last executing test programs: 1m30.933173147s ago: executing program 0 (id=1): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000000)="00000008000000000001000000000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f0000000020)="0000000a0000000000030100000100000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f0000000040)="0000000a0000000000030101000200000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f0000000060)="0000000a0000000000030102000300000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f0000000080)="0000000a0000000000030103000400000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f00000000a0)="0000000a0000000000030104000500000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f00000000c0)="0000000a0000000000030107000600000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f00000000e0)="0000000a0000000000030108000700000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f0000000100)="0000000a0000000000030106000800000000") syz_usb_ep_write(r0, 0x83, 0x12, &(0x7f0000000120)="0000000a0000000000030105000900000000") nanosleep(&(0x7f0000000300)={0xa}, 0x0) 1m30.788312368s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1024\n', 0x5) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='net2280', 0x7) nanosleep(&(0x7f0000000840)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000880), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000008c0)={0x0, 0x56595559}) 1m30.571752425s ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000002500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./config/nullb/nullb2/zone_nr_conv\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r3, &(0x7f0000002700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./dev/nullb2\x00', 0x2, 0x0) write(r5, &(0x7f0000003000)="53464f5adeb1de78", 0x1000) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt1\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003100)='./mnt2\x00', 0x1ff) mount(&(0x7f0000002a00)=@filename='./dev/nullb2\x00', &(0x7f0000003100)='./mnt2\x00', &(0x7f0000003200)='zonefs\x00', 0x0, 0x0) 1m30.49136783s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="ff00", 0x2) write(r0, &(0x7f0000000240)="040e0c010110000b00000b00000000", 0xf) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f0000000300)="040e0701022000000101", 0xa) write(r0, &(0x7f0000000440)="040e05013b200001", 0x8) 1m28.348963871s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0), &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000440)="060000000000000002000000040100000000000000000000666f6f00"/128, 0x80) (async) nanosleep(&(0x7f00000004c0)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(&(0x7f0000000540), &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0) write(r5, &(0x7f00000006c0)='1', 0x1) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./dev\x00', 0x1ff) mount(&(0x7f0000000780), &(0x7f00000007c0)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f0000000880)="06000000000000000200000001010000030300008000000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7f) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/dlm_foo\x00', 0x2, 0x0) write(r7, &(0x7f0000000940)="06000000000000000200000001010000030300000040000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7f) 1m27.131851556s ago: executing program 0 (id=10): syslog(0x9, &(0x7f0000000040)=""/1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='mem', 0x3) 1m15.101201727s ago: executing program 32 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0xf) ioctl(r0, 0x400455c8, &(0x7f0000000008)='\x00\x00\x00\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448c9, &(0x7f0000000000)='\x00\x00\x00\x00') ioctl(r1, 0x400448c9, &(0x7f0000000004)="01000000") ioctl(r1, 0x400448c9, &(0x7f0000000008)="02000000") ioctl(r1, 0x400448c9, &(0x7f000000000c)="03000000") 1m14.076325366s ago: executing program 33 (id=8): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000240)=""/258, 0x102) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f00000003c0)=""/258, 0x102) write$nci(r0, &(0x7f0000000500)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, &(0x7f0000000540)=""/258, 0x102) write$nci(r0, &(0x7f0000000680)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r0, &(0x7f00000006c0)=""/258, 0x102) write$nci(r0, &(0x7f0000000800)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000840)=""/258, 0x102) write$nci(r0, &(0x7f0000000980)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4) close(r2) close(r0) 1m13.367675061s ago: executing program 34 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0), &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r3, &(0x7f0000000440)="060000000000000002000000040100000000000000000000666f6f00"/128, 0x80) (async) nanosleep(&(0x7f00000004c0)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(&(0x7f0000000540), &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0) write(r5, &(0x7f00000006c0)='1', 0x1) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./dev\x00', 0x1ff) mount(&(0x7f0000000780), &(0x7f00000007c0)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f0000000880)="06000000000000000200000001010000030300008000000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7f) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/dlm_foo\x00', 0x2, 0x0) write(r7, &(0x7f0000000940)="06000000000000000200000001010000030300000040000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7f) 1m11.880684188s ago: executing program 35 (id=10): syslog(0x9, &(0x7f0000000040)=""/1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='mem', 0x3) 1m11.841788622s ago: executing program 6 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700), 0x0) write(r0, &(0x7f0000000700)='\x00'/24, 0x18) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/16, 0x10) 1m11.770755064s ago: executing program 6 (id=19): syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x1) 1m9.571912106s ago: executing program 6 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk\n', 0x5) 1m4.536718348s ago: executing program 4 (id=37): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x300000}}, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0xc45, 0x1010, 0x9, 0x2, 0x1, 'syz1\x00'}) 1m4.480813771s ago: executing program 4 (id=38): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002000705820200020007050602000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000200)={0x0, 0x5000000}, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="010000000001010101010101010100"/64) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 1m4.281187126s ago: executing program 5 (id=40): mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='disk\n\x00\x00\x00', 0x8) 1m4.280966203s ago: executing program 5 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000002500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./config/nullb/nullb2/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000003400), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r3, &(0x7f0000002700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./dev/nullb2\x00', 0x2, 0x0) write(r5, &(0x7f0000003000)="53464f5adeb1de78", 0x1000) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt1\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003100)='./mnt2\x00', 0x1ff) mount(&(0x7f0000002a00)=@filename='./dev/nullb2\x00', &(0x7f0000003100)='./mnt2\x00', &(0x7f0000003200)='zonefs\x00', 0x0, 0x0) 1m4.19094304s ago: executing program 5 (id=42): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000100)=""/1, 0x1) 1m3.521880038s ago: executing program 5 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="ff00", 0x2) write(r0, &(0x7f0000000240)="040e0c010110000b00000b00000000", 0xf) write(r0, &(0x7f0000000280)="040e0a010910", 0x6) write(r0, &(0x7f0000000300)="040e0701022000000101", 0xa) write(r0, &(0x7f0000000440)="040e05013b200001", 0x8) 1m1.451033877s ago: executing program 4 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000002500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./config/nullb/nullb2/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000003400)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r3, &(0x7f0000002700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./dev/nullb2\x00', 0x2, 0x0) write(r5, &(0x7f0000003000)="53464f5adeb1de78", 0x1000) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt1\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003100)='./mnt2\x00', 0x1ff) mount(&(0x7f0000002a00)=@filename='./dev/nullb2\x00', &(0x7f0000003100)='./mnt2\x00', &(0x7f0000003200)='zonefs\x00', 0x0, 0x0) 1m1.450581403s ago: executing program 5 (id=51): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0401460c0001"], 0x8) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) 1m1.391932066s ago: executing program 4 (id=52): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000001000)=[{&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="0200", 0x2}, {&(0x7f0000000300)="0200", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}, {&(0x7f0000000300)="02fa", 0x2}], 0xd) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 1m1.391652827s ago: executing program 5 (id=53): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00224e0000004e2205010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/2-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/3-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/4-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) write(r3, &(0x7f0000000800)='on\x00', 0x2) write(r4, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 1m0.578409364s ago: executing program 7 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/vkms/my_vkms\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) 1m0.142178994s ago: executing program 4 (id=56): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x242, 0x1ff) fallocate(r0, 0x0, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/248, 0x100, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='7:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='active\x00', 0x7) 1m0.140955219s ago: executing program 7 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700), 0x0) write(r0, &(0x7f0000000700)='\x00'/24, 