last executing test programs: 1m23.230751571s ago: executing program 3 (id=36): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000540)=""/17, 0x11}, {0x0, 0xffffffa0}, {&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000100)=""/101, 0x65}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000340)=""/142, 0x8e}], 0x6, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0xfffffc05}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@multicast, @random="429e82211cf8", @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x19, 0x6d, 0x0, 0xf7, 0x29, 0x0, @rand_addr=0x64010100, @broadcast}, "fc9f7831d4"}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r5, &(0x7f0000000280)="8de8a386b4b89b65ace17d539c694fbaef3cd137163b506e3428978dda2460ae822e7eba8a6c5b8af8f0f36818924bc0ad804d0fd0442e8dbddcb22d418f360128434936f38620260c67aed6e0fc12c4885460a4f8", 0x55, 0x0, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x1, 0x1, 0x40004}}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000290010002cbd7000fedbdf25050000007d002e009f30e14abcc63aa2484fd5bc5593276906bf668bd3a36987210644b1dc96069874cce33a2e4697d9018a561ffd3cf1d06a4cafb21ed3c8fb9e563ca196ef072c4c473b48b78025096e6bd9646b9072c5521b32ab4f298a7057768741d550ee5a14584130174e50b1631fd80000000800248004005380"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0xf, 0xc9, 0x2, 0x9}}}, 0x9) 1m23.041352785s ago: executing program 3 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)}, 0x815) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}, {0x0, 0x6, 0x7}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x21}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000f43000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="66b8010000000f01d9660f3880ab2903660fc7340fc7316766c7442400fa0000006766c7442402090000006766c744240600000000670f011c24d3dfc4e385ce4998000f91d826660f38829c0d000f2061", 0x51}], 0x1, 0x10, &(0x7f00000003c0)=[@efer={0x2, 0x1}], 0x1) waitid(0x2, 0x0, &(0x7f00000000c0), 0x20000000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x4084) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='117.0.0.1\x00', 0xfffffe46) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000180)={{0x80a0000, 0xfec00000, 0x0, 0x7, 0x40, 0xb, 0x3, 0x62, 0x1e, 0x5, 0x1, 0x6}, {0xd000, 0x70000, 0x4, 0x0, 0x10, 0x6, 0x9, 0x5, 0x1, 0xd, 0x8, 0xac}, {0xeeef0000, 0x5000, 0x4, 0x3, 0x0, 0x4, 0x3, 0x8, 0x2, 0x2, 0x40, 0x8}, {0x0, 0xeeee8000, 0x4, 0x1a, 0x3b, 0xba, 0x2, 0x7, 0x6, 0x8, 0x1, 0x8}, {0x2000, 0x26000, 0x0, 0x41, 0x6, 0xb, 0x1, 0x7, 0x7f, 0x12, 0x4e, 0x4}, {0xd000, 0x100000, 0xf, 0xf, 0x4, 0xff, 0xfb, 0x2, 0x3, 0x0, 0x1, 0x7}, {0xfec00000, 0x10000, 0xf, 0x8, 0x2, 0x2, 0x8, 0x77, 0x7f, 0x3, 0xf9, 0x10}, {0x8000000, 0x6000, 0x0, 0x2, 0xe4, 0x1, 0x2, 0x40, 0x5, 0x7, 0x1, 0x4}, {0x8080000, 0x5}, {0xfec00000, 0x7ff}, 0x2, 0x0, 0xffff1000, 0x1, 0xd, 0x0, 0xf000, [0x8000, 0x5f, 0x8, 0x4]}) 1m22.871222237s ago: executing program 3 (id=47): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xba, 0x482400) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r0, 0xc0086444, &(0x7f0000000140)) 1m22.870822844s ago: executing program 3 (id=49): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) select(0x40, &(0x7f0000000080)={0x8, 0x8000, 0x2, 0x7, 0x3, 0x9, 0xb8e, 0x101}, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x63, 0x0, 'syz1\x00', 0x0}) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.log\x00', 0x402800, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x201, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={r6, r7, 0x3, 0xc21}) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595d, 0x1, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m22.002324846s ago: executing program 3 (id=56): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000005c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x5}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r4], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r4], 0x0, 0x1, 0x1}) 1m21.690273143s ago: executing program 3 (id=62): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'team_slave_1\x00'}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101000) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r1, 0xc0086442, &(0x7f00000000c0)) 1m21.643179597s ago: executing program 32 (id=62): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'team_slave_1\x00'}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101000) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r1, 0xc0086442, &(0x7f00000000c0)) 4.309732724s ago: executing program 1 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 4.259671051s ago: executing program 1 (id=1295): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800]}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 3.420995993s ago: executing program 1 (id=1303): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000280)={&(0x7f00000000c0)=[r1], 0x0, 0x0, 0x1, 0x6}) 3.360839203s ago: executing program 1 (id=1305): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0x100000001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002140), 0x4403c0, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x15) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_SEND_MASTER_CMD(r5, 0x40076f3f, &(0x7f0000000040)={"cc2bd1030395", 0x6}) ioctl(r4, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000241)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000340)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000242)=0x3f) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r2) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40001) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000243)=0x1) r8 = syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r8) waitid(0x1, r8, 0x0, 0x21000006, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f00000010c0)) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) 3.07865056s ago: executing program 1 (id=1311): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x40050) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x1, 0x0}) close(0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x10, 0xffffffffffffffff, 0x100000000) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 2.940990987s ago: executing program 1 (id=1312): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x7, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xe, "50ba006d70e1c564f936666b"}, {0x0, 0x5, "91ec92"}, {0x0, 0x7, "0683fa3f39"}]}]}}}}}}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40841) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r7, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x1000, 0xfffe}, &(0x7f00000004c0)=0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYRES64=r0, @ANYRESDEC=r3, @ANYBLOB="610233005030010008021100bf0108021100000050505050505073cc3157e9f51fbdadffa7a3a3f799065dea94a8fb64c3b8155f308f0afdb5bd74dbc0505c6942ff5bfc05260500000066fe90c18e71b394ae2ba525c8fc071de903bf31baaf515e5339fbb2c4"], 0x288}, 0x1, 0x0, 0x0, 0x20004805}, 0x0) 1.870975125s ago: executing program 0 (id=1325): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100001"], 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="bc01330080000000ffffffffffff080211000000f7ab87594b3f00000000000801000100dd7118aae49bd5937bad5fda023b2a5a78c05782f92fe27196352514ed223d61c8fc17d2692f2a2eecd8d55db037f220440957ec558232ad7346e19d0ffba41dae1bdf25fc38ceb7a7a77ac466c2bb6feb8de070b227826541a0d118d508fc18f3cc6f5f98db435cd2d27a5c0ce49292e72bb2dd32681a1a58e3ff43cdadc26f69deb1ef3ede9aec85a6554b2c7cd5af891f933549794b8d0f911ffdaed3ba6833441f94f5721cddaf7e6127b1f68192b4d5902dd5c215d8df43165c4061282fcbe5430fdf2448206d0e1561b338289d64b802476bd7d66916ec22a9ba727a7235efa7d79790006ecf9f6cf9dcdddfd6fc6d331c49964061c06dde5fba9c6d0c3e70ab41f94363dfcae6a3094be521aaeb94d767d83c334beb6c7fb826e4445bc76956fa8925f927e16204df31acbbd681b6d593a68b3b3756ff8a78ffb7134aff566b"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 1.610267701s ago: executing program 2 (id=1330): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x401, 0x290040) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000280)={0x0, &(0x7f0000000200), 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x14}) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x2a, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000100)={r2, 0x0, r5, 0x4, 0x4007, 0x9, 0x7, 0x5, 0x4, 0xe3}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000080)=r5) 1.610030924s ago: executing program 2 (id=1331): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x40050) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) close(0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x10, 0xffffffffffffffff, 0x100000000) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 1.549828402s ago: executing program 2 (id=1332): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000001800280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.549614076s ago: executing program 2 (id=1333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0xc02) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.12035211s ago: executing program 4 (id=1340): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x40050) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) close(0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x10, 0xffffffffffffffff, 0x100000000) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 1.06997904s ago: executing program 4 (id=1341): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000000000003f280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.06976954s ago: executing program 4 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="bc01330080000000ffffffffffff080211000000f7ab87594b3f00000000000801000100dd7118aae49bd5937bad5fda023b2a5a78c05782f92fe27196352514ed223d61c8fc17d2692f2a2eecd8d55db037f220440957ec558232ad7346e19d0ffba41dae1bdf25fc38ceb7a7a77ac466c2bb6feb8de070b227826541a0d118d508fc18f3cc6f5f98db435cd2d27a5c0ce49292e72bb2dd32681a1a58e3ff43cdadc26f69deb1ef3ede9aec85a6554b2c7cd5"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 998.234791ms ago: executing program 0 (id=1343): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000107"], 0x20}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 660.098258ms ago: executing program 2 (id=1344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 659.88034ms ago: executing program 2 (id=1345): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x40}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) r6 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="bc01330080000000ffffffffffff080211000000f7ab87594b3f00000000000801000100dd7118aae49bd5937bad5fda023b2a5a78c05782f92fe27196352514ed223d61c8fc17d2692f2a2eecd8d55db037f220440957ec558232ad7346e19d0ffba41dae1bdf25fc38ceb7a7a77ac466c2bb6feb8de070b227826541a0d118d508fc18f3cc6f5f98db435cd2d27a5c0ce49292e72bb2dd32681a1a58e3ff43cdadc26f69deb1ef3ede9aec85a6554b2c7cd5af891f933549794b8d0f911ffdaed3ba6833441f94f5721cddaf7e6127b1f68192b4d5902dd5c215d8df43165c4061282fcbe5430fdf2448206d0e1561b338289d64b802476bd7d66916ec22a9ba727a7235efa7d79790006ecf9f6cf9dcdddfd6fc6d331c49964061c06dde5fba9c6d0c3e70ab41f94363dfcae6a3094be521aaeb94d767d83c334beb6c7fb826e4445bc76956fa8925f927e16204df31acbbd681b6d593a68b3b3756ff8a78ffb7134aff566b"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 181.017642ms ago: executing program 4 (id=1346): socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="05031400d3fc140000004788031c", 0xe, 0xa5, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0xd, 0x6, @multicast}, 0x14) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 180.665079ms ago: executing program 0 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000051}, 0x4001) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRESHEX=r2], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 101.109555ms ago: executing program 0 (id=1348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800e101000000ffff"], 0x48}}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 50.449538ms ago: executing program 0 (id=1349): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x40050) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10012, 0x1, 0x0}) close(0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x10, 0xffffffffffffffff, 0x100000000) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 601.403µs ago: executing program 0 (id=1350): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='./backing_file', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f00000000c0)={0xb, 0x3, 0x0, 0x3, 'syz0\x00', 0x8}) write$cgroup_pid(r3, &(0x7f0000000540), 0x12) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000280)={0x0, &(0x7f0000000200), 0x0, 0x0, 0x6}) 138.925µs ago: executing program 4 (id=1351): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000042280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 0s ago: executing program 4 (id=1352): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db835800000000000000000000106001500070000001800160008000100010000000c000b00080001000b0000000800040001000000", 0x58) kernel console output (not intermixed with test programs): tl interface mismatch: kernel(4.50.0), user(35076.1013483008.2248146944), cmd(17) [ 92.887510][ T8026] __nla_validate_parse: 14 callbacks suppressed [ 92.887524][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 92.893548][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 92.925192][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 92.927989][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 92.957851][ T8034] trusted_key: encrypted_key: hex blob is missing [ 93.133550][ T8047] sctp: [Deprecated]: syz.2.747 (pid 8047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.133550][ T8047] Use struct sctp_sack_info instead [ 93.361552][ T8053] netlink: 620 bytes leftover after parsing attributes in process `syz.2.749'. [ 93.419991][ T8055] bridge1: entered allmulticast mode [ 93.527190][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 93.530500][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 93.698648][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'. [ 93.805566][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 93.808492][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 93.980770][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 93.981593][ T42] audit: type=1400 audit(1786105885.467:536): avc: denied { lock } for pid=8081 comm="syz.1.760" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.180104][ T8138] tipc: Started in network mode [ 95.182998][ T8138] tipc: Node identity , cluster identity 4711 [ 95.185394][ T8138] tipc: Failed to obtain node identity [ 95.187659][ T8138] tipc: Enabling of bearer rejected, failed to enable media [ 95.986038][ T8173] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 95.990638][ T42] audit: type=1804 audit(1786105887.477:537): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.793" name="/newroot/190/file0" dev="tmpfs" ino=1070 res=1 errno=0 [ 96.007986][ T8173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.214467][ T8205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36142 sclass=netlink_route_socket pid=8205 comm=syz.1.804 [ 96.286724][ T8216] gretap0: entered promiscuous mode [ 96.289173][ T8216] gretap0: left promiscuous mode [ 96.413643][ T8219] ata1.00: invalid cdb length 6 [ 96.568172][ T8245] FAULT_INJECTION: forcing a failure. [ 96.568172][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 96.576587][ T8245] CPU: 2 UID: 0 PID: 8245 Comm: syz.0.