd0 [ 119.608255][ T8111] ? l2cap_chan_connect+0xac/0x2110 [ 119.610543][ T8111] ? l2cap_chan_connect+0xac/0x2110 [ 119.612904][ T8111] ? hci_get_route+0x368/0x520 [ 119.615000][ T8111] ? hci_get_route+0x368/0x520 [ 119.617087][ T8111] ? __pfx___mutex_lock+0x10/0x10 [ 119.619331][ T8111] ? _raw_read_unlock+0x28/0x50 [ 119.621513][ T8111] ? hci_get_route+0x368/0x520 [ 119.623663][ T8111] ? __pfx_hci_get_route+0x10/0x10 [ 119.625948][ T8111] ? reacquire_held_locks+0xdd/0x1f0 [ 119.628303][ T8111] ? release_sock+0x21/0x280 [ 119.630390][ T8111] ? l2cap_chan_connect+0xac/0x2110 [ 119.632737][ T8111] l2cap_chan_connect+0xac/0x2110 [ 119.634987][ T8111] ? __local_bh_enable_ip+0xa5/0x120 [ 119.637353][ T8111] l2cap_sock_connect+0x37a/0x770 [ 119.639622][ T8111] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 119.642132][ T8111] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.644701][ T8111] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 119.647264][ T8111] kernel_connect+0x107/0x160 [ 119.649373][ T8111] ? __pfx_kernel_connect+0x10/0x10 [ 119.651720][ T8111] ? timer_init_key+0x150/0x310 [ 119.653919][ T8111] rfcomm_dlc_open+0x838/0xac0 [ 119.656112][ T8111] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 119.658447][ T8111] ? rfcomm_sock_connect+0x3e8/0x690 [ 119.660866][ T8111] ? find_held_lock+0x2b/0x80 [ 119.662978][ T8111] ? rfcomm_sock_connect+0x3e8/0x690 [ 119.665338][ T8111] ? __local_bh_enable_ip+0xa5/0x120 [ 119.667689][ T8111] rfcomm_sock_connect+0x42c/0x690 [ 119.670039][ T8111] __sys_connect_file+0x146/0x1a0 [ 119.672322][ T8111] __sys_connect+0x141/0x170 [ 119.674388][ T8111] ? __pfx___sys_connect+0x10/0x10 [ 119.676788][ T8111] __ia32_sys_connect+0x71/0xb0 [ 119.678971][ T8111] ? lockdep_hardirqs_on+0x7d/0x110 [ 119.681308][ T8111] __do_fast_syscall_32+0x13a/0x8b0 [ 119.683764][ T8111] ? lockdep_hardirqs_on+0x7d/0x110 [ 119.685835][ T8111] do_fast_syscall_32+0x32/0x70 [ 119.687764][ T8111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.690582][ T8111] RIP: 0023:0xf701efec [ 119.692430][ T8111] Code: Unable to access opcode bytes at 0xf701efc2. [ 119.695358][ T8111] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 119.699050][ T8111] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 119.702588][ T8111] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 119.706077][ T8111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.709564][ T8111] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.713101][ T8111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.716586][ T8111] [ 119.720374][ T8109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.720493][ T8109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.737955][ T8109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.747917][ T8109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.748326][ T8109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.751880][ T8109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.751962][ T8109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.757469][ T8109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.761491][ T8109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.761758][ T8109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.771201][ T8109] Bluetooth: hci3: Opcode 0x0406 failed: -4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.850062][ T25] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 119.877652][ T25] usb 6-1: device descriptor read/8, error -71 [ 120.170241][ T7228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.224303][ T7228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.269878][ T7228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.320272][ T7228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.384654][ T7228] bridge_slave_1: left allmulticast mode [ 120.384676][ T7228] bridge_slave_1: left promiscuous mode [ 120.384805][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.388965][ T7228] bridge_slave_0: left allmulticast mode [ 120.388988][ T7228] bridge_slave_0: left promiscuous mode [ 120.389140][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.452914][ T7228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.455473][ T7228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.456896][ T7228] bond0 (unregistering): Released all slaves [ 120.458258][ T7228] bond1 (unregistering): Released all slaves [ 120.461342][ T7228] bond2 (unregistering): Released all slaves [ 120.463933][ T7228] bond3 (unregistering): Released all slaves [ 120.471824][ T7228] bond4 (unregistering): Released all slaves [ 120.480653][ T7228] bond5 (unregistering): Released all slaves [ 120.600666][ T5450] 8021q: adding VLAN 0 to HW filter on device eth10 [ 120.732225][ T5450] 8021q: adding VLAN 0 to HW filter on device eth11 [ 120.739262][ T7228] hsr_slave_0: left promiscuous mode [ 120.739717][ T7228] hsr_slave_1: left promiscuous mode [ 120.740142][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.740158][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.740673][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.740686][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.742237][ T7228] veth1_macvtap: left promiscuous mode [ 120.742271][ T7228] veth0_macvtap: left promiscuous mode [ 120.742344][ T7228] veth1_vlan: left promiscuous mode [ 120.742389][ T7228] veth0_vlan: left promiscuous mode [ 120.818713][ T7228] team0 (unregistering): Port device team_slave_1 removed [ 120.822908][ T7228] team0 (unregistering): Port device team_slave_0 removed [ 121.010341][ T5450] 8021q: adding VLAN 0 to HW filter on device eth12 [ 121.114912][ T7228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.120437][ T5450] 8021q: adding VLAN 0 to HW filter on device eth13 [ 121.169070][ T7228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.209502][ T7228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.259199][ T7228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.345493][ T7228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.389728][ T7228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.441757][ T7228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.458087][ T5450] 8021q: adding VLAN 0 to HW filter on device eth14 [ 121.491277][ T7228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.553335][ T7228] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.567317][ T5450] 8021q: adding VLAN 0 to HW filter on device eth15 [ 121.595572][ T7228] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.660528][ T7228] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.668644][ T5450] 8021q: adding VLAN 0 to HW filter on device eth16 [ 121.706308][ T7228] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.778720][ T7228] bridge_slave_1: left allmulticast mode [ 121.778745][ T7228] bridge_slave_1: left promiscuous mode [ 121.778877][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.780331][ T7228] bridge_slave_0: left allmulticast mode [ 121.780351][ T7228] bridge_slave_0: left promiscuous mode [ 121.780470][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.791892][ T7228] bridge_slave_1: left allmulticast mode [ 121.791907][ T7228] bridge_slave_1: left promiscuous mode [ 121.791998][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.797461][ T7228] bridge_slave_0: left allmulticast mode [ 121.797476][ T7228] bridge_slave_0: left promiscuous mode [ 121.797539][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.809553][ T7228] bridge_slave_1: left allmulticast mode [ 121.809576][ T7228] bridge_slave_1: left promiscuous mode [ 121.809689][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.814698][ T7228] bridge_slave_0: left allmulticast mode [ 121.814718][ T7228] bridge_slave_0: left promiscuous mode [ 121.814820][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.908482][ T7228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.910050][ T7228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.911023][ T7228] bond0 (unregistering): Released all slaves [ 121.913248][ T7228] bond1 (unregistering): Released all slaves [ 121.917560][ T7228] bond2 (unregistering): Released all slaves [ 121.925784][ T7228] bond3 (unregistering): Released all slaves [ 121.935457][ T7228] bond4 (unregistering): Released all slaves [ 121.941625][ T7228] bond5 (unregistering): Released all slaves [ 121.965225][ T7228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.970603][ T7228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.971605][ T7228] bond0 (unregistering): Released all slaves [ 121.974004][ T7228] bond1 (unregistering): Released all slaves [ 122.003582][ T7228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.004762][ T7228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.005400][ T7228] bond0 (unregistering): Released all slaves [ 122.011153][ T5450] 8021q: adding VLAN 0 to HW filter on device eth17 [ 122.124542][ T5450] 8021q: adding VLAN 0 to HW filter on device eth18 [ 122.254337][ T5450] 8021q: adding VLAN 0 to HW filter on device eth19 [ 122.399106][ T5450] 8021q: adding VLAN 0 to HW filter on device eth20 [ 122.492356][ T7228] hsr_slave_0: left promiscuous mode [ 122.492741][ T7228] hsr_slave_1: left promiscuous mode [ 122.493156][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.493172][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.493659][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.493673][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.500849][ T7228] hsr_slave_0: left promiscuous mode [ 122.503992][ T7228] hsr_slave_1: left promiscuous mode [ 122.504441][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.504457][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.508171][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.508186][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.524528][ T7228] hsr_slave_0: left promiscuous mode [ 122.527803][ T7228] hsr_slave_1: left promiscuous mode [ 122.528203][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.528218][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.533627][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.533642][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.545694][ T7228] veth1_macvtap: left promiscuous mode [ 122.545729][ T7228] veth0_macvtap: left promiscuous mode [ 122.545816][ T7228] veth1_vlan: left promiscuous mode [ 122.545838][ T7228] veth0_vlan: left promiscuous mode [ 122.554944][ T7228] veth1_macvtap: left promiscuous mode [ 122.554987][ T7228] veth0_macvtap: left promiscuous mode [ 122.555050][ T7228] veth1_vlan: left promiscuous mode [ 122.555090][ T7228] veth0_vlan: left promiscuous mode [ 122.564148][ T7228] veth1_macvtap: left promiscuous mode [ 122.564173][ T7228] veth0_macvtap: left promiscuous mode [ 122.564223][ T7228] veth1_vlan: left promiscuous mode [ 122.564260][ T7228] veth0_vlan: left promiscuous mode [ 122.774237][ T7228] team0 (unregistering): Port device team_slave_1 removed [ 122.779449][ T7228] team0 (unregistering): Port device team_slave_0 removed [ 122.885201][ T7228] team0 (unregistering): Port device team_slave_1 removed [ 122.893432][ T7228] team0 (unregistering): Port device team_slave_0 removed [ 122.946529][ T5450] 8021q: adding VLAN 0 to HW filter on device eth21 [ 123.108125][ T5450] 8021q: adding VLAN 0 to HW filter on device eth22 [ 123.284349][ T5450] 8021q: adding VLAN 0 to HW filter on device eth23 [ 123.446951][ T5450] 8021q: adding VLAN 0 to HW filter on device eth24 [ 123.621750][ T5450] 8021q: adding VLAN 0 to HW filter on device eth25