0x18) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/26, 0x1a) 1m0.061876668s ago: executing program 7 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1024\n', 0x5) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='net2280', 0x7) nanosleep(&(0x7f0000000840)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000880), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000008c0)={0x0, 0x56595559}) 1m0.00196926s ago: executing program 4 (id=58): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) read(r0, &(0x7f0000000100)=""/2, 0x2) write(r0, &(0x7f0000000140)="02fa", 0x2) write(r0, &(0x7f0000000180)="02aa", 0x2) write(r0, &(0x7f00000001c0)="0200", 0x2) read(r0, &(0x7f0000000200)=""/2, 0x2) write(r0, &(0x7f0000000240)="02fa", 0x2) 59.901897498s ago: executing program 7 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='mem\x00', 0x3) 59.901692208s ago: executing program 7 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000002500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./config/nullb/nullb2/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000003400)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r3, &(0x7f0000002700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./dev/nullb2\x00', 0x2, 0x0) write(r5, &(0x7f0000003000)="53464f5adeb1de78", 0x1000) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt1\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003100)='./mnt2\x00', 0x1ff) mount(&(0x7f0000002a00)=@filename='./dev/nullb2\x00', &(0x7f0000003100)='./mnt2\x00', &(0x7f0000003200)='zonefs\x00', 0x0, 0x0) 59.842045306s ago: executing program 7 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="ff00", 0x2) write(r0, &(0x7f0000000240)="040e0c010110000b00000b00000000", 0xf) write(r0, &(0x7f0000000280)="040e0a010910", 0x6) write(r0, &(0x7f0000000300)="040e0701022000000101", 0xa) write(r0, &(0x7f0000000440)="040e05013b200001", 0x8) 37.607941016s ago: executing program 36 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="ff00", 0x2) write(r0, &(0x7f0000000240)="040e0c010110000b00000b00000000", 0xf) write(r0, &(0x7f0000000280)="040e0a010910", 0x6) write(r0, &(0x7f0000000300)="040e0701022000000101", 0xa) write(r0, &(0x7f0000000440)="040e05013b200001", 0x8) 37.560316953s ago: executing program 37 (id=53): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00224e0000004e2205010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/2-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/3-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/4-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) write(r3, &(0x7f0000000800)='on\x00', 0x2) write(r4, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 37.560250165s ago: executing program 38 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk\n', 0x5) 37.557192192s ago: executing program 39 (id=58): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) read(r0, &(0x7f0000000100)=""/2, 0x2) write(r0, &(0x7f0000000140)="02fa", 0x2) write(r0, &(0x7f0000000180)="02aa", 0x2) write(r0, &(0x7f00000001c0)="0200", 0x2) read(r0, &(0x7f0000000200)=""/2, 0x2) write(r0, &(0x7f0000000240)="02fa", 0x2) 7.531375211s ago: executing program 8 (id=87): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x242, 0x1ff) fallocate(r0, 0x0, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/248, 0x100, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='7:1\x00', 0x4) 7.451567556s ago: executing program 8 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000002500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./config/nullb/nullb2/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000003400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000002700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./dev/nullb2\x00', 0x2, 0x0) write(r5, &(0x7f0000003000)="53464f5adeb1de78", 0x1000) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt1\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003100)='./mnt2\x00', 0x1ff) mount(&(0x7f0000002a00)=@filename='./dev/nullb2\x00', &(0x7f0000003100)='./mnt2\x00', &(0x7f0000003200)='zonefs\x00', 0x0, 0x0) 7.451388645s ago: executing program 8 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/i8042/resource\x00', 0x0, 0x0) 7.380210946s ago: executing program 8 (id=90): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000300)=@generic={0x8, "0000ffff00002000"}, 0xc) 6.020842945s ago: executing program 1 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x2, 0x0) write(r1, &(0x7f0000000b40)='/bin/true\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000400), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000400), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000400), 0x64) 4.911197003s ago: executing program 3 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1024\n', 0x5) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='net2280', 0x7) nanosleep(&(0x7f0000000840)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000880), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000008c0)={0x0, 0x56595559}) 4.80090148s ago: executing program 3 (id=101): syz_usb_connect(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140341278560000010203010902480002010080fa0904000003e00101000905810240000100000905020240000000000905830340000100000904010002e0010100090584014000010000090504014000010000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000140)='\x00\x00\x00\x00') bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r0, &(0x7f00000001c0)="f100040000", 0x5) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000200)="01000000") bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) write(r0, &(0x7f0000000280)="f100040000", 0x5) 4.800797703s ago: executing program 1 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='md0\x00', 0x3) 4.479880992s ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='vivid.0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='vimc.0\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='vim2m.0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vicodec/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='vicodec.0\x00', 0xa) syz_usb_connect(0x0, 0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ffffff40450580800a03010203010902200001010080320904000002ffffff000705810140000107050202400000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000500), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000600)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000700)=0x1) 4.331594962s ago: executing program 8 (id=104): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="01") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.813496253s ago: executing program 9 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod\x00', 0x0, 0x0) 3.813220213s ago: executing program 9 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000002500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./config/nullb/nullb2/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000003400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./dev/nullb2\x00', 0x2, 0x0) write(r5, &(0x7f0000003000)="53464f5adeb1de78", 0x1000) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt1\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003100)='./mnt2\x00', 0x1ff) mount(&(0x7f0000002a00)=@filename='./dev/nullb2\x00', &(0x7f0000003100)='./mnt2\x00', &(0x7f0000003200)='zonefs\x00', 0x0, 0x0) 3.711353924s ago: executing program 9 (id=109): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) 3.239920604s ago: executing program 3 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x405, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)=ANY=[@ANYBLOB="90000000000105040000000000000000020000003400018014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700000c0005800800010052415300080007000000012c"]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000002000)='\x00', 0x1, 0x0, &(0x7f0000002100)={0x2, 0x6b7, @loopback}, 0x10) 3.239721259s ago: executing program 3 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1024\n', 0x5) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='net2280', 0x7) nanosleep(&(0x7f0000000840)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000880), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000008c0)={0x0, 0x56595559}) 3.041368628s ago: executing program 3 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000000)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r3, &(0x7f0000000000)="060000000000000002000000040100000000000000000000666f6f00"/122, 0x78) (async) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/kernel/dlm/foo/event_done\x00', 0x1, 0x0) write(r4, &(0x7f0000000000)='0\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/kernel/dlm/foo/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000000)='1\x00', 0x1) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)="06000000000000000200000001010000030300008000000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7b) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/dlm_foo\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)="06000000000000000200000001010000030300000040000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7b) 2.825045823s ago: executing program 3 (id=113): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000700)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) 2.081467444s ago: executing program 1 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba90100"/258, 0x102, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000001000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='7:0\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='active\x00', 0x7) 2.01149876s ago: executing program 1 (id=115): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='7:1\x00', 0x4) 2.011273402s ago: executing program 1 (id=116): syz_usb_connect(0x3, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x2, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x800], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}], '\x00', 0xf07}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 1.551002209s ago: executing program 9 