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.576606][ T8245] Tainted: [L]=SOFTLOCKUP [ 96.576610][ T8245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.576618][ T8245] Call Trace: [ 96.576622][ T8245] [ 96.576627][ T8245] dump_stack_lvl+0x100/0x190 [ 96.576706][ T8245] should_fail_ex.cold+0x5/0xa [ 96.576734][ T8245] should_failslab+0xc2/0x120 [ 96.576766][ T8245] __kvmalloc_node_noprof+0x116/0x970 [ 96.576782][ T8245] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 96.576823][ T8245] __nf_hook_entries_try_shrink+0x164/0x400 [ 96.576837][ T8245] __nf_unregister_net_hook+0x1d2/0x6a0 [ 96.576851][ T8245] nf_unregister_net_hooks+0x11b/0x170 [ 96.576863][ T8245] ? __pfx_nft_ct_timeout_obj_destroy+0x10/0x10 [ 96.576881][ T8245] nf_ct_netns_do_put+0x22e/0x2f0 [ 96.576895][ T8245] nf_ct_netns_put+0x39/0x90 [ 96.576907][ T8245] nft_ct_timeout_obj_destroy+0xc1/0x1d0 [ 96.576918][ T8245] ? nft_obj_del+0x100/0x1260 [ 96.576933][ T8245] nft_obj_destroy+0x75/0x190 [ 96.576949][ T8245] __nft_release_table+0xddd/0x1330 [ 96.576961][ T8245] ? synchronize_rcu_expedited+0x3c3/0x450 [ 96.576988][ T8245] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 96.577003][ T8245] ? __pfx___nft_release_table+0x10/0x10 [ 96.577016][ T8245] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 96.577033][ T8245] nft_rcv_nl_event+0x4de/0x6c0 [ 96.577048][ T8245] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 96.577062][ T8245] ? nfulnl_rcv_nl_event+0x64/0x270 [ 96.577077][ T8245] notifier_call_chain+0x99/0x3f0 [ 96.577096][ T8245] blocking_notifier_call_chain+0x69/0xa0 [ 96.577109][ T8245] netlink_release+0x167a/0x1ff0 [ 96.577123][ T8245] ? netlink_release+0x1e0/0x1ff0 [ 96.577135][ T8245] ? __pfx_netlink_release+0x10/0x10 [ 96.577147][ T8245] ? __pfx_locks_remove_file+0x10/0x10 [ 96.577174][ T8245] __sock_release+0xb3/0x260 [ 96.577200][ T8245] ? __pfx_sock_close+0x10/0x10 [ 96.577214][ T8245] sock_close+0x1c/0x30 [ 96.577227][ T8245] __fput+0x3ff/0xb50 [ 96.577251][ T8245] fput_close_sync+0x118/0x250 [ 96.577266][ T8245] ? __pfx_fput_close_sync+0x10/0x10 [ 96.577284][ T8245] __x64_sys_close+0x8b/0x120 [ 96.577304][ T8245] do_syscall_64+0x115/0x870 [ 96.577348][ T8245] ? clear_bhb_loop+0x70/0xc0 [ 96.577363][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.577374][ T8245] RIP: 0033:0x7f3f5299e0d9 [ 96.577385][ T8245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.577396][ T8245] RSP: 002b:00007f3f538e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 96.577407][ T8245] RAX: ffffffffffffffda RBX: 00007f3f52c25fa0 RCX: 00007f3f5299e0d9 [ 96.577414][ T8245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 96.577420][ T8245] RBP: 00007f3f538e0090 R08: 0000000000000000 R09: 0000000000000000 [ 96.577430][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.577437][ T8245] R13: 00007f3f52c26038 R14: 00007f3f52c25fa0 R15: 00007ffd1c2bc468 [ 96.577450][ T8245] [ 96.837358][ T42] audit: type=1400 audit(1786105888.327:538): avc: denied { read write } for pid=8255 comm="syz.1.820" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.846615][ T42] audit: type=1400 audit(1786105888.327:539): avc: denied { open } for pid=8255 comm="syz.1.820" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.855991][ T42] audit: type=1400 audit(1786105888.327:540): avc: denied { ioctl } for pid=8255 comm="syz.1.820" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.867806][ T42] audit: type=1400 audit(1786105888.327:541): avc: denied { name_bind } for pid=8255 comm="syz.1.820" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 96.876055][ T42] audit: type=1400 audit(1786105888.337:542): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 97.547365][ T42] audit: type=1400 audit(1786105889.037:543): avc: denied { bind } for pid=8287 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.555628][ T42] audit: type=1400 audit(1786105889.037:544): avc: denied { listen } for pid=8287 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.563815][ T42] audit: type=1400 audit(1786105889.037:545): avc: denied { connect } for pid=8287 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.624972][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.628725][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.865943][ T5832] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 98.004019][ T5832] usb 9-1: device descriptor read/64, error -71 [ 98.242320][ T5832] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 98.372362][ T5832] usb 9-1: device descriptor read/64, error -71 [ 98.482462][ T5832] usb usb9-port1: attempt power cycle [ 98.824390][ T5832] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 98.842823][ T5832] usb 9-1: device descriptor read/8, error -71 [ 99.082238][ T5832] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 99.102825][ T5832] usb 9-1: device descriptor read/8, error -71 [ 99.212566][ T5832] usb usb9-port1: unable to enumerate USB device [ 99.946158][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 99.946171][ T42] audit: type=1400 audit(1786105891.437:547): avc: denied { create } for pid=8358 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.954446][ T42] audit: type=1400 audit(1786105891.437:548): avc: denied { listen } for pid=8358 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.960544][ T42] audit: type=1400 audit(1786105891.437:549): avc: denied { accept } for pid=8358 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.016858][ T8362] FAULT_INJECTION: forcing a failure. [ 100.016858][ T8362] name failslab, interval 1, probability 0, space 0, times 0 [ 100.022526][ T8362] CPU: 0 UID: 0 PID: 8362 Comm: syz.1.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.022544][ T8362] Tainted: [L]=SOFTLOCKUP [ 100.022548][ T8362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.022555][ T8362] Call Trace: [ 100.022560][ T8362] [ 100.022564][ T8362] dump_stack_lvl+0x100/0x190 [ 100.022585][ T8362] should_fail_ex.cold+0x5/0xa [ 100.022600][ T8362] should_failslab+0xc2/0x120 [ 100.022617][ T8362] __kvmalloc_node_noprof+0x116/0x970 [ 100.022632][ T8362] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 100.022648][ T8362] __nf_hook_entries_try_shrink+0x164/0x400 [ 100.022662][ T8362] __nf_unregister_net_hook+0x1d2/0x6a0 [ 100.022676][ T8362] nf_unregister_net_hooks+0x11b/0x170 [ 100.022688][ T8362] ? __pfx_nft_ct_timeout_obj_destroy+0x10/0x10 [ 100.022702][ T8362] nf_defrag_ipv4_disable+0x9a/0xb0 [ 100.022728][ T8362] nf_ct_netns_do_put+0x236/0x2f0 [ 100.022742][ T8362] nf_ct_netns_put+0x39/0x90 [ 100.022753][ T8362] nft_ct_timeout_obj_destroy+0xc1/0x1d0 [ 100.022765][ T8362] ? nft_obj_del+0x100/0x1260 [ 100.022778][ T8362] nft_obj_destroy+0x75/0x190 [ 100.022794][ T8362] __nft_release_table+0xddd/0x1330 [ 100.022807][ T8362] ? synchronize_rcu_expedited+0x3c3/0x450 [ 100.022822][ T8362] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 100.022837][ T8362] ? __pfx___nft_release_table+0x10/0x10 [ 100.022850][ T8362] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 100.022867][ T8362] nft_rcv_nl_event+0x4de/0x6c0 [ 100.022882][ T8362] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 100.022896][ T8362] ? nfulnl_rcv_nl_event+0x64/0x270 [ 100.022910][ T8362] notifier_call_chain+0x99/0x3f0 [ 100.022925][ T8362] blocking_notifier_call_chain+0x69/0xa0 [ 100.022937][ T8362] netlink_release+0x167a/0x1ff0 [ 100.022952][ T8362] ? netlink_release+0x1e0/0x1ff0 [ 100.022963][ T8362] ? __pfx_netlink_release+0x10/0x10 [ 100.022976][ T8362] ? __pfx_locks_remove_file+0x10/0x10 [ 100.022994][ T8362] __sock_release+0xb3/0x260 [ 100.023009][ T8362] ? __pfx_sock_close+0x10/0x10 [ 100.023023][ T8362] sock_close+0x1c/0x30 [ 100.023036][ T8362] __fput+0x3ff/0xb50 [ 100.023054][ T8362] fput_close_sync+0x118/0x250 [ 100.023069][ T8362] ? __pfx_fput_close_sync+0x10/0x10 [ 100.023087][ T8362] __x64_sys_close+0x8b/0x120 [ 100.023101][ T8362] do_syscall_64+0x115/0x870 [ 100.023117][ T8362] ? clear_bhb_loop+0x70/0xc0 [ 100.023130][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.023141][ T8362] RIP: 0033:0x7f095f79e0d9 [ 100.023152][ T8362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.023162][ T8362] RSP: 002b:00007f09605cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 100.023174][ T8362] RAX: ffffffffffffffda RBX: 00007f095fa25fa0 RCX: 00007f095f79e0d9 [ 100.023181][ T8362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 100.023187][ T8362] RBP: 00007f09605cf090 R08: 0000000000000000 R09: 0000000000000000 [ 100.023192][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.023198][ T8362] R13: 00007f095fa26038 R14: 00007f095fa25fa0 R15: 00007fff406ac318 [ 100.023212][ T8362] [ 100.135490][ T8364] __nla_validate_parse: 9 callbacks suppressed [ 100.135503][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 100.140342][ T8364] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 100.170168][ T42] audit: type=1400 audit(1786105891.657:550): avc: denied { write } for pid=8365 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 100.176531][ T42] audit: type=1400 audit(1786105891.657:551): avc: denied { read } for pid=8365 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 100.258639][ T6649] Bluetooth: (null): Invalid header checksum [ 100.307433][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.862'. [ 100.374457][ T6746] Bluetooth: (null): Invalid header checksum [ 100.394952][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 100.397930][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 100.458017][ T42] audit: type=1804 audit(1786105891.947:552): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.867" name="/newroot/261/file0" dev="tmpfs" ino=1412 res=1 errno=0 [ 100.485364][ T6746] Bluetooth: (null): Invalid header checksum [ 100.578242][ T8396] gfs2: Unknown parameter 'baªr€er $¢' [ 100.593539][ T6649] Bluetooth: (null): Invalid header checksum [ 100.649415][ T8398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.703687][ T1268] Bluetooth: (null): Invalid header checksum [ 100.812899][ T6621] Bluetooth: (null): Invalid header checksum [ 100.858185][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 100.861153][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 100.934372][ T1268] Bluetooth: (null): Invalid header checksum [ 101.062519][ T8413] syzkaller0: entered promiscuous mode [ 101.064417][ T8413] syzkaller0: entered allmulticast mode [ 101.225194][ T42] audit: type=1400 audit(1786105892.717:553): avc: denied { view } for pid=8419 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.227786][ T8420] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 101.233148][ T8420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.236153][ T8420] vhci_hcd vhci_hcd.0: Device attached [ 101.241025][ T42] audit: type=1400 audit(1786105892.727:554): avc: denied { create } for pid=8419 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.248203][ T42] audit: type=1400 audit(1786105892.727:555): avc: denied { bind } for pid=8419 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.249264][ T8421] vhci_hcd: connection closed [ 101.256043][ T6092] vhci_hcd vhci_hcd.0: stop threads [ 101.259300][ T6092] vhci_hcd vhci_hcd.0: release socket [ 101.261009][ T6092] vhci_hcd vhci_hcd.0: disconnect device [ 101.386821][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 101.389734][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 101.954920][ T8448] netlink: 168 bytes leftover after parsing attributes in process `syz.4.891'. [ 102.103205][ T5968] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.144680][ T42] audit: type=1400 audit(1786105893.637:556): avc: denied { read } for pid=8455 comm="syz.4.894" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 102.232287][ T5968] usb 5-1: device descriptor read/64, error -71 [ 102.449753][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 102.474074][ T5968] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.489121][ T8461] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 102.602489][ T5968] usb 5-1: device descriptor read/64, error -71 [ 102.712618][ T5968] usb usb5-port1: attempt power cycle [ 103.052326][ T5968] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.073260][ T5968] usb 5-1: device descriptor read/8, error -71 [ 103.310025][ T5739] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 103.322483][ T5968] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.348376][ T5968] usb 5-1: device descriptor read/8, error -71 [ 103.452762][ T5968] usb usb5-port1: unable to enumerate USB device [ 103.501492][ T8497] SET target dimension over the limit! [ 103.766137][ T8506] gretap0: entered promiscuous mode [ 103.768812][ T8506] gretap0: left promiscuous mode [ 104.173289][ T8520] FAULT_INJECTION: forcing a failure. [ 104.173289][ T8520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.177464][ T8520] CPU: 2 UID: 0 PID: 8520 Comm: syz.1.919 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.177484][ T8520] Tainted: [L]=SOFTLOCKUP [ 104.177488][ T8520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.177501][ T8520] Call Trace: [ 104.177506][ T8520] [ 104.177511][ T8520] dump_stack_lvl+0x100/0x190 [ 104.177587][ T8520] should_fail_ex.cold+0x5/0xa [ 104.177613][ T8520] _copy_to_iter+0x5a4/0x1720 [ 104.177653][ T8520] ? __pfx__copy_to_iter+0x10/0x10 [ 104.177668][ T8520] ? _kstrtoull+0x13c/0x1f0 [ 104.177678][ T8520] ? __pfx__kstrtoull+0x10/0x10 [ 104.177691][ T8520] seq_read_iter+0x691/0x1270 [ 104.177720][ T8520] ? __lock_acquire+0x49f/0x1a40 [ 104.177750][ T8520] seq_read+0x344/0x4d0 [ 104.177760][ T8520] ? __pfx_seq_read+0x10/0x10 [ 104.177773][ T8520] ? lock_acquire+0x1b9/0x370 [ 104.177788][ T8520] ? selinux_file_permission+0x8f/0x6d0 [ 104.177813][ T8520] ? __pfx_seq_read+0x10/0x10 [ 104.177823][ T8520] proc_reg_read+0x240/0x330 [ 104.177847][ T8520] ? __pfx_proc_reg_read+0x10/0x10 [ 104.177860][ T8520] vfs_read+0x1e4/0xb40 [ 104.177884][ T8520] ? __pfx_vfs_read+0x10/0x10 [ 104.177900][ T8520] ? __fget_files+0x215/0x3d0 [ 104.177915][ T8520] ? __fget_files+0x21f/0x3d0 [ 104.177930][ T8520] ksys_read+0x12a/0x250 [ 104.177939][ T8520] ? __pfx_ksys_read+0x10/0x10 [ 104.177959][ T8520] do_syscall_64+0x115/0x870 [ 104.178003][ T8520] ? clear_bhb_loop+0x70/0xc0 [ 104.178018][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.178029][ T8520] RIP: 0033:0x7f095f79e0d9 [ 104.178041][ T8520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.178051][ T8520] RSP: 002b:00007f09605cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.178063][ T8520] RAX: ffffffffffffffda RBX: 00007f095fa25fa0 RCX: 00007f095f79e0d9 [ 104.178070][ T8520] RDX: 0000000000000100 RSI: 0000200000004000 RDI: 0000000000000003 [ 104.178076][ T8520] RBP: 00007f09605cf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.178082][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.178088][ T8520] R13: 00007f095fa26038 R14: 00007f095fa25fa0 R15: 00007fff406ac318 [ 104.178102][ T8520] [ 104.238805][ T8522] /dev/sg0: Can't lookup blockdev [ 104.500157][ T8527] mmap: syz.4.923 (8527) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.537843][ T8532] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 104.690561][ T8544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.854718][ T8551] capability: warning: `syz.0.930' uses deprecated v2 capabilities in a way that may be insecure [ 104.932666][ T5832] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 105.022095][ T8564] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8564 comm=syz.1.936 [ 105.045591][ T8564] batman_adv: batadv0: Adding interface: macvtap1 [ 105.047717][ T8564] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.055688][ T8564] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 105.091527][ T8568] FAULT_INJECTION: forcing a failure. [ 105.091527][ T8568] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 105.097445][ T8568] CPU: 2 UID: 0 PID: 8568 Comm: syz.0.