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000002500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./config/nullb/nullb2/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000003400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./dev/nullb2\x00', 0x2, 0x0) write(r5, &(0x7f0000003000)="53464f5adeb1de78", 0x1000) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt1\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003100)='./mnt2\x00', 0x1ff) mount(&(0x7f0000002a00)=@filename='./dev/nullb2\x00', &(0x7f0000003100)='./mnt2\x00', &(0x7f0000003200)='zonefs\x00', 0x0, 0x0) 1.550789279s ago: executing program 9 (id=118): syz_usb_connect(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140341278560000010203010902480002010080fa0904000003e00101000905810240000100000905020240000000000905830340000100000904010002e0010100090584014000010000090504014000010000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000140)='\x00\x00\x00\x00') bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r0, &(0x7f00000001c0)="f100040000", 0x5) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000200)="01000000") bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) write(r0, &(0x7f0000000280)="f100040000", 0x5) 1.310405622s ago: executing program 8 (id=119): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b538100030000000109022700010100a0fa0904000003ffff0000070581020002000705020200020007058303080008"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000400)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, &(0x7f0000000700)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000a00)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x84, &(0x7f0000000d00)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)={0x84, &(0x7f0000001000)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001400)={0x84, &(0x7f0000001300)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001700)={0x84, &(0x7f0000001600)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001a00)={0x84, &(0x7f0000001900)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001e00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001d00)={0x84, &(0x7f0000001c00)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000002000)={0x1}, 0x0) 0s ago: executing program 9 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1024\n', 0x5) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='net2280', 0x7) nanosleep(&(0x7f0000000840)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000880), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000008c0)={0x0, 0x56595559}) 0s ago: executing program 9 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000640)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000006c0)={0x0, 0x56595559}) kernel console output (not intermixed with test programs): 0: port 1(bridge_slave_0) entered blocking state [ 68.594955][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.601017][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.603330][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.822593][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.836664][ T5096] Bluetooth: hci5: command tx timeout [ 68.836835][ T10] gspca_vc032x: reg_r err -110 [ 68.840967][ T10] vc032x 11-1:1.0: probe with driver vc032x failed with error -110 [ 68.950508][ T6080] veth0_vlan: entered promiscuous mode [ 68.955432][ T6080] veth1_vlan: entered promiscuous mode [ 68.969324][ T6080] veth0_macvtap: entered promiscuous mode [ 68.978098][ T6080] veth1_macvtap: entered promiscuous mode [ 68.989106][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.001605][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.047375][ T5789] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.069286][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.071953][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.092937][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.096627][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.107713][ T5789] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.111075][ T5789] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.114299][ T5789] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.204115][ T6134] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 69.327941][ T6138] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 69.477707][ T5740] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 69.496849][ T5830] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 69.542835][ T6106] usb 11-1: USB disconnect, device number 2 [ 69.551037][ T6144] jffs2: notice: (6144) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 69.650055][ T5830] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00 [ 69.653600][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.660886][ T5830] cp210x 10-1:1.0: cp210x converter detected [ 69.796985][ T5740] Bluetooth: hci6: command tx timeout [ 69.856651][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 69.863094][ T5830] cp210x 10-1:1.0: failed to get vendor val 0x370b size 1: -32 [ 69.866110][ T5830] cp210x 10-1:1.0: querying part number failed [ 69.872838][ T5830] usb 10-1: cp210x converter now attached to ttyUSB0 [ 69.956657][ T5740] Bluetooth: hci9: command tx timeout [ 70.009767][ T29] usb 9-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 0.00 [ 70.012725][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.015271][ T29] usb 9-1: Product: syz [ 70.016719][ T29] usb 9-1: Manufacturer: syz [ 70.018231][ T29] usb 9-1: SerialNumber: syz [ 70.282450][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 70.282468][ T42] audit: type=1400 audit(1785856434.217:278): avc: denied { bind } for pid=6148 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.290848][ T42] audit: type=1400 audit(1785856434.217:279): avc: denied { write } for pid=6148 comm="syz.4.28" path="socket:[10201]" dev="sockfs" ino=10201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.516693][ T5096] Bluetooth: hci7: command tx timeout [ 70.556709][ T6106] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 70.738189][ T6106] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 70.741193][ T6106] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.748438][ T6106] usbtest 12-1:1.0: Linux gadget zero [ 70.750275][ T6106] usbtest 12-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 70.916601][ T5096] Bluetooth: hci5: command tx timeout [ 71.249816][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.252750][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.887118][ T5096] Bluetooth: hci6: command tx timeout [ 72.048069][ T5740] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 72.050683][ T5096] Bluetooth: hci9: command tx timeout [ 72.597005][ T5740] Bluetooth: hci7: command tx timeout [ 72.636671][ T5746] usb 9-1: USB disconnect, device number 3 [ 72.664418][ T42] audit: type=1800 audit(1785856436.597:280): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.32" name="zoned" dev="configfs" ino=13799 res=0 errno=0 [ 72.670827][ T42] audit: type=1800 audit(1785856436.597:281): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.32" name="zone_nr_conv" dev="configfs" ino=13800 res=0 errno=0 [ 72.671828][ T6165] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 72.680724][ T42] audit: type=1800 audit(1785856436.597:282): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.32" name="zoned" dev="configfs" ino=13801 res=0 errno=0 [ 72.680749][ T42] audit: type=1800 audit(1785856436.597:283): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.32" name="zone_nr_conv" dev="configfs" ino=13802 res=0 errno=0 [ 72.680769][ T42] audit: type=1800 audit(1785856436.597:284): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.32" name="power" dev="configfs" ino=13803 res=0 errno=0 [ 72.751637][ T5096] Bluetooth: hci8: unexpected event for opcode 0x1001 [ 72.755323][ T5096] Bluetooth: hci8: unexpected event for opcode 0x2002 [ 72.758361][ T5096] Bluetooth: hci8: unexpected event for opcode 0x203b [ 72.996633][ T5096] Bluetooth: hci5: command tx timeout [ 73.320134][ T848] usb 12-1: USB disconnect, device number 2 [ 73.668083][ T848] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 73.818054][ T848] usb 12-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 73.821095][ T848] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.830328][ T848] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 73.957774][ T5096] Bluetooth: hci6: command tx timeout [ 74.116706][ T5096] Bluetooth: hci9: command tx timeout [ 74.676612][ T5096] Bluetooth: hci7: command tx timeout [ 74.758253][ T5740] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 74.801026][ T6173] jffs2: notice: (6173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 74.808706][ T42] audit: type=1400 audit(1785856438.747:285): avc: denied { write } for pid=6172 comm="syz.4.35" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.858233][ T42] audit: type=1400 audit(1785856438.797:286): avc: denied { ioctl } for pid=6175 comm="syz.4.36" path="socket:[11665]" dev="sockfs" ino=11665 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.954656][ T42] audit: type=1400 audit(1785856438.887:287): avc: denied { write } for pid=6184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.979542][ T6188] sl0: header compression turned on [ 75.125377][ T6106] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x0 [ 75.138586][ T6106] hid-generic 0005:0C45:1010.