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.097475][ T8568] Tainted: [L]=SOFTLOCKUP [ 105.097482][ T8568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.097493][ T8568] Call Trace: [ 105.097499][ T8568] [ 105.097507][ T8568] dump_stack_lvl+0x100/0x190 [ 105.097537][ T8568] should_fail_ex.cold+0x5/0xa [ 105.097558][ T8568] ? prepare_alloc_pages+0x16d/0x5f0 [ 105.097600][ T8568] should_fail_alloc_page+0xeb/0x140 [ 105.097636][ T8568] prepare_alloc_pages+0x1f0/0x5f0 [ 105.097667][ T8568] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 105.097696][ T8568] ? __lock_acquire+0x49f/0x1a40 [ 105.097730][ T8568] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.097755][ T8568] ? find_held_lock+0x2b/0x80 [ 105.097772][ T8568] ? is_bpf_text_address+0x8a/0x1a0 [ 105.097807][ T8568] ? is_bpf_text_address+0x8a/0x1a0 [ 105.097832][ T8568] ? bpf_ksym_find+0x128/0x1c0 [ 105.097860][ T8568] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.097892][ T8568] ? is_bpf_text_address+0x94/0x1a0 [ 105.097923][ T8568] ? __kernel_text_address+0xd/0x30 [ 105.097953][ T8568] ? unwind_get_return_address+0x59/0xa0 [ 105.097986][ T8568] ? __lock_acquire+0x49f/0x1a40 [ 105.098006][ T8568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.098038][ T8568] ? policy_nodemask+0xed/0x4f0 [ 105.098067][ T8568] alloc_pages_mpol+0x1fb/0x540 [ 105.098094][ T8568] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 105.098127][ T8568] folio_alloc_mpol_noprof+0x36/0x260 [ 105.098157][ T8568] vma_alloc_folio_noprof+0xed/0x1d0 [ 105.098185][ T8568] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 105.098223][ T8568] do_anonymous_page+0xb2b/0x2080 [ 105.098255][ T8568] ? rcu_read_unlock+0x2d/0xb0 [ 105.098280][ T8568] __handle_mm_fault+0x1d2c/0x2a00 [ 105.098314][ T8568] ? mt_find+0x45e/0x8e0 [ 105.098345][ T8568] ? __pfx___handle_mm_fault+0x10/0x10 [ 105.098371][ T8568] ? __pfx_mt_find+0x10/0x10 [ 105.098411][ T8568] ? find_vma+0xbf/0x140 [ 105.098453][ T8568] ? __pfx_find_vma+0x10/0x10 [ 105.098481][ T8568] handle_mm_fault+0x37b/0xa30 [ 105.098514][ T8568] do_user_addr_fault+0x74c/0x12f0 [ 105.098559][ T8568] exc_page_fault+0x6f/0xd0 [ 105.098595][ T8568] asm_exc_page_fault+0x26/0x30 [ 105.098614][ T8568] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 105.098640][ T8568] Code: 00 e8 24 f2 ee fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 5c 83 5f fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 105.098658][ T8568] RSP: 0018:ffffc9000d2d79c0 EFLAGS: 00050246 [ 105.098676][ T8568] RAX: 0000000000000001 RBX: 0000000000000013 RCX: 0000000000000013 [ 105.098688][ T8568] RDX: 0000000000000001 RSI: ffff88803646c100 RDI: 0000200000004000 [ 105.098700][ T8568] RBP: ffffc9000d2d7bc8 R08: 0000000000000000 R09: ffffed1006c8d822 [ 105.098711][ T8568] R10: ffff88803646c112 R11: 0000000000000000 R12: ffff88803646c100 [ 105.098723][ T8568] R13: 0000000000000000 R14: 0000200000004000 R15: 0000000000000013 [ 105.098754][ T8568] ? __pfx__copy_to_iter+0x10/0x10 [ 105.098781][ T8568] ? _kstrtoull+0x13c/0x1f0 [ 105.098799][ T8568] ? __pfx__kstrtoull+0x10/0x10 [ 105.098823][ T8568] seq_read_iter+0x691/0x1270 [ 105.098846][ T8568] ? __lock_acquire+0x49f/0x1a40 [ 105.098877][ T8568] seq_read+0x344/0x4d0 [ 105.098896][ T8568] ? __pfx_seq_read+0x10/0x10 [ 105.098924][ T8568] ? lock_acquire+0x1b9/0x370 [ 105.098951][ T8568] ? selinux_file_permission+0x8f/0x6d0 [ 105.098985][ T8568] ? __pfx_seq_read+0x10/0x10 [ 105.099004][ T8568] proc_reg_read+0x240/0x330 [ 105.099027][ T8568] ? __pfx_proc_reg_read+0x10/0x10 [ 105.099051][ T8568] vfs_read+0x1e4/0xb40 [ 105.099084][ T8568] ? __pfx_vfs_read+0x10/0x10 [ 105.099111][ T8568] ? __fget_files+0x215/0x3d0 [ 105.099137][ T8568] ? __fget_files+0x21f/0x3d0 [ 105.099166][ T8568] ksys_read+0x12a/0x250 [ 105.099183][ T8568] ? __pfx_ksys_read+0x10/0x10 [ 105.099219][ T8568] do_syscall_64+0x115/0x870 [ 105.099242][ T8568] ? clear_bhb_loop+0x70/0xc0 [ 105.099265][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.099284][ T8568] RIP: 0033:0x7f3f5299e0d9 [ 105.099300][ T8568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.099317][ T8568] RSP: 002b:00007f3f538e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.099333][ T8568] RAX: ffffffffffffffda RBX: 00007f3f52c25fa0 RCX: 00007f3f5299e0d9 [ 105.099345][ T8568] RDX: 0000000000000100 RSI: 0000200000004000 RDI: 0000000000000003 [ 105.099356][ T8568] RBP: 00007f3f538e0090 R08: 0000000000000000 R09: 0000000000000000 [ 105.099367][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.099377][ T8568] R13: 00007f3f52c26038 R14: 00007f3f52c25fa0 R15: 00007ffd1c2bc468 [ 105.099402][ T8568] [ 105.263932][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 105.267808][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.273632][ T5832] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.277606][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.281008][ T5832] usb 9-1: Product: syz [ 105.282894][ T5832] usb 9-1: Manufacturer: syz [ 105.284941][ T5832] usb 9-1: SerialNumber: syz [ 105.289549][ T5832] usb 9-1: config 0 descriptor?? [ 105.295966][ T5832] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.299914][ T5832] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 105.326231][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 105.326253][ T42] audit: type=1400 audit(1786105896.817:564): avc: denied { getopt } for pid=8572 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.326282][ T5968] IPVS: starting estimator thread 0... [ 105.432379][ T8574] IPVS: using max 45 ests per chain, 108000 per kthread [ 105.481555][ T5739] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 105.526000][ T8591] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.543142][ T8591] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.562683][ T5832] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 105.570830][ T8594] __nla_validate_parse: 10 callbacks suppressed [ 105.570848][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 105.599692][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.949'. [ 105.603559][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.949'. [ 105.611864][ T8596] gretap0: entered promiscuous mode [ 105.619131][ T8596] gretap0: left promiscuous mode [ 105.628976][ T5832] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.633405][ T5832] em28xx 9-1:0.0: board has no eeprom [ 105.634450][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 105.638981][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 105.675273][ T42] audit: type=1804 audit(1786105897.167:565): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.951" name="/newroot/294/file0" dev="tmpfs" ino=1586 res=1 errno=0 [ 105.693526][ T5832] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.697769][ T5832] em28xx 9-1:0.0: dvb set to bulk mode. [ 105.701977][ T1352] em28xx 9-1:0.0: Binding DVB extension [ 105.709114][ T5832] usb 9-1: USB disconnect, device number 13 [ 105.715770][ T5832] em28xx 9-1:0.0: Disconnecting em28xx [ 105.740374][ T1352] em28xx 9-1:0.0: Registering input extension [ 105.743010][ T5832] em28xx 9-1:0.0: Closing input extension [ 105.761774][ T5832] em28xx 9-1:0.0: Freeing device [ 105.903646][ T8612] FAULT_INJECTION: forcing a failure. [ 105.903646][ T8612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.910880][ T8612] CPU: 3 UID: 0 PID: 8612 Comm: syz.1.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.910900][ T8612] Tainted: [L]=SOFTLOCKUP [ 105.910904][ T8612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.910911][ T8612] Call Trace: [ 105.910916][ T8612] [ 105.910922][ T8612] dump_stack_lvl+0x100/0x190 [ 105.910942][ T8612] should_fail_ex.cold+0x5/0xa [ 105.910958][ T8612] _copy_to_user+0x32/0xd0 [ 105.910981][ T8612] simple_read_from_buffer+0xcb/0x170 [ 105.911002][ T8612] proc_fail_nth_read+0x1af/0x230 [ 105.911038][ T8612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.911064][ T8612] ? rw_verify_area+0xce/0x6d0 [ 105.911085][ T8612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.911107][ T8612] vfs_read+0x1e4/0xb40 [ 105.911133][ T8612] ? __pfx_vfs_read+0x10/0x10 [ 105.911156][ T8612] ? __fget_files+0x215/0x3d0 [ 105.911176][ T8612] ? __fget_files+0x21f/0x3d0 [ 105.911201][ T8612] ksys_read+0x12a/0x250 [ 105.911217][ T8612] ? __pfx_ksys_read+0x10/0x10 [ 105.911252][ T8612] do_syscall_64+0x115/0x870 [ 105.911277][ T8612] ? clear_bhb_loop+0x70/0xc0 [ 105.911301][ T8612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.911322][ T8612] RIP: 0033:0x7f095f75e90e [ 105.911338][ T8612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.911354][ T8612] RSP: 002b:00007f09605cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.911375][ T8612] RAX: ffffffffffffffda RBX: 00007f09605cf6c0 RCX: 00007f095f75e90e [ 105.911387][ T8612] RDX: 000000000000000f RSI: 00007f09605cf0a0 RDI: 0000000000000004 [ 105.911399][ T8612] RBP: 00007f09605cf090 R08: 0000000000000000 R09: 0000000000000000 [ 105.911411][ T8612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.911421][ T8612] R13: 00007f095fa26038 R14: 00007f095fa25fa0 R15: 00007fff406ac318 [ 105.911443][ T8612] [ 106.122395][ T849] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 106.276294][ T849] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.284550][ T849] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.301414][ T849] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 106.306111][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.963'. [ 106.307204][ T849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.309940][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 106.313118][ T849] usb 7-1: Product: syz [ 106.315830][ T8630] netlink: 56 bytes leftover after parsing attributes in process `syz.0.964'. [ 106.324133][ T849] usb 7-1: Manufacturer: syz [ 106.326627][ T849] usb 7-1: SerialNumber: syz [ 106.455382][ T8641] netlink: 72 bytes leftover after parsing attributes in process `syz.4.968'. [ 106.638256][ T42] audit: type=1804 audit(1786105898.127:566): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.972" name="/newroot/231/file0" dev="tmpfs" ino=1296 res=1 errno=0 [ 106.725344][ T42] audit: type=1400 audit(1786105898.217:567): avc: denied { create } for pid=8658 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 106.727523][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.976'. [ 106.732906][ T42] audit: type=1400 audit(1786105898.217:568): avc: denied { write } for pid=8658 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 106.969101][ T42] audit: type=1400 audit(1786105898.457:569): avc: denied { accept } for pid=8673 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.022132][ T42] audit: type=1400 audit(1786105898.507:570): avc: denied { write } for pid=8673 comm="syz.1.982" path="socket:[26897]" dev="sockfs" ino=26897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.080642][ T42] audit: type=1400 audit(1786105898.567:571): avc: denied { getopt } for pid=8673 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.792628][ T50] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 107.836568][ T42] audit: type=1804 audit(1786105899.327:572): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.986" name="/newroot/303/file0" dev="tmpfs" ino=1635 res=1 errno=0 [ 107.923107][ T50] usb 5-1: device descriptor read/64, error -71 [ 108.172261][ T50] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 108.322269][ T50] usb 5-1: device descriptor read/64, error -71 [ 108.442702][ T50] usb usb5-port1: attempt power cycle [ 108.747550][ T8695] netlink: 'syz.1.990': attribute type 31 has an invalid length. [ 108.792272][ T50] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 108.812865][ T50] usb 5-1: device descriptor read/8, error -71 [ 108.954954][ T10] usb 7-1: USB disconnect, device number 5 [ 109.007352][ T8697] gretap0: entered promiscuous mode [ 109.009853][ T8697] gretap0: left promiscuous mode [ 109.062624][ T50] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 109.079508][ T8708] tipc: Started in network mode [ 109.081116][ T8708] tipc: Node identity ac141441, cluster identity 4711 [ 109.084428][ T8708] tipc: Enabled bearer , priority 10 [ 109.088851][ T8708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=8708 comm=syz.4.995 [ 109.094111][ T50] usb 5-1: device descriptor read/8, error -71 [ 109.117451][ T8711] binder: 8710:8711 ioctl d000943e 200000001c80 returned -22 [ 109.153211][ T42] audit: type=1400 audit(1786105900.647:573): avc: denied { bind } for pid=8710 comm="syz.1.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.202520][ T50] usb usb5-port1: unable to enumerate USB device [ 109.367976][ T8726] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 109.371459][ T8726] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 109.378179][ T8726] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 109.578836][ T849] bridge0: entered promiscuous mode [ 109.861216][ T8756] gretap0: entered promiscuous mode [ 109.865160][ T8756] gretap0: left promiscuous mode [ 110.089351][ T8766] netlink: 'syz.2.1015': attribute type 30 has an invalid length. [ 110.227066][ T9] tipc: Node number set to 2886997057 [ 110.600971][ T8783] Cannot find del_set index 14804 as target [ 110.607534][ T8783] __nla_validate_parse: 8 callbacks suppressed [ 110.607546][ T8783] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1020'. [ 110.775118][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'. [ 110.778961][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'. [ 110.785101][ T8793] gretap0: entered promiscuous mode [ 110.787583][ T8793] gretap0: left promiscuous mode [ 110.800098][ T8795] 8021q: VLANs not supported on vcan0 [ 111.049544][ T8809] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1032'. [ 111.123972][ T8815] loop5: detected capacity change from 0 to 7 [ 111.132863][ T8815] Dev loop5: unable to read RDB block 7 [ 111.135009][ T8815] loop5: unable to read partition table [ 111.137194][ T8815] loop5: partition table beyond EOD, truncated [ 111.139177][ T8815] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.228973][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 111.228991][ T42] audit: type=1326 audit(1786105902.717:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.1037" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdca119e0d9 code=0x0 [ 111.370861][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1038'. [ 111.374850][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1038'. [ 111.382795][ T8826] gretap0: entered promiscuous mode [ 111.386131][ T8826] gretap0: left promiscuous mode [ 111.470324][ T42] audit: type=1400 audit(1786105902.957:583): avc: denied { read write } for pid=8827 comm="syz.1.1039" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.479920][ T42] audit: type=1400 audit(1786105902.957:584): avc: denied { open } for pid=8827 comm="syz.1.1039" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.695343][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 111.698557][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 111.760058][ T42] audit: type=1400 audit(1786105903.247:585): avc: denied { write } for pid=8839 comm="syz.0.1044" lport=38111 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 112.032253][ T8850] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16640 sclass=netlink_xfrm_socket pid=8850 comm=syz.2.1048 [ 112.037961][ T8850] proc: Unknown parameter 'uuid' [ 112.039698][ T42] audit: type=1400 audit(1786105903.527:586): avc: denied { remount } for pid=8849 comm="syz.2.1048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.101947][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1050'. [ 112.105386][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1050'. [ 112.111444][ T8855] gretap0: entered promiscuous mode [ 112.114637][ T8855] gretap0: left promiscuous mode [ 112.116376][ T42] audit: type=1804 audit(1786105903.607:587): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1051" name="/newroot/250/file0" dev="tmpfs" ino=1337 res=1 errno=0 [ 112.457690][ T42] audit: type=1400 audit(1786105903.947:588): avc: denied { bind } for pid=8878 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.466479][ T42] audit: type=1400 audit(1786105903.957:589): avc: denied { listen } for pid=8878 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.474909][ T42] audit: type=1400 audit(1786105903.957:590): avc: denied { write } for pid=8883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.491234][ T42] audit: type=1400 audit(1786105903.977:591): avc: denied { sqpoll } for pid=8878 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 112.596162][ T8898] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 112.603211][ T8898] capability: warning: `syz.2.1063' uses 32-bit capabilities (legacy support in use) [ 112.749668][ T8915] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 112.761296][ T8915] CIFS: Attempting to mount //127.0.0.1/share [ 112.770366][ T8915] CIFS: VFS: Error connecting to socket. Aborting operation. [ 112.772859][ T8915] CIFS: VFS: cifs_mount failed w/return code = -111 [ 112.799386][ T8921] netlink: 'syz.4.1068': attribute type 3 has an invalid length. [ 113.311407][ T8951] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 113.319120][ T8951] Invalid argument reading file caps for ./file0 [ 113.674659][ T8968] FAULT_INJECTION: forcing a failure. [ 113.674659][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 113.681937][ T8968] CPU: 1 UID: 0 PID: 8968 Comm: syz.2.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.681965][ T8968] Tainted: [L]=SOFTLOCKUP [ 113.681971][ T8968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.681988][ T8968] Call Trace: [ 113.681993][ T8968] [ 113.681998][ T8968] dump_stack_lvl+0x100/0x190 [ 113.682017][ T8968] should_fail_ex.cold+0x5/0xa [ 113.682033][ T8968] should_failslab+0xc2/0x120 [ 113.682048][ T8968] __kvmalloc_node_noprof+0x116/0x970 [ 113.682063][ T8968] ? file_tty_write.isra.0+0x64e/0x890 [ 113.682116][ T8968] file_tty_write.isra.0+0x64e/0x890 [ 113.682129][ T8968] ? security_file_permission+0x76/0x210 [ 113.682176][ T8968] ? rw_verify_area+0xce/0x6d0 [ 113.682193][ T8968] vfs_write+0x6ac/0x1050 [ 113.682210][ T8968] ? __pfx_tty_write+0x10/0x10 [ 113.682223][ T8968] ? __pfx_vfs_write+0x10/0x10 [ 113.682243][ T8968] ? find_held_lock+0x2b/0x80 [ 113.682273][ T8968] ksys_write+0x12a/0x250 [ 113.682287][ T8968] ? __pfx_ksys_write+0x10/0x10 [ 113.682308][ T8968] do_syscall_64+0x115/0x870 [ 113.682332][ T8968] ? clear_bhb_loop+0x70/0xc0 [ 113.682354][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.682371][ T8968] RIP: 0033:0x7ffaec99e0d9 [ 113.682387][ T8968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.682402][ T8968] RSP: 002b:00007ffaed8bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.682421][ T8968] RAX: ffffffffffffffda RBX: 00007ffaecc25fa0 RCX: 00007ffaec99e0d9 [ 113.682433][ T8968] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 113.682445][ T8968] RBP: 00007ffaed8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 113.682457][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.682466][ T8968] R13: 00007ffaecc26038 R14: 00007ffaecc25fa0 R15: 00007ffc54371128 [ 113.682489][ T8968] [ 113.742669][ T1352] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 113.820321][ T8974] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 113.821921][ T8976] program syz.2.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.835600][ T8974] cramfs: wrong magic [ 113.923941][ T1352] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.927383][ T1352] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8228, setting to 64 [ 113.931036][ T1352] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 113.935540][ T1352] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 113.938522][ T1352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.945777][ T1352] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 113.949619][ T1352] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 113.952299][ T1352] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 113.959333][ T1352] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 113.967112][ T1352] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 113.970600][ T1352] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 113.974931][ T1352] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 114.153628][ T9] usb 5-1: USB disconnect, device number 14 [ 114.164959][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 114.170241][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 114.173723][ T9] keyspan 5-1:1.0: device disconnected [ 114.656905][ T8997] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 114.767594][ T9005] 9pnet_fd: Insufficient options for proto=fd [ 114.900720][ T9015] FAULT_INJECTION: forcing a failure. [ 114.900720][ T9015] name failslab, interval 1, probability 0, space 0, times 0 [ 114.900802][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.0.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.900818][ T9015] Tainted: [L]=SOFTLOCKUP [ 114.900823][ T9015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.900829][ T9015] Call Trace: [ 114.900834][ T9015] [ 114.900838][ T9015] dump_stack_lvl+0x100/0x190 [ 114.900860][ T9015] should_fail_ex.cold+0x5/0xa [ 114.900873][ T9015] ? find_held_lock+0x2b/0x80 [ 114.900886][ T9015] should_failslab+0xc2/0x120 [ 114.900902][ T9015] __kmalloc_noprof+0xfc/0x820 [ 114.900916][ T9015] ? bit_cursor+0x89f/0x1490 [ 114.900943][ T9015] bit_cursor+0x89f/0x1490 [ 114.900956][ T9015] ? __pfx_bit_cursor+0x10/0x10 [ 114.900966][ T9015] ? enable_work+0x295/0x320 [ 114.900985][ T9015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.901000][ T9015] ? get_color+0x1da/0x450 [ 114.901020][ T9015] ? __pfx_bit_cursor+0x10/0x10 [ 114.901029][ T9015] fbcon_cursor+0x43c/0x5e0 [ 114.901044][ T9015] ? mark_lock+0x980/0xa20 [ 114.901058][ T9015] hide_cursor+0x87/0x230 [ 114.901072][ T9015] do_con_write+0x224c/0x4a30 [ 114.901089][ T9015] ? rcu_is_watching+0x12/0xc0 [ 114.901117][ T9015] ? __mutex_lock+0x26d/0x1bd0 [ 114.901135][ T9015] ? n_tty_write+0x4c0/0x1160 [ 114.901151][ T9015] ? find_held_lock+0x2b/0x80 [ 114.901160][ T9015] ? n_tty_write+0x43e/0x1160 [ 114.901175][ T9015] ? n_tty_write+0x43e/0x1160 [ 114.901190][ T9015] ? __pfx_do_con_write+0x10/0x10 [ 114.901202][ T9015] ? __pfx___mutex_lock+0x10/0x10 [ 114.901222][ T9015] con_write+0x23/0xb0 [ 114.901235][ T9015] do_output_char+0x63b/0x850 [ 114.901251][ T9015] n_tty_write+0x4d6/0x1160 [ 114.901272][ T9015] ? __pfx_n_tty_write+0x10/0x10 [ 114.901286][ T9015] ? __kasan_kmalloc+0xaa/0xb0 [ 114.901300][ T9015] ? __pfx_woken_wake_function+0x10/0x10 [ 114.901317][ T9015] ? rcu_is_watching+0x12/0xc0 [ 114.901333][ T9015] ? file_tty_write.isra.0+0x694/0x890 [ 114.901345][ T9015] ? kfree+0x1e5/0x6c0 [ 114.901354][ T9015] ? __pfx_n_tty_write+0x10/0x10 [ 114.901370][ T9015] file_tty_write.isra.0+0x4d2/0x890 [ 114.901387][ T9015] vfs_write+0x6ac/0x1050 [ 114.901405][ T9015] ? __pfx_tty_write+0x10/0x10 [ 114.901418][ T9015] ? __pfx_vfs_write+0x10/0x10 [ 114.901433][ T9015] ? find_held_lock+0x2b/0x80 [ 114.901451][ T9015] ksys_write+0x12a/0x250 [ 114.901461][ T9015] ? __pfx_ksys_write+0x10/0x10 [ 114.901474][ T9015] do_syscall_64+0x115/0x870 [ 114.901488][ T9015] ? clear_bhb_loop+0x70/0xc0 [ 114.901501][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.901512][ T9015] RIP: 0033:0x7f3f5299e0d9 [ 114.901521][ T9015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.901532][ T9015] RSP: 002b:00007f3f538e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.901543][ T9015] RAX: ffffffffffffffda RBX: 00007f3f52c25fa0 RCX: 00007f3f5299e0d9 [ 114.901549][ T9015] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 114.901555][ T9015] RBP: 00007f3f538e0090 R08: 0000000000000000 R09: 0000000000000000 [ 114.901561][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.901567][ T9015] R13: 00007f3f52c26038 R14: 00007f3f52c25fa0 R15: 00007ffd1c2bc468 [ 114.901581][ T9015] [ 115.031190][ T9026] xt_TCPMSS: Only works on TCP SYN packets [ 115.272493][ T1352] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 115.432714][ T1352] usb 7-1: Using ep0 maxpacket: 16 [ 115.436653][ T1352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 115.441475][ T1352] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.444513][ T1352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.447050][ T1352] usb 7-1: Product: syz [ 115.448328][ T1352] usb 7-1: Manufacturer: syz [ 115.449887][ T1352] usb 7-1: SerialNumber: syz [ 115.452861][ T1352] usb 7-1: config 0 descriptor?? [ 115.456507][ T1352] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.459501][ T1352] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 115.679477][ T9054] __nla_validate_parse: 13 callbacks suppressed [ 115.679499][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'. [ 115.686318][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'. [ 115.698170][ T9054] gretap0: entered promiscuous mode [ 115.701608][ T9054] gretap0: left promiscuous mode [ 115.968855][ T9036] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 116.027924][ T9071] FAULT_INJECTION: forcing a failure. [ 116.027924][ T9071] name failslab, interval 1, probability 0, space 0, times 0 [ 116.028016][ T9071] CPU: 1 UID: 0 PID: 9071 Comm: syz.1.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.028042][ T9071] Tainted: [L]=SOFTLOCKUP [ 116.028049][ T9071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.028061][ T9071] Call Trace: [ 116.028067][ T9071] [ 116.028076][ T9071] dump_stack_lvl+0x100/0x190 [ 116.028107][ T9071] should_fail_ex.cold+0x5/0xa [ 116.028133][ T9071] should_failslab+0xc2/0x120 [ 116.028185][ T9071] __kmalloc_cache_noprof+0x91/0x6c0 [ 116.028209][ T9071] ? drm_atomic_commit_alloc+0xb8/0x120 [ 116.028255][ T9071] drm_atomic_commit_alloc+0xb8/0x120 [ 116.028277][ T9071] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 116.028317][ T9071] ? trace_contention_end+0x126/0x160 [ 116.028346][ T9071] ? __mutex_lock+0x26d/0x1bd0 [ 116.028376][ T9071] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 116.028402][ T9071] ? drm_master_internal_acquire+0x21/0x80 [ 116.028425][ T9071] ? __mutex_lock+0x26d/0x1bd0 [ 116.028467][ T9071] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.028500][ T9071] drm_client_modeset_commit_locked+0x14d/0x580 [ 116.028531][ T9071] drm_fb_helper_pan_display+0x32d/0xa40 [ 116.028565][ T9071] ? enable_work+0x24c/0x320 [ 116.028593][ T9071] fb_pan_display+0x195/0x820 [ 116.028620][ T9071] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 116.028646][ T9071] bit_update_start+0x48/0x1f0 [ 116.028678][ T9071] fbcon_switch+0x1119/0x19f0 [ 116.028713][ T9071] ? __pfx_fbcon_switch+0x10/0x10 [ 116.028754][ T9071] ? __pfx_bit_cursor+0x10/0x10 [ 116.028771][ T9071] ? fbcon_cursor+0x24c/0x5e0 [ 116.028807][ T9071] csi_J+0x872/0xad0 [ 116.028840][ T9071] csi_ECMA.constprop.0+0x51e/0x3b60 [ 116.028866][ T9071] ? find_held_lock+0x2b/0x80 [ 116.028884][ T9071] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 116.028917][ T9071] do_con_write+0x3660/0x4a30 [ 116.028944][ T9071] ? __mutex_lock+0x26d/0x1bd0 [ 116.028994][ T9071] ? __pfx_do_con_write+0x10/0x10 [ 116.029015][ T9071] ? mark_held_locks+0x40/0x70 [ 116.029044][ T9071] ? con_write+0x93/0xb0 [ 116.029070][ T9071] con_write+0x23/0xb0 [ 116.029094][ T9071] n_tty_write+0x431/0x1160 [ 116.029134][ T9071] ? __pfx_n_tty_write+0x10/0x10 [ 116.029155][ T9071] ? __kasan_kmalloc+0xaa/0xb0 [ 116.029180][ T9071] ? __pfx_woken_wake_function+0x10/0x10 [ 116.029208][ T9071] ? rcu_is_watching+0x12/0xc0 [ 116.029238][ T9071] ? file_tty_write.isra.0+0x694/0x890 [ 116.029259][ T9071] ? kfree+0x1e5/0x6c0 [ 116.029277][ T9071] ? __pfx_n_tty_write+0x10/0x10 [ 116.029305][ T9071] file_tty_write.isra.0+0x4d2/0x890 [ 116.029334][ T9071] vfs_write+0x6ac/0x1050 [ 116.029365][ T9071] ? __pfx_tty_write+0x10/0x10 [ 116.029389][ T9071] ? __pfx_vfs_write+0x10/0x10 [ 116.029414][ T9071] ? find_held_lock+0x2b/0x80 [ 116.029450][ T9071] ksys_write+0x12a/0x250 [ 116.029468][ T9071] ? __pfx_ksys_write+0x10/0x10 [ 116.029493][ T9071] do_syscall_64+0x115/0x870 [ 116.029517][ T9071] ? clear_bhb_loop+0x70/0xc0 [ 116.029542][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.029561][ T9071] RIP: 0033:0x7f095f79e0d9 [ 116.029579][ T9071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.029596][ T9071] RSP: 002b:00007f09605cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.029616][ T9071] RAX: ffffffffffffffda RBX: 00007f095fa25fa0 RCX: 00007f095f79e0d9 [ 116.029628][ T9071] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 116.029639][ T9071] RBP: 00007f09605cf090 R08: 0000000000000000 R09: 0000000000000000 [ 116.029648][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.029657][ T9071] R13: 00007f095fa26038 R14: 00007f095fa25fa0 R15: 00007fff406ac318 [ 116.029684][ T9071] [ 116.059680][ T1352] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 116.220913][ T9075] MINIX-fs: unable to read superblock [ 116.253018][ T61] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.405786][ T61] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 116.409165][ T9079] tipc: Enabling of bearer rejected, failed to enable media [ 116.409576][ T61] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25610, setting to 1024 [ 116.419148][ T61] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 116.424474][ T61] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25610, setting to 1024 [ 116.431161][ T61] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 116.435226][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.438778][ T61] usb 5-1: Product: syz [ 116.440587][ T61] usb 5-1: Manufacturer: syz [ 116.443637][ T61] usb 5-1: SerialNumber: syz [ 116.451650][ T9069] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.458402][ T61] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 116.465613][ T61] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 116.470594][ T61] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 116.663114][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.666900][ T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.669553][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.672590][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.674918][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.677783][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.680767][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.683710][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.686284][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.689289][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.692618][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.696101][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.699100][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.702011][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.704643][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.707642][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.710129][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.713249][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.715769][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.718424][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.721470][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.724890][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.727361][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.730296][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.733221][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.735909][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.738409][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.740748][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.743429][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.746125][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.746354][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.748929][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.751460][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.754293][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.756863][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.759553][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.762313][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.765014][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.767570][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.770075][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.772770][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.775373][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.777767][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.780216][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.782824][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.785455][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.788060][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.790822][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.793575][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.796297][