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 75.160401][ T6151] cp210x ttyUSB0: failed set request 0x3 status: -110 [ 75.165500][ T6151] cp210x ttyUSB0: failed to set line control: -110 [ 75.173491][ T6151] cp210x ttyUSB0: failed set req 0x19 size 6 status: -32 [ 75.179783][ T6151] cp210x ttyUSB0: failed to set special chars: -32 [ 75.183668][ T6151] cp210x ttyUSB0: failed get req 0x14 size 16 status: -32 [ 75.187920][ T6151] cp210x ttyUSB0: failed set request 0x7 status: -32 [ 75.204179][ T6151] cp210x ttyUSB0: failed set request 0x7 status: -32 [ 75.208353][ T6151] cp210x ttyUSB0: failed set request 0x12 status: -32 [ 75.210967][ T6151] cp210x ttyUSB0: failed set request 0x0 status: -32 [ 75.214205][ T6108] usb 10-1: USB disconnect, device number 2 [ 75.229685][ T6108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 75.232587][ T6108] cp210x 10-1:1.0: device disconnected [ 75.397811][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 75.397824][ T42] audit: type=1800 audit(1785856439.337:294): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.41" name="zoned" dev="configfs" ino=13819 res=0 errno=0 [ 75.403299][ T6215] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 75.406420][ T42] audit: type=1800 audit(1785856439.337:295): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.41" name="zone_nr_conv" dev="configfs" ino=10222 res=0 errno=0 [ 75.416532][ T6106] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 75.417541][ T42] audit: type=1800 audit(1785856439.337:296): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.41" name="zoned" dev="configfs" ino=10223 res=0 errno=0 [ 75.430171][ T42] audit: type=1800 audit(1785856439.337:297): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.41" name="zone_nr_conv" dev="configfs" ino=10224 res=0 errno=0 [ 75.439049][ T42] audit: type=1800 audit(1785856439.337:298): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.41" name="power" dev="configfs" ino=10225 res=0 errno=0 [ 75.570105][ T6106] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 75.572931][ T6106] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.576373][ T6106] usb 9-1: Product: syz [ 75.577779][ T6106] usb 9-1: Manufacturer: syz [ 75.579289][ T6106] usb 9-1: SerialNumber: syz [ 75.996793][ C0] usb 9-1: received EP1 urb->status = -2 [ 75.998624][ T6106] usb 9-1: unable to init card! (ret=-110) [ 76.000988][ T6106] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 76.139662][ T5096] Bluetooth: hci8: unexpected event for opcode 0x1001 [ 76.143016][ T5096] Bluetooth: hci8: unexpected cc 0x1009 length: 0 < 7 [ 76.145288][ T5096] Bluetooth: hci8: unexpected event for opcode 0x1009 [ 76.147620][ T5096] Bluetooth: hci8: unexpected event for opcode 0x2002 [ 76.149787][ T5096] Bluetooth: hci8: unexpected event for opcode 0x203b [ 76.196642][ T5096] Bluetooth: hci9: command tx timeout [ 76.404360][ T2521] pvrusb2: Failed to submit write-control URB status=-2 [ 76.407931][ T2521] pvrusb2: Device being rendered inoperable [ 76.411253][ T2521] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 76.414618][ T848] usb 12-1: USB disconnect, device number 3 [ 76.417287][ T2521] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 76.454812][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.492495][ T34] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 76.495655][ T34] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 76.510121][ T1166] wlan1: authenticated [ 76.510256][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.517105][ T1166] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 76.567745][ T1166] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 76.567959][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.571102][ T1166] wlan1: associated [ 77.165479][ T6229] jffs2: notice: (6229) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 77.173144][ T42] audit: type=1400 audit(1785856441.107:299): avc: denied { write } for pid=6228 comm="syz.7.45" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.227289][ T6232] loop1: detected capacity change from 0 to 128 [ 77.258939][ T6232] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.313139][ T6232] md: invalid superblock checksum on loop1 [ 77.315872][ T6232] md: loop1 does not have a valid v1.1 superblock, not importing! [ 77.366657][ T42] audit: type=1400 audit(1785856441.307:300): avc: denied { write } for pid=6233 comm="syz.7.47" name="cells" dev="proc" ino=4026534605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 77.373402][ T42] audit: type=1400 audit(1785856441.307:301): avc: denied { create } for pid=6233 comm="syz.7.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.379657][ T42] audit: type=1400 audit(1785856441.307:302): avc: denied { bind } for pid=6233 comm="syz.7.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.385419][ T42] audit: type=1400 audit(1785856441.307:303): avc: denied { listen } for pid=6233 comm="syz.7.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.395232][ T6234] kAFS: unable to lookup cell 'syz0' [ 78.164527][ T848] usb 9-1: USB disconnect, device number 4 [ 78.196675][ T5740] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 78.220872][ T6246] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 78.506563][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 78.658150][ T34] usb 10-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 78.661994][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.716643][ T6242] NFSD: Unable to initialize client recovery tracking! (-110) [ 78.719076][ T6242] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 78.722478][ T6242] NFSD: starting 90-second grace period (net f0000a38) [ 79.069562][ T6257] jffs2: notice: (6257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 79.075270][ T34] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0 [ 79.077756][ T34] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0 [ 79.080269][ T34] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0 [ 79.082498][ T34] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0 [ 79.084648][ T34] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0 [ 79.087009][ T34] hid-rmi 0003:1532:011D.0003: unknown main item tag 0x0 [ 79.089813][ T34] hid-rmi 0003:1532:011D.0003: collection stack underflow [ 79.092182][ T34] hid-rmi 0003:1532:011D.0003: item 0 0 0 12 parsing failed [ 79.094867][ T34] hid-rmi 0003:1532:011D.0003: parse failed [ 79.096890][ T34] hid-rmi 0003:1532:011D.0003: probe with driver hid-rmi failed with error -22 [ 79.550013][ T6262] jffs2: notice: (6262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 79.561595][ T6264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.608869][ T6264] md: invalid superblock checksum on loop1 [ 79.611814][ T6264] md: loop1 does not have a valid v1.1 superblock, not importing! [ 79.741212][ T6273] PM: suspend entry (deep) [ 79.742674][ T6273] PM: suspend exit [ 79.779157][ T6275] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 79.815039][ T5096] Bluetooth: hci8: unexpected event for opcode 0x1001 [ 79.818591][ T5096] Bluetooth: hci8: unexpected cc 0x1009 length: 0 < 7 [ 79.821042][ T5096] Bluetooth: hci8: unexpected event for opcode 0x1009 [ 79.823246][ T5096] Bluetooth: hci8: unexpected event for opcode 0x2002 [ 79.825891][ T5096] Bluetooth: hci8: unexpected event for opcode 0x203b [ 80.205425][ T5887] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 80.214428][ T5911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.562888][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.629209][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.700684][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.763787][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.884336][ T13] bridge_slave_1: left allmulticast mode [ 80.886891][ T13] bridge_slave_1: left promiscuous mode [ 80.890833][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.904237][ T13] bridge_slave_0: left allmulticast mode [ 80.906806][ T13] bridge_slave_0: left promiscuous mode [ 80.909311][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.028055][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.033989][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.046565][ T13] bond0 (unregistering): Released all slaves [ 81.120754][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 81.120768][ T42] audit: type=1400 audit(1785856445.057:319): avc: denied { write } for pid=6282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.167494][ T42] audit: type=1400 audit(1785856445.107:320): avc: denied { write } for pid=6285 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.204751][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 81.273982][ T42] audit: type=1400 audit(1785856445.207:321): avc: denied { write } for pid=6288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.322755][ T42] audit: type=1400 audit(1785856445.257:322): avc: denied { write } for pid=6291 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.361896][ T13] hsr_slave_0: left promiscuous mode [ 81.364245][ T13] hsr_slave_1: left promiscuous mode [ 81.367195][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.370120][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.373868][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.376234][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.383093][ T13] veth1_macvtap: left promiscuous mode [ 81.384906][ T13] veth0_macvtap: left promiscuous mode [ 81.387519][ T13] veth1_vlan: left promiscuous mode [ 81.389289][ T13] veth0_vlan: left promiscuous mode [ 81.486522][ T61] cfg80211: failed to load regulatory.db [ 81.494297][ T5924] Freezing user space processes [ 81.517478][ T13] team0 (unregistering): Port device team_slave_1 removed [ 81.529562][ T13] team0 (unregistering): Port device team_slave_0 removed [ 81.625836][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 81.876605][ T5740] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 82.846749][ T848] misc userio: Buffer overflowed, userio client isn't keeping up [ 86.226540][ T848] misc userio: Buffer overflowed, userio client isn't keeping up [ 89.596660][ T848] misc userio: Buffer overflowed, userio client isn't keeping up [ 92.997721][ T848] misc userio: Buffer overflowed, userio client isn't keeping up [ 97.246581][ T848] misc userio: Buffer overflowed, userio client isn't keeping up [ 98.743558][ T848] input: PS/2 Generic Mouse as /devices/serio4/input/input12 [ 98.956654][ T848] psmouse serio4: Failed to enable mouse on [ 101.513840][ T5924] Freezing user space processes failed after 20.016 seconds (6 tasks refusing to freeze, wq_busy=0): [ 101.517511][ T5924] task:getty state:D stack:22224 pid:5536 tgid:5536 ppid:1 task_flags:0x40000c flags:0x00080003 [ 101.522318][ T5924] Call Trace: [ 101.523721][ T5924] [ 101.524983][ T5924] __schedule+0x125c/0x6730 [ 101.527013][ T5924] ? do_raw_spin_lock+0x128/0x260 [ 101.529141][ T5924] ? __pfx___schedule+0x10/0x10 [ 101.531167][ T5924] ? find_held_lock+0x2b/0x80 [ 101.533146][ T5924] ? schedule+0x225/0x2c0 [ 101.534959][ T5924] schedule+0xdd/0x2c0 [ 101.537774][ T5924] schedule_preempt_disabled+0x13/0x30 [ 101.540000][ T5924] __mutex_lock+0xccc/0x1bd0 [ 101.541845][ T5924] ? hci_dev_do_close+0x26/0xb0 [ 101.543744][ T5924] ? __pfx___mutex_lock+0x10/0x10 [ 101.545390][ T5924] ? __pfx___might_resched+0x10/0x10 [ 101.547105][ T5924] ? find_held_lock+0x2b/0x80 [ 101.548613][ T5924] ? down_write+0x146/0x1f0 [ 101.550075][ T5924] ? hci_dev_do_close+0x26/0xb0 [ 101.551570][ T5924] ? blocking_notifier_chain_unregister+0x7e/0xc0 [ 101.553615][ T5924] hci_dev_do_close+0x26/0xb0 [ 101.555362][ T5924] hci_unregister_dev+0x23f/0x690 [ 101.557160][ T5924] hci_uart_tty_close+0x31b/0x3f0 [ 101.558813][ T5924] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 101.560584][ T5924] tty_ldisc_close+0x114/0x1a0 [ 101.562125][ T5924] tty_ldisc_reinit+0xf9/0x360 [ 101.563666][ T5924] tty_ldisc_hangup+0x34e/0x6e0 [ 101.565239][ T5924] __tty_hangup.part.0+0x3b8/0x7c0 [ 101.567009][ T5924] tty_vhangup_session+0x24/0x30 [ 101.568566][ T5924] disassociate_ctty+0x3e4/0x620 [ 101.570251][ T5924] do_exit+0x183e/0x2ae0 [ 101.571602][ T5924] ? do_raw_spin_lock+0x128/0x260 [ 101.573274][ T5924] ? __pfx_do_exit+0x10/0x10 [ 101.574864][ T5924] ? do_group_exit+0x1bd/0x2a0 [ 101.576700][ T5924] ? rcu_is_watching+0x12/0xc0 [ 101.578215][ T5924] do_group_exit+0xd5/0x2a0 [ 101.579669][ T5924] __x64_sys_exit_group+0x3e/0x50 [ 101.581260][ T5924] x64_sys_call+0x102c/0x1530 [ 101.582756][ T5924] do_syscall_64+0x115/0x870 [ 101.584243][ T5924] ? clear_bhb_loop+0x40/0x90 [ 101.586250][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.588161][ T5924] RIP: 0033:0x7fb8efae86c5 [ 101.589546][ T5924] RSP: 002b:00007fff46434268 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 101.592086][ T5924] RAX: ffffffffffffffda RBX: 00007fb8efbe9fe8 RCX: 00007fb8efae86c5 [ 101.594601][ T5924] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 101.597115][ T5924] RBP: 0000000000000001 R08: 00007fff464341f8 R09: 0000000000000000 [ 101.599777][ T5924] R10: 00007fff46434090 R11: 0000000000000202 R12: 0000000000000000 [ 101.602162][ T5924] R13: 0000000000000001 R14: 00007fb8efbe8680 R15: 00007fb8efbea000 [ 101.604557][ T5924] [ 101.605557][ T5924] task:syz-executor state:S stack:22760 pid:5735 tgid:5735 ppid:1 task_flags:0x40054c flags:0x00080001 [ 101.609216][ T5924] Call Trace: [ 101.610253][ T5924] [ 101.611164][ T5924] __schedule+0x125c/0x6730 [ 101.612558][ T5924] ? __pfx___schedule+0x10/0x10 [ 101.614110][ T5924] ? find_held_lock+0x2b/0x80 [ 101.615750][ T5924] ? schedule+0x225/0x2c0 [ 101.617205][ T5924] schedule+0xdd/0x2c0 [ 101.618506][ T5924] do_wait+0x1a7/0x570 [ 101.619840][ T5924] kernel_wait4+0x16d/0x280 [ 101.621271][ T5924] ? __pfx_kernel_wait4+0x10/0x10 [ 101.622866][ T5924] ? __pfx_child_wait_callback+0x10/0x10 [ 101.624673][ T5924] ? kernel_wait4+0x182/0x280 [ 101.626166][ T5924] ? kernel_wait4+0x1d6/0x280 [ 101.627721][ T5924] zap_pid_ns_processes+0x2ca/0x6a0 [ 101.629378][ T5924] ? do_raw_write_lock+0x11e/0x260 [ 101.630957][ T5924] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 101.632739][ T5924] ? do_exit+0x2205/0x2ae0 [ 101.634192][ T5924] ? rcu_is_watching+0x12/0xc0 [ 101.635726][ T5924] do_exit+0x2377/0x2ae0 [ 101.637207][ T5924] ? __pfx_do_exit+0x10/0x10 [ 101.638689][ T5924] ? do_raw_spin_lock+0x128/0x260 [ 101.640338][ T5924] ? find_held_lock+0x2b/0x80 [ 101.641822][ T5924] ? get_signal+0x7e0/0x21e0 [ 101.643312][ T5924] do_group_exit+0xd5/0x2a0 [ 101.644766][ T5924] get_signal+0x1ec7/0x21e0 [ 101.646215][ T5924] ? kernel_wait4+0x1d6/0x280 [ 101.647763][ T5924] ? __pfx_kernel_wait4+0x10/0x10 [ 101.649365][ T5924] ? __pfx_child_wait_callback+0x10/0x10 [ 101.651170][ T5924] ? __pfx_get_signal+0x10/0x10 [ 101.652710][ T5924] arch_do_signal_or_restart+0x91/0x7e0 [ 101.654493][ T5924] ? __pfx___do_sys_wait4+0x10/0x10 [ 101.656239][ T5924] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.658271][ T5924] exit_to_user_mode_loop+0x139/0x6f0 [ 101.660013][ T5924] ? rcu_is_watching+0x12/0xc0 [ 101.661527][ T5924] do_syscall_64+0x666/0x870 [ 101.663009][ T5924] ? clear_bhb_loop+0x40/0x90 [ 101.664554][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.666419][ T5924] RIP: 0033:0x7faf79b5e84e [ 101.667979][ T5924] RSP: 002b:00007ffc8ca01d88 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 101.670665][ T5924] RAX: fffffffffffffe00 RBX: 000055556e7d1500 RCX: 00007faf79b5e84e [ 101.673140][ T5924] RDX: 0000000040000000 RSI: 00007ffc8ca01e2c RDI: ffffffffffffffff [ 101.676022][ T5924] RBP: 00007ffc8ca01e2c R08: 0000000000000000 R09: 0000000000000000 [ 101.679223][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.681835][ T5924] R13: 000055556e7e49f0 R14: 000000000000d00d R15: 00007ffc8ca01e80 [ 101.685031][ T5924] [ 101.686338][ T5924] task:syz-executor state:S stack:23848 pid:5737 tgid:5737 ppid:1 task_flags:0x40054c flags:0x00080001 [ 101.691476][ T5924] Call Trace: [ 101.692817][ T5924] [ 101.694458][ T5924] __schedule+0x125c/0x6730 [ 101.696341][ T5924] ? __pfx___schedule+0x10/0x10 [ 101.698423][ T5924] ? find_held_lock+0x2b/0x80 [ 101.699941][ T5924] ? schedule+0x225/0x2c0 [ 101.701404][ T5924] schedule+0xdd/0x2c0 [ 101.702901][ T5924] do_wait+0x1a7/0x570 [ 101.704206][ T5924] kernel_wait4+0x16d/0x280 [ 101.705683][ T5924] ? __pfx_kernel_wait4+0x10/0x10 [ 101.707328][ T5924] ? lockdep_hardirqs_on+0x78/0x100 [ 101.709012][ T5924] ? __pfx_child_wait_callback+0x10/0x10 [ 101.710875][ T5924] ? find_held_lock+0x2b/0x80 [ 101.712412][ T5924] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.714152][ T5924] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.716110][ T5924] zap_pid_ns_processes+0x2ca/0x6a0 [ 101.718028][ T5924] ? do_raw_write_lock+0x11e/0x260 [ 101.719688][ T5924] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 101.721522][ T5924] ? do_exit+0x2205/0x2ae0 [ 101.723002][ T5924] ? rcu_is_watching+0x12/0xc0 [ 101.724583][ T5924] do_exit+0x2377/0x2ae0 [ 101.725984][ T5924] ? __pfx_do_exit+0x10/0x10 [ 101.727602][ T5924] ? do_raw_spin_lock+0x128/0x260 [ 101.729262][ T5924] ? find_held_lock+0x2b/0x80 [ 101.730777][ T5924] ? get_signal+0x7e0/0x21e0 [ 101.732309][ T5924] do_group_exit+0xd5/0x2a0 [ 101.733783][ T5924] get_signal+0x1ec7/0x21e0 [ 101.735380][ T5924] ? kernel_wait4+0x1d6/0x280 [ 101.736998][ T5924] ? __pfx_kernel_wait4+0x10/0x10 [ 101.738619][ T5924] ? __pfx_child_wait_callback+0x10/0x10 [ 101.740449][ T5924] ? __pfx_get_signal+0x10/0x10 [ 101.742064][ T5924] arch_do_signal_or_restart+0x91/0x7e0 [ 101.743857][ T5924] ? __pfx___do_sys_wait4+0x10/0x10 [ 101.745572][ T5924] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.747862][ T5924] exit_to_user_mode_loop+0x139/0x6f0 [ 101.749668][ T5924] ? rcu_is_watching+0x12/0xc0 [ 101.751252][ T5924] do_syscall_64+0x666/0x870 [ 101.752811][ T5924] ? clear_bhb_loop+0x40/0x90 [ 101.754371][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.756379][ T5924] RIP: 0033:0x7f317875e84e [ 101.757958][ T5924] RSP: 002b:00007ffc6f2aae18 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 101.760781][ T5924] RAX: fffffffffffffe00 RBX: 0000555587091500 RCX: 00007f317875e84e [ 101.763447][ T5924] RDX: 0000000040000000 RSI: 00007ffc6f2aaebc RDI: ffffffffffffffff [ 101.765905][ T5924] RBP: 00007ffc6f2aaebc R08: 0000000000000000 R09: 0000000000000000 [ 101.768443][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.770897][ T5924] R13: 00005555870a49f0 R14: 000000000000c1f7 R15: 00007ffc6f2aaf10 [ 101.773369][ T5924] [ 101.774367][ T5924] task:syz-executor state:S stack:22680 pid:5741 tgid:5741 ppid:1 task_flags:0x40054c flags:0x00080001 [ 101.778083][ T5924] Call Trace: [ 101.779134][ T5924] [ 101.780101][ T5924] __schedule+0x125c/0x6730 [ 101.781554][ T5924] ? __pfx___schedule+0x10/0x10 [ 101.783110][ T5924] ? find_held_lock+0x2b/0x80 [ 101.784590][ T5924] ? schedule+0x225/0x2c0 [ 101.785963][ T5924] schedule+0xdd/0x2c0 [ 101.787316][ T5924] do_wait+0x1a7/0x570 [ 101.788606][ T5924] kernel_wait4+0x16d/0x280 [ 101.790319][ T5924] ? __pfx_kernel_wait4+0x10/0x10 [ 101.791900][ T5924] ? __pfx_child_wait_callback+0x10/0x10 [ 101.793671][ T5924] ? zap_pid_ns_processes+0x2a2/0x6a0 [ 101.795361][ T5924] zap_pid_ns_processes+0x2ca/0x6a0 [ 101.797297][ T5924] ? do_raw_write_lock+0x11e/0x260 [ 101.798918][ T5924] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 101.800716][ T5924] ? do_exit+0x2205/0x2ae0 [ 101.802160][ T5924] ? rcu_is_watching+0x12/0xc0 [ 101.803683][ T5924] do_exit+0x2377/0x2ae0 [ 101.805022][ T5924] ? __pfx_do_exit+0x10/0x10 [ 101.806567][ T5924] ? do_raw_spin_lock+0x128/0x260 [ 101.808155][ T5924] ? find_held_lock+0x2b/0x80 [ 101.809628][ T5924] ? get_signal+0x7e0/0x21e0 [ 101.811088][ T5924] do_group_exit+0xd5/0x2a0 [ 101.812509][ T5924] get_signal+0x1ec7/0x21e0 [ 101.813954][ T5924] ? kernel_wait4+0x1d6/0x280 [ 101.815428][ T5924] ? __pfx_kernel_wait4+0x10/0x10 [ 101.817064][ T5924] ? __pfx_child_wait_callback+0x10/0x10 [ 101.818821][ T5924] ? __pfx_get_signal+0x10/0x10 [ 101.820372][ T5924] arch_do_signal_or_restart+0x91/0x7e0 [ 101.822103][ T5924] ? __pfx___do_sys_wait4+0x10/0x10 [ 101.823744][ T5924] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.825666][ T5924] exit_to_user_mode_loop+0x139/0x6f0 [ 101.827462][ T5924] ? rcu_is_watching+0x12/0xc0 [ 101.829002][ T5924] do_syscall_64+0x666/0x870 [ 101.830505][ T5924] ? clear_bhb_loop+0x40/0x90 [ 101.831988][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.833843][ T5924] RIP: 0033:0x7fd5cc15e84e [ 101.835251][ T5924] RSP: 002b:00007fff8d6cc858 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 101.837927][ T5924] RAX: fffffffffffffe00 RBX: 000055556cd0e500 RCX: 00007fd5cc15e84e [ 101.840405][ T5924] RDX: 0000000040000000 RSI: 00007fff8d6cc8fc RDI: ffffffffffffffff [ 101.842859][ T5924] RBP: 00007fff8d6cc8fc R08: 0000000000000000 R09: 0000000000000000 [ 101.845251][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 101.847727][ T5924] R13: 000055556cd219f0 R14: 000000000000cb38 R15: 00007fff8d6cc950 [ 101.850179][ T5924] [ 101.851119][ T5924] task:syz.3.4 state:D stack:24808 pid:5897 tgid:5895 ppid:5737 task_flags:0x400140 flags:0x00080003 [ 101.854612][ T5924] Call Trace: [ 101.855630][ T5924] [ 101.856598][ T5924] __schedule+0x125c/0x6730 [ 101.857973][ T5924] ? hrtimer_reprogram+0x460/0x6c0 [ 101.859518][ T5924] ? __pfx___schedule+0x10/0x10 [ 101.861051][ T5924] ? find_held_lock+0x2b/0x80 [ 101.862528][ T5924] ? schedule+0x225/0x2c0 [ 101.863829][ T5924] schedule+0xdd/0x2c0 [ 101.865061][ T5924] schedule_hrtimeout_range_clock+0x213/0x310 [ 101.866973][ T5924] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 101.869006][ T5924] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 101.870673][ T5924] ? ktime_get+0x22c/0x320 [ 101.872002][ T5924] ? lockdep_hardirqs_on+0x78/0x100 [ 101.873567][ T5924] ? ktime_get+0x23e/0x320 [ 101.874963][ T5924] usleep_range_state+0x18b/0x240 [ 101.876636][ T5924] ? usleep_range_state+0xf3/0x240 [ 101.878256][ T5924] ? __pfx_usleep_range_state+0x10/0x10 [ 101.880014][ T5924] ? usleep_range_state+0x1a5/0x240 [ 101.881646][ T5924] qca_setup+0xa61/0x2ce0 [ 101.883038][ T5924] ? __pfx_qca_setup+0x10/0x10 [ 101.884543][ T5924] ? hci_sock_dev_event+0xb6/0x630 [ 101.886162][ T5924] ? __pfx_qca_setup+0x10/0x10 [ 101.887778][ T5924] hci_uart_setup+0x227/0x4d0 [ 101.889304][ T5924] ? __pfx_hci_uart_setup+0x10/0x10 [ 101.890945][ T5924] hci_dev_open_sync+0x3f5/0x25c0 [ 101.892801][ T5924] ? __pfx_hci_dev_open_sync+0x10/0x10 [ 101.894543][ T5924] hci_dev_do_open+0x2a/0xb0 [ 101.896002][ T5924] hci_dev_open+0x1d2/0x350 [ 101.897686][ T5924] ? capable+0xd3/0xf0 [ 101.898992][ T5924] hci_sock_ioctl+0x61a/0x7e0 [ 101.900496][ T5924] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 101.902129][ T5924] ? tomoyo_path_number_perm+0x188/0x580 [ 101.903857][ T5924] sock_do_ioctl+0x118/0x280 [ 101.905317][ T5924] ? __pfx_sock_do_ioctl+0x10/0x10 [ 101.906986][ T5924] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.908554][ T5924] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 101.910675][ T5924] sock_ioctl+0x599/0x6b0 [ 101.912000][ T5924] ? __pfx_sock_ioctl+0x10/0x10 [ 101.913519][ T5924] ? hook_file_ioctl_common+0x140/0x440 [ 101.915218][ T5924] ? selinux_file_ioctl+0x13b/0x290 [ 101.916888][ T5924] ? selinux_file_ioctl+0xb6/0x290 [ 101.918479][ T5924] ? __pfx_sock_ioctl+0x10/0x10 [ 101.919982][ T5924] __x64_sys_ioctl+0x18e/0x210 [ 101.921469][ T5924] do_syscall_64+0x115/0x870 [ 101.922889][ T5924] ? clear_bhb_loop+0x40/0x90 [ 101.924348][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.926120][ T5924] RIP: 0033:0x7f317879e019 [ 101.927573][ T5924] RSP: 002b:00007f31795fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.930106][ T5924] RAX: ffffffffffffffda RBX: 00007f3178a25fa0 RCX: 00007f317879e019 [ 101.932450][ T5924] RDX: 0000200000000004 RSI: 00000000400448c9 RDI: 0000000000000005 [ 101.934784][ T5924] RBP: 00007f317883500c R08: 0000000000000000 R09: 0000000000000000 [ 101.937270][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.939671][ T5924] R13: 00007f3178a26038 R14: 00007f3178a25fa0 R15: 00007ffc6f2aab18 [ 101.942115][ T5924] [ 101.943157][ T5924] task:syz.2.9 state:D stack:26120 pid:5918 tgid:5917 ppid:5741 task_flags:0x400140 flags:0x00080002 [ 101.946826][ T5924] Call Trace: [ 101.947874][ T5924] [ 101.948799][ T5924] __schedule+0x125c/0x6730 [ 101.950244][ T5924] ? __pfx___schedule+0x10/0x10 [ 101.951739][ T5924] ? find_held_lock+0x2b/0x80 [ 101.953222][ T5924] ? schedule+0x225/0x2c0 [ 101.954584][ T5924] schedule+0xdd/0x2c0 [ 101.955860][ T5924] do_uevent+0x427/0x530 [ 101.957601][ T5924] ? __pfx_do_uevent+0x10/0x10 [ 101.959330][ T5924] ? __dlm_new_lockspace+0x1689/0x1fa0 [ 101.960996][ T5924] ? dlm_new_user_lockspace+0x60/0x90 [ 101.962656][ T5924] ? device_write+0x930/0x1c90 [ 101.964159][ T5924] ? __pfx_autoremove_wake_function+0x10/0x10 [ 101.966051][ T5924] __dlm_new_lockspace+0x1698/0x1fa0 [ 101.967757][ T5924] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 101.969478][ T5924] ? __pfx_autoremove_wake_function+0x10/0x10 [ 101.971266][ T5924] ? rcu_is_watching+0x12/0xc0 [ 101.972757][ T5924] dlm_new_user_lockspace+0x60/0x90 [ 101.974397][ T5924] device_write+0x930/0x1c90 [ 101.975809][ T5924] ? avc_policy_seqno+0x9/0x20 [ 101.977341][ T5924] ? __pfx_device_write+0x10/0x10 [ 101.978906][ T5924] ? bpf_lsm_file_permission+0x9/0x10 [ 101.980588][ T5924] ? security_file_permission+0x76/0x210 [ 101.982316][ T5924] ? rw_verify_area+0xce/0x6d0 [ 101.983803][ T5924] vfs_write+0x2aa/0x1050 [ 101.985129][ T5924] ? __pfx_device_write+0x10/0x10 [ 101.986707][ T5924] ? __pfx_vfs_write+0x10/0x10 [ 101.988178][ T5924] ? find_held_lock+0x2b/0x80 [ 101.989597][ T5924] ? __fget_files+0x215/0x3d0 [ 101.991058][ T5924] ? __fget_files+0x215/0x3d0 [ 101.992490][ T5924] ? __fget_files+0x21f/0x3d0 [ 101.993946][ T5924] ksys_write+0x12a/0x250 [ 101.995546][ T5924] ? __pfx_ksys_write+0x10/0x10 [ 101.997361][ T5924] do_syscall_64+0x115/0x870 [ 101.998815][ T5924] ? clear_bhb_loop+0x40/0x90 [ 102.000300][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.002051][ T5924] RIP: 0033:0x7fd5cc19e019 [ 102.003400][ T5924] RSP: 002b:00007fd5cd107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.005885][ T5924] RAX: ffffffffffffffda RBX: 00007fd5cc425fa0 RCX: 00007fd5cc19e019 [ 102.008427][ T5924] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000007 [ 102.010912][ T5924] RBP: 00007fd5cc23500c R08: 0000000000000000 R09: 0000000000000000 [ 102.013284][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.015650][ T5924] R13: 00007fd5cc426038 R14: 00007fd5cc425fa0 R15: 00007fff8d6cc558 [ 102.018081][ T5924] [ 102.019973][ T5924] OOM killer enabled. [ 102.021909][ T5924] Restarting tasks: Starting [ 102.032205][ T5924] Restarting tasks: Done [ 102.037026][ T5924] random: crng reseeded on system resumption [ 102.060812][ T5924] PM: suspend exit [ 102.066013][ T6155] PM: hibernation: hibernation entry [ 102.066989][ T61] usb 10-1: USB disconnect, device number 3 [ 102.198422][ T6155] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.209705][ T6155] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.223575][ T6155] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 102.239758][ T6155] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 102.263248][ T6155] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 102.281008][ T6155] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 102.283011][ T6155] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 102.297497][ T6155] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 102.302270][ T42] audit: type=1400 audit(1785856466.237:323): avc: denied { write } for pid=6307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.318184][ T6155] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 102.324401][ T6155] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 102.332363][ T6155] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 102.362445][ T5742] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 102.363134][ T5748] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 102.378303][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.392527][ T5748] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 102.392817][ T5742] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 102.395487][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.398658][ T5753] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 102.407007][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.407119][ T5748] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 102.410488][ T5749] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 102.410824][ T13] Filesystems sync: 0.057 seconds [ 102.412740][ T5748] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 102.422855][ T5749] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 102.425982][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.427040][ T5742] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 102.428954][ T5749] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 102.431024][ T5753] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 102.431216][ T6155] Freezing user space processes [ 102.677245][ T5789] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.780569][ T5789] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.837322][ T5789] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.901365][ T5789] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.991703][ T5789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.075374][ T5789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.131727][ T5789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.221508][ T5789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.360464][ T5789] bridge_slave_1: left allmulticast mode [ 103.362282][ T5789] bridge_slave_1: left promiscuous mode [ 103.364151][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.368902][ T5789] bridge_slave_0: left allmulticast mode [ 103.370737][ T5789] bridge_slave_0: left promiscuous mode [ 103.372974][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.381653][ T5789] bridge_slave_1: left allmulticast mode [ 103.383549][ T5789] bridge_slave_1: left promiscuous mode [ 103.385488][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.389934][ T5789] bridge_slave_0: left allmulticast mode [ 103.391766][ T5789] bridge_slave_0: left promiscuous mode [ 103.393549][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.487774][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.493645][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.501411][ T5789] bond0 (unregistering): Released all slaves [ 103.565578][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.573053][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.576695][ T5789] bond0 (unregistering): Released all slaves [ 104.102189][ T5789] hsr_slave_0: left promiscuous mode [ 104.104367][ T5789] hsr_slave_1: left promiscuous mode [ 104.106538][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.108953][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.111891][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.114297][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.119536][ T5789] hsr_slave_0: left promiscuous mode [ 104.121556][ T5789] hsr_slave_1: left promiscuous mode [ 104.123558][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.125834][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.128621][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.130958][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.144083][ T5789] veth1_macvtap: left promiscuous mode [ 104.147868][ T5789] veth0_macvtap: left promiscuous mode [ 104.150393][ T5789] veth1_vlan: left promiscuous mode [ 104.152649][ T5789] veth0_vlan: left promiscuous mode [ 104.156018][ T5789] veth1_macvtap: left promiscuous mode [ 104.159628][ T5789] veth0_macvtap: left promiscuous mode [ 104.162049][ T5789] veth1_vlan: left promiscuous mode [ 104.164284][ T5789] veth0_vlan: left promiscuous mode [ 104.286759][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.286832][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.311211][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 104.319793][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 104.366595][ T5749] Bluetooth: hci7: command 0x0c1a tx timeout [ 104.436568][ T64] Bluetooth: hci11: Opcode 0x0c14 failed: -110 [ 104.436685][ T5744] Bluetooth: hci10: Opcode 0x0c14 failed: -110 [ 104.436825][ T5749] Bluetooth: hci10: command 0x0c14 tx timeout [ 104.436946][ T5753] Bluetooth: hci1: command 0x0c38 tx timeout [ 104.438070][ T5740] Bluetooth: hci1: Opcode 0x0c38 failed: -110 [ 104.439547][ T6306] Bluetooth: hci1: Opcode 0x0c03 failed: -4 [ 104.440234][ T6312] Bluetooth: hci11: Opcode 0x0c03 failed: -4 [ 104.443957][ T6309] Bluetooth: hci10: Opcode 0x0c03 failed: -4 [ 104.474101][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 104.481689][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 104.517047][ T5744] Bluetooth: hci8: command 0x0c14 tx timeout [ 104.517044][ T5096] Bluetooth: hci8: Opcode 0x0c14 failed: -110 [ 104.525717][ T6308] Bluetooth: hci8: Opcode 0x0c03 failed: -4 [ 105.307840][ T5789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.372856][ T5789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.460171][ T5789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.539987][ T5789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.655034][ T5789] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.713615][ T5789] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.773269][ T5789] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.830829][ T5789] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.907840][ T5789] bridge_slave_1: left allmulticast mode [ 105.910099][ T5789] bridge_slave_1: left promiscuous mode [ 105.912427][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.918281][ T5789] bridge_slave_0: left allmulticast mode [ 105.920518][ T5789] bridge_slave_0: left promiscuous mode [ 105.922849][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.930553][ T5789] bridge_slave_1: left allmulticast mode [ 105.932773][ T5789] bridge_slave_1: left promiscuous mode [ 105.935063][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.939685][ T5789] bridge_slave_0: left allmulticast mode [ 105.941942][ T5789] bridge_slave_0: left promiscuous mode [ 105.944213][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.043750][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.049024][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.052643][ T5789] bond0 (unregistering): Released all slaves [ 106.119105][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.123414][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.127057][ T5789] bond0 (unregistering): Released all slaves [ 106.327780][ T5789] rxrpc: Leaked peer 121 {1} 127.0.0.1:7003 [ 106.436627][ T5096] Bluetooth: hci7: command 0x0c1a tx timeout [ 106.518466][ T5789] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 106.640723][ T5789] hsr_slave_0: left promiscuous mode [ 106.643164][ T5789] hsr_slave_1: left promiscuous mode [ 106.645101][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.647416][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.650016][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.652267][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.657097][ T5789] hsr_slave_0: left promiscuous mode [ 106.660197][ T5789] hsr_slave_1: left promiscuous mode [ 106.662259][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.664580][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.668071][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.670408][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.679562][ T5789] veth1_macvtap: left promiscuous mode [ 106.681311][ T5789] veth0_macvtap: left promiscuous mode [ 106.683017][ T5789] veth1_vlan: left promiscuous mode [ 106.684641][ T5789] veth0_vlan: left promiscuous mode [ 106.689531][ T5789] veth1_macvtap: left promiscuous mode [ 106.691285][ T5789] veth0_macvtap: left promiscuous mode [ 106.693042][ T5789] veth1_vlan: left promiscuous mode [ 106.694712][ T5789] veth0_vlan: left promiscuous mode [ 106.838607][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 106.845175][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 106.986589][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 106.996681][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 108.516660][ T5096] Bluetooth: hci7: command 0x0c1a tx timeout [ 122.437224][ T6155] Freezing user space processes failed after 20.005 seconds (6 tasks refusing to freeze, wq_busy=0): [ 122.440714][ T6155] task:getty state:D stack:22224 pid:5536 tgid:5536 ppid:1 task_flags:0x40000c flags:0x00080003 [ 122.444442][ T6155] Call Trace: [ 122.445519][ T6155] [ 122.446651][ T6155] __schedule+0x125c/0x6730 [ 122.448329][ T6155] ? do_raw_spin_lock+0x128/0x260 [ 122.450391][ T6155] ? __pfx___schedule+0x10/0x10 [ 122.452295][ T6155] ? find_held_lock+0x2b/0x80 [ 122.453812][ T6155] ? schedule+0x225/0x2c0 [ 122.455191][ T6155] schedule+0xdd/0x2c0 [ 122.456597][ T6155] schedule_preempt_disabled+0x13/0x30 [ 122.458318][ T6155] __mutex_lock+0xccc/0x1bd0 [ 122.459783][ T6155] ? hci_dev_do_close+0x26/0xb0 [ 122.461326][ T6155] ? __pfx___mutex_lock+0x10/0x10 [ 122.463095][ T6155] ? __pfx___might_resched+0x10/0x10 [ 122.464753][ T6155] ? find_held_lock+0x2b/0x80 [ 122.466279][ T6155] ? down_write+0x146/0x1f0 [ 122.467806][ T6155] ? hci_dev_do_close+0x26/0xb0 [ 122.469367][ T6155] ? blocking_notifier_chain_unregister+0x7e/0xc0 [ 122.471380][ T6155] hci_dev_do_close+0x26/0xb0 [ 122.472913][ T6155] hci_unregister_dev+0x23f/0x690 [ 122.474724][ T6155] hci_uart_tty_close+0x31b/0x3f0 [ 122.476344][ T6155] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 122.478668][ T6155] tty_ldisc_close+0x114/0x1a0 [ 122.480533][ T6155] tty_ldisc_reinit+0xf9/0x360 [ 122.482058][ T6155] tty_ldisc_hangup+0x34e/0x6e0 [ 122.483645][ T6155] __tty_hangup.part.0+0x3b8/0x7c0 [ 122.485253][ T6155] tty_vhangup_session+0x24/0x30 [ 122.486915][ T6155] disassociate_ctty+0x3e4/0x620 [ 122.488491][ T6155] do_exit+0x183e/0x2ae0 [ 122.489917][ T6155] ? do_raw_spin_lock+0x128/0x260 [ 122.491501][ T6155] ? __pfx_do_exit+0x10/0x10 [ 122.492962][ T6155] ? do_group_exit+0x1bd/0x2a0 [ 122.494439][ T6155] ? rcu_is_watching+0x12/0xc0 [ 122.495932][ T6155] do_group_exit+0xd5/0x2a0 [ 122.497523][ T6155] __x64_sys_exit_group+0x3e/0x50 [ 122.499428][ T6155] x64_sys_call+0x102c/0x1530 [ 122.501288][ T6155] do_syscall_64+0x115/0x870 [ 122.503130][ T6155] ? clear_bhb_loop+0x40/0x90 [ 122.504981][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.507400][ T6155] RIP: 0033:0x7fb8efae86c5 [ 122.509159][ T6155] RSP: 002b:00007fff46434268 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 122.512416][ T6155] RAX: ffffffffffffffda RBX: 00007fb8efbe9fe8 RCX: 00007fb8efae86c5 [ 122.515502][ T6155] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 122.518683][ T6155] RBP: 0000000000000001 R08: 00007fff464341f8 R09: 0000000000000000 [ 122.521863][ T6155] R10: 00007fff46434090 R11: 0000000000000202 R12: 0000000000000000 [ 122.524999][ T6155] R13: 0000000000000001 R14: 00007fb8efbe8680 R15: 00007fb8efbea000 [ 122.528098][ T6155] [ 122.529339][ T6155] task:syz-executor state:S stack:23848 pid:5737 tgid:5737 ppid:1 task_flags:0x40054c flags:0x00080001 [ 122.533957][ T6155] Call Trace: [ 122.535289][ T6155] [ 122.536574][ T6155] __schedule+0x125c/0x6730 [ 122.538210][ T6155] ? __pfx___schedule+0x10/0x10 [ 122.539762][ T6155] ? find_held_lock+0x2b/0x80 [ 122.541242][ T6155] ? schedule+0x225/0x2c0 [ 122.542614][ T6155] schedule+0xdd/0x2c0 [ 122.544272][ T6155] do_wait+0x1a7/0x570 [ 122.545994][ T6155] kernel_wait4+0x16d/0x280 [ 122.548009][ T6155] ? __pfx_kernel_wait4+0x10/0x10 [ 122.550104][ T6155] ? __pfx_child_wait_callback+0x10/0x10 [ 122.552475][ T6155] ? kernel_wait4+0x182/0x280 [ 122.554458][ T6155] ? kernel_wait4+0x1d6/0x280 [ 122.556410][ T6155] zap_pid_ns_processes+0x2ca/0x6a0 [ 122.558678][ T6155] ? do_raw_write_lock+0x11e/0x260 [ 122.560807][ T6155] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 122.563194][ T6155] ? do_exit+0x2205/0x2ae0 [ 122.565053][ T6155] ? rcu_is_watching+0x12/0xc0 [ 122.567181][ T6155] do_exit+0x2377/0x2ae0 [ 122.568937][ T6155] ? __pfx_do_exit+0x10/0x10 [ 122.570847][ T6155] ? do_raw_spin_lock+0x128/0x260 [ 122.572893][ T6155] ? find_held_lock+0x2b/0x80 [ 122.574829][ T6155] ? get_signal+0x7e0/0x21e0 [ 122.576892][ T6155] do_group_exit+0xd5/0x2a0 [ 122.578787][ T6155] get_signal+0x1ec7/0x21e0 [ 122.580663][ T6155] ? kernel_wait4+0x1d6/0x280 [ 122.582632][ T6155] ? __pfx_kernel_wait4+0x10/0x10 [ 122.584714][ T6155] ? __pfx_child_wait_callback+0x10/0x10 [ 122.587452][ T6155] ? __pfx_get_signal+0x10/0x10 [ 122.589475][ T6155] arch_do_signal_or_restart+0x91/0x7e0 [ 122.591768][ T6155] ? __pfx___do_sys_wait4+0x10/0x10 [ 122.593883][ T6155] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.596405][ T6155] exit_to_user_mode_loop+0x139/0x6f0 [ 122.599044][ T6155] ? rcu_is_watching+0x12/0xc0 [ 122.601045][ T6155] do_syscall_64+0x666/0x870 [ 122.602931][ T6155] ? clear_bhb_loop+0x40/0x90 [ 122.604841][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.607381][ T6155] RIP: 0033:0x7f317875e84e [ 122.609204][ T6155] RSP: 002b:00007ffc6f2aae18 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 122.612630][ T6155] RAX: fffffffffffffe00 RBX: 0000555587091500 RCX: 00007f317875e84e [ 122.615197][ T6155] RDX: 0000000040000000 RSI: 00007ffc6f2aaebc RDI: ffffffffffffffff [ 122.617834][ T6155] RBP: 00007ffc6f2aaebc R08: 