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.798637][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.801061][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.803598][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.806076][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.808462][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.810786][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.813313][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.815692][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.818018][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.820353][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.823043][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.826066][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.828487][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.830798][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.833159][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.835685][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.838026][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.840351][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.842886][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.845364][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.847713][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.850072][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.850318][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.852671][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.855217][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.857521][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.859841][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.862227][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.864591][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.866875][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.869156][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.871415][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.873986][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.876208][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.878493][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.880719][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.882993][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.885321][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.887540][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.889813][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.892053][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.894415][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.896703][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.898920][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.901157][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.903620][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.906524][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.908865][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.911153][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.913431][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.915812][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.918107][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.920366][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.922586][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.924844][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.927027][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.929319][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.931618][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.934161][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.936521][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.938869][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.941193][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.943527][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.946257][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.948614][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.950915][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.953423][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.955855][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.958191][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.960499][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.963016][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.965367][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.967692][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.970024][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.972376][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.974838][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.977273][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.979624][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.981931][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.984388][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.986675][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.988983][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.991281][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.993859][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.996165][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.998341][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.000497][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.002842][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.005247][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.007561][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.009871][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.012233][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.014568][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.016909][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.019230][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.021546][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.024218][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.026519][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.028842][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.031131][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.033500][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.035864][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.038164][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.040430][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.042734][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.045183][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.047525][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.049897][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.052239][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.054798][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.059791][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.062098][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.064716][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.067022][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.069359][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.071675][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.074061][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.076385][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.078696][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.080999][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.083327][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.085749][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.088073][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.090404][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.092902][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.095231][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.097425][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.099740][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.102059][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.104463][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.106764][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.109072][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.111289][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.113684][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.116012][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.118345][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.120564][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.123057][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.125429][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.127689][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.129924][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.132143][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.134526][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.136843][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.139165][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.141358][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.143695][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.146257][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.148599][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.150920][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.153504][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.155833][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.160702][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.162432][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.167146][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.167358][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.168141][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.176317][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.176538][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.182808][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.183004][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.187905][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.188084][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.188257][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.188429][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.199937][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.200124][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.206822][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.208262][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.208453][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.208661][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.208844][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.209020][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.224429][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.226848][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.230070][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.230252][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.230440][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.230621][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.230826][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.231013][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.231198][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.231386][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.250005][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.252602][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.254992][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.257428][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.260251][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.263077][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.265614][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.268024][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.270466][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.272928][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.275590][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.278010][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.280473][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.283536][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.285951][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.288424][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.290836][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.293286][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.295949][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.298425][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.300844][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.303316][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.306057][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.308490][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.310929][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.313561][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.316297][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.318792][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.321250][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.324143][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.327629][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.330091][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.332866][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.335355][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.337753][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.340198][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.342910][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.345517][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.347915][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.350328][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.352781][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.355162][ T1352] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 117.357757][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.360091][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.362585][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.365877][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.368402][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.370738][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.373353][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.375728][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.378045][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.380431][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.382857][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.385386][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.387762][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.390127][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.392546][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.394944][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.397289][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.399647][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.401884][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.404613][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.406980][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.409212][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.411442][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.413754][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.415974][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.418167][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.420494][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.422841][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.425314][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.427589][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.429832][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.432099][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.434639][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.436837][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.439065][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.441266][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.443542][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.445959][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.448270][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.450493][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.452769][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.455053][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.457309][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.459557][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.461820][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.465251][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.467947][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.470376][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.472780][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.475433][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.477765][ T1352] em28xx 7-1:0.0: board has no eeprom [ 117.479521][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.481839][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.484237][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.486570][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.488898][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.491206][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.493860][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.496449][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.498775][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.501093][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.503470][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.505918][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.508257][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.510535][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.512977][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.515398][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.517770][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.520098][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.522679][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.525232][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.527557][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.529898][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.532261][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.534708][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.537027][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.539364][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.541683][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.545626][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.547996][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.550363][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.552934][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.555336][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.557643][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.559972][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.562302][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.564683][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.567020][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.567308][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.569683][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.572002][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.574492][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.576832][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.579143][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.581454][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.584057][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.586408][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.588915][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.591286][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.593685][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.596030][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.598364][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.600672][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.603019][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.605371][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.607640][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.609964][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.612498][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.614882][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.617204][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.619529][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.621838][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.624299][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.626812][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.629155][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.631451][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.633857][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.636273][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.638627][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.640933][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.643415][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.645942][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.648304][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.650519][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.652859][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.655264][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.657579][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.659911][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.662318][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.664691][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.666988][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.669310][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.671839][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.674453][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.676866][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.679163][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.681428][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.683776][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.686137][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.688471][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.690697][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.693056][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.695406][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.697729][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.700070][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.702647][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.705051][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.707357][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.709690][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.712010][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.714463][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.716824][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.719114][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.721400][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.723797][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.726209][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.728549][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.730862][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.733397][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.735764][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.738074][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.740393][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.742737][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.745088][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.747371][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.749637][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.751884][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.754379][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.756781][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.759118][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.761489][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.764197][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.766583][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.768903][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.771199][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.773846][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.776244][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.778544][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.780904][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.783249][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.785707][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.788008][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.790200][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.792664][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.795076][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.797412][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.799679][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.801930][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.804312][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.806638][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.808959][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.811245][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.813539][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.815907][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.818209][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.820519][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.823069][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.825549][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.827803][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.830128][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.832510][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.835190][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.837536][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.839856][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.842068][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.844400][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.846694][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.849009][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.851277][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.853827][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.856448][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.858752][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.861068][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.863438][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.865981][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.868324][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.870630][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.873177][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.873460][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.875913][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.878282][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.880601][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.883132][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.885660][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.887969][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.890277][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.892625][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.895019][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.897335][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.899679][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.901993][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.904479][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.906968][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.909321][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.911640][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.914418][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.916887][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.919245][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.921570][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.923847][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.926431][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.928701][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.931018][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.933324][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.935866][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.938181][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.940414][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.942839][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.945210][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.947537][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.949883][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.952244][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.954610][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.956931][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.959246][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.961559][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.963970][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.966298][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.968627][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.970936][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.973464][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.975893][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.978475][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.980798][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.983151][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.985536][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.987817][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.990146][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.992505][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.994834][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.997155][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 117.999490][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.001805][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.004471][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.006873][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.009238][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.011545][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.013936][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.016366][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.018714][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.021051][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.023400][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.025961][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.028349][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.030674][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.033223][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.035632][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.037977][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.040282][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.042625][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.045319][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.047817][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.050096][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.052449][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.054853][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.057190][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.059534][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.061858][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.064420][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.066748][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.069115][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.071434][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.073871][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.076280][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.078609][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.081147][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.083518][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.086019][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.088356][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.090661][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.093194][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.095581][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.097917][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.100264][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.102609][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.105030][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.107348][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.109685][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.112010][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.114390][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.116700][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.119037][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.121367][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.124008][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.126356][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.128627][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.130867][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.133162][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.135521][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.137836][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.140105][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.142444][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.145112][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.147530][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.149869][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.152491][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.154839][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.157182][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.159512][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.161759][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.164287][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.166781][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.169110][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.171413][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.173799][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.176159][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.178507][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.180812][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.183533][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.186016][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.188388][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.190695][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.194494][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.195909][ T9069] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 118.196845][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.197043][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.197417][ C2] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.211726][ C2] usb 5-1: ti_interrupt_callback - resubmit interrupt urb failed, -1 [ 118.217168][ T849] usb 5-1: USB disconnect, device number 15 [ 118.228092][ T41] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.231043][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.233230][ T849] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 118.233652][ T41] usb 6-1: Product: syz [ 118.242876][ T41] usb 6-1: Manufacturer: syz [ 118.243459][ T849] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 118.244834][ T41] usb 6-1: SerialNumber: syz [ 118.248835][ T849] ti_usb_3410_5052 5-1:2.0: device disconnected [ 118.273231][ T1352] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 118.282670][ T1352] em28xx 7-1:0.0: dvb set to bulk mode. [ 118.284492][ T5832] em28xx 7-1:0.0: Binding DVB extension [ 118.292812][ T1352] usb 7-1: USB disconnect, device number 6 [ 118.296000][ T1352] em28xx 7-1:0.0: Disconnecting em28xx [ 118.310255][ T5832] em28xx 7-1:0.0: Registering input extension [ 118.312845][ T1352] em28xx 7-1:0.0: Closing input extension [ 118.323307][ T1352] em28xx 7-1:0.0: Freeing device [ 118.790971][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 118.790989][ T42] audit: type=1400 audit(1786105910.277:611): avc: denied { write } for pid=9094 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 118.859698][ T42] audit: type=1400 audit(1786105910.347:612): avc: denied { firmware_load } for pid=5897 comm="kworker/2:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 118.881371][ T5897] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 118.989644][ T9109] bond2: entered promiscuous mode [ 118.995612][ T9109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.045358][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 119.048476][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 119.097126][ T42] audit: type=1400 audit(1786105910.587:613): avc: denied { getopt } for pid=9118 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.104369][ T42] audit: type=1400 audit(1786105910.587:614): avc: denied { ioctl } for pid=9118 comm="syz.2.1137" path="socket:[26461]" dev="sockfs" ino=26461 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.104404][ T42] audit: type=1400 audit(1786105910.587:615): avc: denied { read } for pid=9118 comm="syz.2.1137" path="socket:[26461]" dev="sockfs" ino=26461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.942331][ T5897] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 119.946652][ T5897] ath9k_htc: Failed to initialize the device [ 119.971933][ T5897] usb 6-1: ath9k_htc: USB layer deinitialized [ 120.029015][ T42] audit: type=1400 audit(1786105911.517:616): avc: denied { setattr } for pid=9139 comm="syz.4.1142" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.034779][ T9141] base or size exceeds the MTRR width [ 120.038458][ T42] audit: type=1400 audit(1786105911.527:617): avc: denied { read write } for pid=9139 comm="syz.4.1142" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 120.050972][ T42] audit: type=1400 audit(1786105911.527:618): avc: denied { open } for pid=9139 comm="syz.4.1142" path="/240/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 120.060485][ T42] audit: type=1400 audit(1786105911.527:619): avc: denied { ioctl } for pid=9139 comm="syz.4.1142" path="/240/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 120.114195][ T42] audit: type=1400 audit(1786105911.607:620): avc: denied { map } for pid=9147 comm="syz.2.1145" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 120.188160][ T849] usb 6-1: USB disconnect, device number 6 [ 121.099649][ T9166] syz.1.1150 (9166) used greatest stack depth: 16792 bytes left [ 121.125994][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 121.129181][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 121.672012][ T9200] IPVS: length: 18 != 8 [ 122.355320][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 122.359269][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 122.473158][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'. [ 122.476185][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'. [ 122.482085][ T9226] gretap0: entered promiscuous mode [ 122.485171][ T9226] gretap0: left promiscuous mode [ 123.079395][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 123.085285][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 123.109059][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 123.111988][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 123.122385][ T9249] gretap0: entered promiscuous mode [ 123.126461][ T9249] gretap0: left promiscuous mode [ 123.143464][ T9253] overlayfs: conflicting options: nfs_export=on,index=off [ 123.193106][ T9254] syz_tun: entered allmulticast mode [ 123.199452][ T9254] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.511133][ T9265] uhci_hcd 0000:00:1d.0: remove, state 4 [ 123.513519][ T9265] usb usb1: USB disconnect, device number 1 [ 123.560854][ T9266] zonefs (loop2) ERROR: Not a zoned block device [ 123.570102][ T9265] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 123.646665][ T9266] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 123.653832][ T9266] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 123.665001][ T9266] pci 0000:00:1d.0: Adding to iommu group 7 [ 123.672843][ T9266] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 123.721550][ T9266] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 43646 usecs [ 123.748293][ T9272] orangefs_devreq_write_iter: failed to copy head. [ 123.760713][ T9266] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 123.770297][ T9266] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 123.773721][ T9266] uhci_hcd 0000:00:1d.0: detected 2 ports [ 123.780241][ T9266] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 123.790431][ T9266] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 123.794534][ T9266] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 123.798217][ T9266] usb usb1: Product: UHCI Host Controller [ 123.800585][ T9266] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 123.803299][ T9266] usb usb1: SerialNumber: 0000:00:1d.0 [ 123.831054][ T9266] hub 1-0:1.0: USB hub found [ 123.834798][ T9266] hub 1-0:1.0: 2 ports detected [ 124.049071][ T9250] syz_tun: left allmulticast mode [ 124.617157][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 124.617175][ T42] audit: type=1400 audit(1786105916.107:625): avc: denied { getopt } for pid=9310 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.629480][ T42] audit: type=1400 audit(1786105916.107:626): avc: denied { write } for pid=9310 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.637591][ T42] audit: type=1400 audit(1786105916.117:627): avc: denied { map } for pid=9310 comm="syz.1.1199" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.646390][ T42] audit: type=1400 audit(1786105916.117:628): avc: denied { call } for pid=9310 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 124.852320][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 125.013238][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 125.019128][ T34] usb 7-1: config 0 has no interfaces? [ 125.021187][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.027795][ T9323] 9p: Bad value for 'rfdno' [ 125.030803][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.040673][ T34] usb 7-1: config 0 descriptor?? [ 125.153259][ T9332] xt_cgroup: xt_cgroup: no path or classid specified [ 125.225807][ T9336] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 125.230849][ T9336] bond1 (unregistering): Released all slaves [ 125.270976][ T61] usb 7-1: USB disconnect, device number 7 [ 125.957452][ T9359] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 125.970936][ T9359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.986196][ T9359] bond1: (slave geneve2): making interface the new active one [ 125.990956][ T9359] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 125.996563][ T9359] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.825919][ T5739] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 126.932809][ T9387] __nla_validate_parse: 11 callbacks suppressed [ 126.932832][ T9387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1223'. [ 126.980962][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 126.985147][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 127.022782][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 127.026508][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 127.209345][ T9401] netlink: 444 bytes leftover after parsing attributes in process `syz.0.1227'. [ 128.009605][ T42] audit: type=1400 audit(1786105919.497:629): avc: denied { setopt } for pid=9410 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.025317][ T42] audit: type=1400 audit(1786105919.517:630): avc: denied { accept } for pid=9410 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.025811][ T9413] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1232'. [ 128.041853][ T42] audit: type=1400 audit(1786105919.527:631): avc: denied { write } for pid=9412 comm="syz.0.1232" name="core" dev="configfs" ino=3350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.051806][ T9413] pim6reg: entered allmulticast mode [ 128.095245][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 128.255638][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1236'. [ 128.258462][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1236'. [ 128.266624][ T9427] gretap0: entered promiscuous mode [ 128.269192][ T9427] gretap0: left promiscuous mode [ 128.516395][ T42] audit: type=1400 audit(1786105920.007:632): avc: denied { name_bind } for pid=9434 comm="syz.0.1240" src=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 128.544989][ T9438] fuse: Unknown parameter '' [ 128.548128][ T42] audit: type=1400 audit(1786105920.037:633): avc: denied { watch } for pid=9436 comm="syz.2.1242" path="/297/file0" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.612283][ T42] audit: type=1400 audit(1786105920.097:634): avc: denied { bind } for pid=9443 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.639545][ T9449] gretap0: entered promiscuous mode [ 128.643632][ T9449] gretap0: left promiscuous mode [ 128.769152][ T9421] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 128.792448][ T5968] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 128.827636][ T9462] Console: switching to colour dummy device 80x25 [ 128.924868][ T5968] usb 7-1: device descriptor read/64, error -71 [ 129.001803][ T9472] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 129.016195][ T9472] ima: Unable to open file: / (-22) [ 129.017128][ T9472] xt_l2tp: v2 doesn't support IP mode [ 129.022764][ T9471] ima: policy update failed [ 129.162383][ T5968] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 129.167499][ T9463] xhci_hcd 0000:00:01.0: xHCI Host Controller [ 129.174102][ T9481] gretap0: entered promiscuous mode [ 129.179682][ T9481] gretap0: left promiscuous mode [ 129.179771][ T9463] xhci_hcd 0000:00:01.0: new USB bus registered, assigned bus number 63 [ 129.221430][ T9463] xhci_hcd 0000:00:01.0: Host halt failed, -110 [ 129.223875][ T9463] xhci_hcd 0000:00:01.0: can't setup: -110 [ 129.226219][ T9463] xhci_hcd 0000:00:01.0: USB bus 63 deregistered [ 129.265890][ T9463] xhci_hcd 0000:00:01.0: init 0000:00:01.0 fail, -110 [ 129.268904][ T9463] xhci_hcd 0000:00:01.0: probe with driver xhci_hcd failed with error -110 [ 129.292393][ T5968] usb 7-1: device descriptor read/64, error -71 [ 129.317370][ T9485] o2cb: This node has not been configured. [ 129.320009][ T9485] o2cb: Cluster check failed. Fix errors before retrying. [ 129.324230][ T9485] (syz.0.1261,9485,3):user_dlm_register:674 ERROR: status = -22 [ 129.327042][ T9485] (syz.0.1261,9485,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 129.405160][ T5968] usb usb7-port1: attempt power cycle [ 129.742332][ T5968] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 129.762703][ T5968] usb 7-1: device descriptor read/8, error -71 [ 130.002335][ T5968] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 130.022787][ T5968] usb 7-1: device descriptor read/8, error -71 [ 130.133497][ T5968] usb usb7-port1: unable to enumerate USB device [ 130.192311][ T5739] Bluetooth: hci2: command 0x041b tx timeout [ 130.328651][ T9510] ceph: No source [ 130.463567][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 130.463581][ T42] audit: type=1400 audit(1786105921.957:643): avc: denied { set_context_mgr } for pid=9514 comm="syz.4.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.770361][ T9533] syzkaller1: entered promiscuous mode [ 130.772848][ T9533] syzkaller1: entered allmulticast mode [ 131.076916][ T42] audit: type=1400 audit(1786105922.567:644): avc: denied { getopt } for pid=9543 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.188716][ T5897] IPVS: starting estimator thread 0... [ 131.282490][ T9548] IPVS: using max 45 ests per chain, 108000 per kthread [ 131.348802][ T42] audit: type=1400 audit(1786105922.837:645): avc: denied { write } for pid=9555 comm="syz.4.1290" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.502964][ T42] audit: type=1400 audit(1786105922.997:646): avc: denied { connect } for pid=9568 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.285098][ T42] audit: type=1400 audit(1786105923.777:647): avc: denied { name_connect } for pid=9581 comm="syz.4.1300" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 132.294592][ T42] audit: type=1400 audit(1786105923.787:648): avc: denied { getopt } for pid=9581 comm="syz.4.1300" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.295012][ T9582] ptrace attach of "/syz-executor exec"[6056] was attempted by ""[9582] [ 132.303559][ T42] audit: type=1400 audit(1786105923.787:649): avc: denied { connect } for pid=9583 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.308720][ T9582] __nla_validate_parse: 8 callbacks suppressed [ 132.308731][ T9582] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1300'. [ 132.828155][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828981][ T42] audit: type=1400 audit(1786105924.317:650): avc: denied { read } for pid=9619 comm="syz.0.1313" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 132.830697][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.858678][ T9623] program syz.0.1314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.915957][ T42] audit: type=1400 audit(1786105924.407:651): avc: denied { read } for pid=9622 comm="syz.0.1314" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 132.918227][ T9624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9624 comm=syz.0.1314 [ 132.922740][ T42] audit: type=1400 audit(1786105924.407:652): avc: denied { open } for pid=9622 comm="syz.0.1314" path="/319/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 133.082276][ T1352] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 133.233639][ T1352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 133.237264][ T1352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 133.241866][ T1352] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 133.245402][ T1352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.248071][ T1352] usb 6-1: Product: syz [ 133.249678][ T1352] usb 6-1: Manufacturer: syz [ 133.251180][ T1352] usb 6-1: SerialNumber: syz [ 133.259203][ T1352] usb 6-1: config 0 descriptor?? [ 133.262440][ T1352] hub 6-1:0.0: bad descriptor, ignoring hub [ 133.264303][ T1352] hub 6-1:0.0: probe with driver hub failed with error -5 [ 133.268433][ T1352] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input25 [ 133.291380][ T9626] ima: policy update completed [ 133.350840][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 133.353951][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 133.360225][ T9628] gretap0: entered promiscuous mode [ 133.363826][ T9628] gretap0: left promiscuous mode [ 133.478175][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 133.481023][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'. [ 133.569445][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 133.574246][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 133.666838][ T9671] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1322'. [ 133.687172][ T9623] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 133.721707][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 133.726266][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 133.778081][ T9680] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.792685][ T9680] xt_socket: unknown flags 0x4c [ 133.950227][ T9687] gretap0: entered promiscuous mode [ 133.955286][ T9687] gretap0: left promiscuous mode [ 134.450142][ T9712] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 134.453844][ T9712] netlink: 'syz.4.1336': attribute type 4 has an invalid length. [ 134.534301][ T9716] gretap0: entered promiscuous mode [ 134.536765][ T9716] gretap0: left promiscuous mode [ 135.679259][ T9744] Bluetooth: MGMT ver 1.23 [ 135.681809][ T9744] Bluetooth: hci0: load_link_keys: too big key_count value 65535 [ 135.772714][ T42] kauditd_printk_skb: 57 callbacks suppressed [ 135.772732][ T42] audit: type=1400 audit(1786105927.257:710): avc: denied { write } for pid=9748 comm="syz.0.1350" name="subsystems" dev="configfs" ino=909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.777586][ T9750] nvmet: adding nsid 1 to subsystem testnqn [ 135.785631][ T42] audit: type=1800 audit(1786105927.267:711): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1350" name="attr_allow_any_host" dev="configfs" ino=31145 res=0 errno=0 [ 135.798495][ T42] audit: type=1400 audit(1786105927.267:712): avc: denied { write } for pid=9748 comm="syz.0.1350" name="namespaces" dev="configfs" ino=30282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.801689][ T9750] [ 135.809458][ T9750] ====================================================== [ 135.812438][ T9750] WARNING: possible circular locking dependency detected [ 135.815282][ T9750] syzkaller #0 Tainted: G L [ 135.817768][ T9750] ------------------------------------------------------ [ 135.820043][ T9750] syz.0.1350/9750 is trying to acquire lock: [ 135.821952][ T9750] ffff888027ef8dc8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 135.825362][ T9750] [ 135.825362][ T9750] but task is already holding lock: [ 135.827655][ T9750] ffff888061121868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 135.830414][ T9750] [ 135.830414][ T9750] which lock already depends on the new lock. [ 135.830414][ T9750] [ 135.833716][ T9750] [ 135.833716][ T9750] the existing dependency chain (in reverse order) is: [ 135.836796][ T9750] [ 135.836796][ T9750] -> #3 (&subsys->lock){+.+.}-{4:4}: [ 135.839276][ T9750] lock_acquire+0x1b9/0x370 [ 135.840950][ T9750] __mutex_lock+0x1a4/0x1bd0 [ 135.842253][ T42] audit: type=1800 audit(1786105927.287:713): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1350" name="device_path" dev="configfs" ino=31893 res=0 errno=0 [ 135.842638][ T9750] nvmet_ns_device_path_store+0x57/0x1c0 [ 135.842662][ T9750] configfs_write_iter+0x302/0x4e0 [ 135.850933][ T42] audit: type=1800 audit(1786105927.287:714): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1350" name="enable" dev="configfs" ino=31894 res=0 errno=0 [ 135.852407][ T9750] vfs_write+0x6ac/0x1050 [ 135.852432][ T9750] ksys_write+0x12a/0x250 [ 135.852441][ T9750] do_syscall_64+0x115/0x870 [ 135.852457][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.852468][ T9750] [ 135.852468][ T9750] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 135.852485][ T9750] lock_acquire+0x1b9/0x370 [ 135.873148][ T9750] down_read+0x99/0x4c0 [ 135.874683][ T9750] configfs_read_iter+0x346/0x6f0 [ 135.876604][ T9750] __kernel_read+0x397/0xad0 [ 135.878274][ T9750] integrity_kernel_read+0x7e/0xb0 [ 135.880101][ T9750] ima_calc_file_hash_tfm+0x25e/0x350 [ 135.882074][ T9750] ima_calc_file_hash+0x1e3/0x380 [ 135.883898][ T9750] ima_collect_measurement+0x94f/0xb30 [ 135.885878][ T9750] process_measurement+0xdfe/0x2350 [ 135.887757][ T9750] ima_file_check+0xc3/0x110 [ 135.889444][ T9750] security_file_post_open+0xc4/0x210 [ 135.891388][ T9750] path_openat+0x985/0x4280 [ 135.893054][ T9750] do_file_open+0x20e/0x430 [ 135.894754][ T9750] do_sys_openat2+0x10f/0x1e0 [ 135.896502][ T9750] __x64_sys_openat+0x12d/0x210 [ 135.898228][ T9750] do_syscall_64+0x115/0x870 [ 135.899903][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.901999][ T9750] [ 135.901999][ T9750] -> #1 (&buffer->mutex#2){+.+.}-{4:4}: [ 135.904516][ T9750] lock_acquire+0x1b9/0x370 [ 135.906423][ T9750] __mutex_lock+0x1a4/0x1bd0 [ 135.908082][ T9750] configfs_read_iter+0x79/0x6f0 [ 135.909800][ T9750] __kernel_read+0x397/0xad0 [ 135.911445][ T9750] integrity_kernel_read+0x7e/0xb0 [ 135.913235][ T9750] ima_calc_file_hash_tfm+0x25e/0x350 [ 135.915119][ T9750] ima_calc_file_hash+0x1e3/0x380 [ 135.916914][ T9750] ima_collect_measurement+0x94f/0xb30 [ 135.918804][ T9750] process_measurement+0xdfe/0x2350 [ 135.920618][ T9750] ima_file_check+0xc3/0x110 [ 135.922235][ T9750] security_file_post_open+0xc4/0x210 [ 135.924228][ T9750] path_openat+0x985/0x4280 [ 135.925930][ T9750] do_file_open+0x20e/0x430 [ 135.927519][ T9750] do_sys_openat2+0x10f/0x1e0 [ 135.929203][ T9750] __x64_sys_openat+0x12d/0x210 [ 135.930867][ T9750] do_syscall_64+0x115/0x870 [ 135.932409][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.934305][ T9750] [ 135.934305][ T9750] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 135.937826][ T9750] check_prev_add+0xeb/0xe60 [ 135.939472][ T9750] __lock_acquire+0x136c/0x1a40 [ 135.941190][ T9750] lock_acquire+0x1b9/0x370 [ 135.942758][ T9750] __mutex_lock+0x1a4/0x1bd0 [ 135.944400][ T9750] process_measurement+0x5ab/0x2350 [ 135.946355][ T9750] ima_file_check+0xc3/0x110 [ 135.948040][ T9750] security_file_post_open+0xc4/0x210 [ 135.949960][ T9750] path_openat+0x985/0x4280 [ 135.951561][ T9750] do_file_open+0x20e/0x430 [ 135.953185][ T9750] file_open_name+0x1c3/0x3e0 [ 135.954847][ T9750] filp_open+0x2e/0x50 [ 135.956689][ T9750] nvmet_file_ns_enable+0x95/0x420 [ 135.958511][ T9750] nvmet_ns_enable+0x35f/0x5d0 [ 135.960233][ T9750] nvmet_ns_enable_store+0x11e/0x160 [ 135.962136][ T9750] configfs_write_iter+0x302/0x4e0 [ 135.963984][ T9750] vfs_write+0x6ac/0x1050 [ 135.965846][ T9750] ksys_write+0x12a/0x250 [ 135.967465][ T9750] do_syscall_64+0x115/0x870 [ 135.969206][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.971349][ T9750] [ 135.971349][ T9750] other info that might help us debug this: [ 135.971349][ T9750] [ 135.974998][ T9750] Chain exists of: [ 135.974998][ T9750] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock [ 135.974998][ T9750] [ 135.980306][ T9750] Possible unsafe locking scenario: [ 135.980306][ T9750] [ 135.983336][ T9750] CPU0 CPU1 [ 135.985423][ T9750] ---- ---- [ 135.987174][ T9750] lock(&subsys->lock); [ 135.988564][ T9750] lock(&p->frag_sem); [ 135.990742][ T9750] lock(&subsys->lock); [ 135.992938][ T9750] lock(&ima_iint_mutex_key[depth]); [ 135.994652][ T9750] [ 135.994652][ T9750] *** DEADLOCK *** [ 135.994652][ T9750] [ 135.997418][ T9750] 6 locks held by syz.0.1350/9750: [ 135.999037][ T9750] #0: ffff88801d29e2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 136.002313][ T9750] #1: ffff8880240c6450 (sb_writers#17){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 136.005719][ T9750] #2: ffff88804ad7d280 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 136.008916][ T9750] #3: ffff888032d54670 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 136.011939][ T9750] #4: ffffffff8fd29a08 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 136.015288][ T9750] #5: ffff888061121868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 136.018393][ T9750] [ 136.018393][ T9750] stack backtrace: [ 136.020266][ T9750] CPU: 3 UID: 0 PID: 9750 Comm: syz.0.1350 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.020283][ T9750] Tainted: [L]=SOFTLOCKUP [ 136.020286][ T9750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.020294][ T9750] Call Trace: [ 136.020299][ T9750] [ 136.020305][ T9750] dump_stack_lvl+0x100/0x190 [ 136.020321][ T9750] print_circular_bug.cold+0x178/0x1c7 [ 136.020350][ T9750] check_noncircular+0x146/0x160 [ 136.020363][ T9750] ? arch_stack_walk+0xa6/0xf0 [ 136.020383][ T9750] check_prev_add+0xeb/0xe60 [ 136.020395][ T9750] ? stack_trace_save+0x8e/0xc0 [ 136.020411][ T9750] __lock_acquire+0x136c/0x1a40 [ 136.020426][ T9750] lock_acquire+0x1b9/0x370 [ 136.020438][ T9750] ? process_measurement+0x5ab/0x2350 [ 136.020451][ T9750] ? __pfx___might_resched+0x10/0x10 [ 136.020466][ T9750] __mutex_lock+0x1a4/0x1bd0 [ 136.020481][ T9750] ? process_measurement+0x5ab/0x2350 [ 136.020491][ T9750] ? process_measurement+0x5ab/0x2350 [ 136.020502][ T9750] ? __pfx___mutex_lock+0x10/0x10 [ 136.020516][ T9750] ? __pfx___might_resched+0x10/0x10 [ 136.020529][ T9750] ? down_write+0x146/0x1f0 [ 136.020544][ T9750] ? process_measurement+0x5ab/0x2350 [ 136.020554][ T9750] process_measurement+0x5ab/0x2350 [ 136.020566][ T9750] ? find_held_lock+0x2b/0x80 [ 136.020575][ T9750] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 136.020587][ T9750] ? __pfx_process_measurement+0x10/0x10 [ 136.020600][ T9750] ? avc_has_perm+0x135/0x1e0 [ 136.020611][ T9750] ? __pfx_avc_has_perm+0x10/0x10 [ 136.020621][ T9750] ? hook_file_open+0x24f/0x8f0 [ 136.020638][ T9750] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 136.020663][ T9750] ima_file_check+0xc3/0x110 [ 136.020673][ T9750] ? __pfx_ima_file_check+0x10/0x10 [ 136.020685][ T9750] security_file_post_open+0xc4/0x210 [ 136.020702][ T9750] path_openat+0x985/0x4280 [ 136.020717][ T9750] ? stack_depot_save_flags+0x479/0x9d0 [ 136.020740][ T9750] ? __pfx_path_openat+0x10/0x10 [ 136.020750][ T9750] ? kasan_save_stack+0x3f/0x50 [ 136.020763][ T9750] ? kasan_save_stack+0x30/0x50 [ 136.020775][ T9750] ? kasan_save_track+0x14/0x30 [ 136.020786][ T9750] ? __kasan_slab_alloc+0x89/0x90 [ 136.020800][ T9750] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 136.020813][ T9750] ? do_getname_kernel+0x5d/0x250 [ 136.020825][ T9750] ? filp_open+0x1d/0x50 [ 136.020837][ T9750] ? nvmet_file_ns_enable+0x95/0x420 [ 136.020851][ T9750] do_file_open+0x20e/0x430 [ 136.020863][ T9750] ? __pfx_do_file_open+0x10/0x10 [ 136.020879][ T9750] ? rcu_is_watching+0x12/0xc0 [ 136.020896][ T9750] file_open_name+0x1c3/0x3e0 [ 136.020909][ T9750] ? __pfx_file_open_name+0x10/0x10 [ 136.020921][ T9750] ? do_getname_kernel+0x5d/0x250 [ 136.020934][ T9750] ? __asan_memcpy+0x3c/0x60 [ 136.020944][ T9750] ? do_getname_kernel+0x1be/0x250 [ 136.020958][ T9750] filp_open+0x2e/0x50 [ 136.020976][ T9750] nvmet_file_ns_enable+0x95/0x420 [ 136.020996][ T9750] nvmet_ns_enable+0x35f/0x5d0 [ 136.021015][ T9750] nvmet_ns_enable_store+0x11e/0x160 [ 136.021039][ T9750] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 136.021065][ T9750] configfs_write_iter+0x302/0x4e0 [ 136.021080][ T9750] vfs_write+0x6ac/0x1050 [ 136.021096][ T9750] ? __pfx_configfs_write_iter+0x10/0x10 [ 136.021109][ T9750] ? __pfx_vfs_write+0x10/0x10 [ 136.021128][ T9750] ksys_write+0x12a/0x250 [ 136.021137][ T9750] ? __pfx_ksys_write+0x10/0x10 [ 136.021147][ T9750] do_syscall_64+0x115/0x870 [ 136.021161][ T9750] ? clear_bhb_loop+0x70/0xc0 [ 136.021174][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.021185][ T9750] RIP: 0033:0x7f3f5299e0d9 [ 136.021195][ T9750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.021206][ T9750] RSP: 002b:00007f3f538e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.021217][ T9750] RAX: ffffffffffffffda RBX: 00007f3f52c25fa0 RCX: 00007f3f5299e0d9 [ 136.021223][ T9750] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 136.021229][ T9750] RBP: 00007f3f52a35024 R08: 0000000000000000 R09: 0000000000000000 [ 136.021235][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.021241][ T9750] R13: 00007f3f52c26038 R14: 00007f3f52c25fa0 R15: 00007ffd1c2bc468 [ 136.021251][ T9750] [ 136.044691][ T42] audit: type=1800 audit(1786105927.537:715): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 136.172302][ T42] audit: type=1800 audit(1786105927.657:716): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35286 res=0 errno=0 [ 136.180280][ T42] audit: type=1800 audit(1786105927.667:717): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35309 res=0 errno=0 [ 136.282416][ T849] usb 6-1: USB disconnect, device number 7