0000000000000000 R09: 0000000000000000 [ 122.620908][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.623896][ T6155] R13: 00005555870a49f0 R14: 000000000000c1f7 R15: 00007ffc6f2aaf10 [ 122.627107][ T6155] [ 122.628340][ T6155] task:syz-executor state:S stack:22680 pid:5741 tgid:5741 ppid:1 task_flags:0x40054c flags:0x00080001 [ 122.632759][ T6155] Call Trace: [ 122.634085][ T6155] [ 122.635259][ T6155] __schedule+0x125c/0x6730 [ 122.637130][ T6155] ? __pfx___schedule+0x10/0x10 [ 122.639027][ T6155] ? find_held_lock+0x2b/0x80 [ 122.640610][ T6155] ? schedule+0x225/0x2c0 [ 122.642055][ T6155] schedule+0xdd/0x2c0 [ 122.643350][ T6155] do_wait+0x1a7/0x570 [ 122.644642][ T6155] kernel_wait4+0x16d/0x280 [ 122.646087][ T6155] ? __pfx_kernel_wait4+0x10/0x10 [ 122.648260][ T6155] ? __pfx_child_wait_callback+0x10/0x10 [ 122.650624][ T6155] ? zap_pid_ns_processes+0x2a2/0x6a0 [ 122.652793][ T6155] zap_pid_ns_processes+0x2ca/0x6a0 [ 122.654909][ T6155] ? do_raw_write_lock+0x11e/0x260 [ 122.656688][ T6155] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 122.658594][ T6155] ? do_exit+0x2205/0x2ae0 [ 122.660424][ T6155] ? rcu_is_watching+0x12/0xc0 [ 122.662386][ T6155] do_exit+0x2377/0x2ae0 [ 122.664131][ T6155] ? __pfx_do_exit+0x10/0x10 [ 122.666009][ T6155] ? do_raw_spin_lock+0x128/0x260 [ 122.668189][ T6155] ? find_held_lock+0x2b/0x80 [ 122.670093][ T6155] ? get_signal+0x7e0/0x21e0 [ 122.672065][ T6155] do_group_exit+0xd5/0x2a0 [ 122.674012][ T6155] get_signal+0x1ec7/0x21e0 [ 122.675829][ T6155] ? kernel_wait4+0x1d6/0x280 [ 122.677573][ T6155] ? __pfx_kernel_wait4+0x10/0x10 [ 122.679563][ T6155] ? __pfx_child_wait_callback+0x10/0x10 [ 122.681341][ T6155] ? __pfx_get_signal+0x10/0x10 [ 122.682886][ T6155] arch_do_signal_or_restart+0x91/0x7e0 [ 122.684621][ T6155] ? __pfx___do_sys_wait4+0x10/0x10 [ 122.686274][ T6155] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.688447][ T6155] exit_to_user_mode_loop+0x139/0x6f0 [ 122.690212][ T6155] ? rcu_is_watching+0x12/0xc0 [ 122.691726][ T6155] do_syscall_64+0x666/0x870 [ 122.693191][ T6155] ? clear_bhb_loop+0x40/0x90 [ 122.694678][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.696605][ T6155] RIP: 0033:0x7fd5cc15e84e [ 122.698021][ T6155] RSP: 002b:00007fff8d6cc858 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 122.701092][ T6155] RAX: fffffffffffffe00 RBX: 000055556cd0e500 RCX: 00007fd5cc15e84e [ 122.704282][ T6155] RDX: 0000000040000000 RSI: 00007fff8d6cc8fc RDI: ffffffffffffffff [ 122.707599][ T6155] RBP: 00007fff8d6cc8fc R08: 0000000000000000 R09: 0000000000000000 [ 122.710908][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 122.713455][ T6155] R13: 000055556cd219f0 R14: 000000000000cb38 R15: 00007fff8d6cc950 [ 122.715928][ T6155] [ 122.717035][ T6155] task:syz.3.4 state:R running task stack:24808 pid:5897 tgid:5895 ppid:5737 task_flags:0x400140 flags:0x00080003 [ 122.721234][ T6155] Call Trace: [ 122.722299][ T6155] [ 122.723230][ T6155] __schedule+0x125c/0x6730 [ 122.724671][ T6155] ? __pfx___schedule+0x10/0x10 [ 122.726687][ T6155] ? find_held_lock+0x2b/0x80 [ 122.728585][ T6155] ? schedule+0x225/0x2c0 [ 122.730319][ T6155] schedule+0xdd/0x2c0 [ 122.731948][ T6155] schedule_hrtimeout_range_clock+0x213/0x310 [ 122.734344][ T6155] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 122.737000][ T6155] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 122.739056][ T6155] ? ktime_get+0x22c/0x320 [ 122.740845][ T6155] ? lockdep_hardirqs_on+0x78/0x100 [ 122.742920][ T6155] ? ktime_get+0x23e/0x320 [ 122.744708][ T6155] usleep_range_state+0x18b/0x240 [ 122.746787][ T6155] ? usleep_range_state+0xf3/0x240 [ 122.748838][ T6155] ? __pfx_usleep_range_state+0x10/0x10 [ 122.751047][ T6155] ? usleep_range_state+0x1a5/0x240 [ 122.753103][ T6155] qca_setup+0xa61/0x2ce0 [ 122.754891][ T6155] ? __pfx_qca_setup+0x10/0x10 [ 122.756865][ T6155] ? hci_sock_dev_event+0xb6/0x630 [ 122.758921][ T6155] ? __pfx_qca_setup+0x10/0x10 [ 122.760831][ T6155] hci_uart_setup+0x227/0x4d0 [ 122.762743][ T6155] ? __pfx_hci_uart_setup+0x10/0x10 [ 122.764818][ T6155] hci_dev_open_sync+0x3f5/0x25c0 [ 122.766950][ T6155] ? __pfx_hci_dev_open_sync+0x10/0x10 [ 122.769076][ T6155] hci_dev_do_open+0x2a/0xb0 [ 122.770605][ T6155] hci_dev_open+0x1d2/0x350 [ 122.772044][ T6155] ? capable+0xd3/0xf0 [ 122.773334][ T6155] hci_sock_ioctl+0x61a/0x7e0 [ 122.774826][ T6155] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 122.776535][ T6155] ? tomoyo_path_number_perm+0x188/0x580 [ 122.778304][ T6155] sock_do_ioctl+0x118/0x280 [ 122.779832][ T6155] ? __pfx_sock_do_ioctl+0x10/0x10 [ 122.781450][ T6155] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.783221][ T6155] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 122.785351][ T6155] sock_ioctl+0x599/0x6b0 [ 122.786948][ T6155] ? __pfx_sock_ioctl+0x10/0x10 [ 122.788494][ T6155] ? hook_file_ioctl_common+0x140/0x440 [ 122.790280][ T6155] ? selinux_file_ioctl+0x13b/0x290 [ 122.791912][ T6155] ? selinux_file_ioctl+0xb6/0x290 [ 122.793523][ T6155] ? __pfx_sock_ioctl+0x10/0x10 [ 122.795070][ T6155] __x64_sys_ioctl+0x18e/0x210 [ 122.796701][ T6155] do_syscall_64+0x115/0x870 [ 122.798165][ T6155] ? clear_bhb_loop+0x40/0x90 [ 122.799682][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.801529][ T6155] RIP: 0033:0x7f317879e019 [ 122.802938][ T6155] RSP: 002b:00007f31795fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.805537][ T6155] RAX: ffffffffffffffda RBX: 00007f3178a25fa0 RCX: 00007f317879e019 [ 122.808066][ T6155] RDX: 0000200000000004 RSI: 00000000400448c9 RDI: 0000000000000005 [ 122.810562][ T6155] RBP: 00007f317883500c R08: 0000000000000000 R09: 0000000000000000 [ 122.813003][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.815514][ T6155] R13: 00007f3178a26038 R14: 00007f3178a25fa0 R15: 00007ffc6f2aab18 [ 122.818042][ T6155] [ 122.819031][ T6155] task:syz.2.9 state:D stack:26120 pid:5918 tgid:5917 ppid:5741 task_flags:0x400140 flags:0x00080002 [ 122.822766][ T6155] Call Trace: [ 122.823823][ T6155] [ 122.824764][ T6155] __schedule+0x125c/0x6730 [ 122.826207][ T6155] ? __pfx___schedule+0x10/0x10 [ 122.827853][ T6155] ? find_held_lock+0x2b/0x80 [ 122.829384][ T6155] ? schedule+0x225/0x2c0 [ 122.830766][ T6155] schedule+0xdd/0x2c0 [ 122.832070][ T6155] do_uevent+0x427/0x530 [ 122.833408][ T6155] ? __pfx_do_uevent+0x10/0x10 [ 122.834922][ T6155] ? __dlm_new_lockspace+0x1689/0x1fa0 [ 122.836784][ T6155] ? dlm_new_user_lockspace+0x60/0x90 [ 122.838414][ T6155] ? device_write+0x930/0x1c90 [ 122.839947][ T6155] ? __pfx_autoremove_wake_function+0x10/0x10 [ 122.841857][ T6155] __dlm_new_lockspace+0x1698/0x1fa0 [ 122.843432][ T6155] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 122.845105][ T6155] ? __pfx_autoremove_wake_function+0x10/0x10 [ 122.846980][ T6155] ? rcu_is_watching+0x12/0xc0 [ 122.848420][ T6155] dlm_new_user_lockspace+0x60/0x90 [ 122.850023][ T6155] device_write+0x930/0x1c90 [ 122.851424][ T6155] ? avc_policy_seqno+0x9/0x20 [ 122.852960][ T6155] ? __pfx_device_write+0x10/0x10 [ 122.854558][ T6155] ? bpf_lsm_file_permission+0x9/0x10 [ 122.856180][ T6155] ? security_file_permission+0x76/0x210 [ 122.857939][ T6155] ? rw_verify_area+0xce/0x6d0 [ 122.859384][ T6155] vfs_write+0x2aa/0x1050 [ 122.860667][ T6155] ? __pfx_device_write+0x10/0x10 [ 122.862273][ T6155] ? __pfx_vfs_write+0x10/0x10 [ 122.863744][ T6155] ? find_held_lock+0x2b/0x80 [ 122.865163][ T6155] ? __fget_files+0x215/0x3d0 [ 122.866772][ T6155] ? __fget_files+0x215/0x3d0 [ 122.868281][ T6155] ? __fget_files+0x21f/0x3d0 [ 122.869846][ T6155] ksys_write+0x12a/0x250 [ 122.871214][ T6155] ? __pfx_ksys_write+0x10/0x10 [ 122.872745][ T6155] do_syscall_64+0x115/0x870 [ 122.874213][ T6155] ? clear_bhb_loop+0x40/0x90 [ 122.875696][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.877647][ T6155] RIP: 0033:0x7fd5cc19e019 [ 122.879065][ T6155] RSP: 002b:00007fd5cd107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.881704][ T6155] RAX: ffffffffffffffda RBX: 00007fd5cc425fa0 RCX: 00007fd5cc19e019 [ 122.884272][ T6155] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000007 [ 122.886897][ T6155] RBP: 00007fd5cc23500c R08: 0000000000000000 R09: 0000000000000000 [ 122.889421][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.892438][ T6155] R13: 00007fd5cc426038 R14: 00007fd5cc425fa0 R15: 00007fff8d6cc558 [ 122.895525][ T6155] [ 122.896906][ T6155] task:syz-executor state:S stack:23568 pid:6004 tgid:6004 ppid:1 task_flags:0x40054c flags:0x00080001 [ 122.901548][ T6155] Call Trace: [ 122.902751][ T6155] [ 122.903664][ T6155] __schedule+0x125c/0x6730 [ 122.905043][ T6155] ? __pfx___schedule+0x10/0x10 [ 122.906583][ T6155] ? find_held_lock+0x2b/0x80 [ 122.907970][ T6155] ? schedule+0x225/0x2c0 [ 122.909290][ T6155] schedule+0xdd/0x2c0 [ 122.910510][ T6155] do_wait+0x1a7/0x570 [ 122.911723][ T6155] kernel_wait4+0x16d/0x280 [ 122.913072][ T6155] ? __pfx_kernel_wait4+0x10/0x10 [ 122.914572][ T6155] ? lockdep_hardirqs_on+0x78/0x100 [ 122.916122][ T6155] ? __pfx_child_wait_callback+0x10/0x10 [ 122.917872][ T6155] ? find_held_lock+0x2b/0x80 [ 122.919268][ T6155] ? zap_pid_ns_processes+0x286/0x6a0 [ 122.920842][ T6155] ? zap_pid_ns_processes+0x286/0x6a0 [ 122.922444][ T6155] zap_pid_ns_processes+0x2ca/0x6a0 [ 122.923986][ T6155] ? do_raw_write_lock+0x11e/0x260 [ 122.925507][ T6155] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 122.927258][ T6155] ? do_exit+0x2205/0x2ae0 [ 122.928592][ T6155] ? rcu_is_watching+0x12/0xc0 [ 122.930166][ T6155] do_exit+0x2377/0x2ae0 [ 122.931463][ T6155] ? __pfx_do_exit+0x10/0x10 [ 122.933185][ T6155] ? do_raw_spin_lock+0x128/0x260 [ 122.935159][ T6155] ? find_held_lock+0x2b/0x80 [ 122.937138][ T6155] ? get_signal+0x7e0/0x21e0 [ 122.938994][ T6155] do_group_exit+0xd5/0x2a0 [ 122.940832][ T6155] get_signal+0x1ec7/0x21e0 [ 122.942639][ T6155] ? kernel_wait4+0x1d6/0x280 [ 122.944503][ T6155] ? __pfx_kernel_wait4+0x10/0x10 [ 122.946615][ T6155] ? __pfx_child_wait_callback+0x10/0x10 [ 122.948819][ T6155] ? __pfx_get_signal+0x10/0x10 [ 122.950795][ T6155] arch_do_signal_or_restart+0x91/0x7e0 [ 122.952960][ T6155] ? __pfx___do_sys_wait4+0x10/0x10 [ 122.955000][ T6155] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.957629][ T6155] exit_to_user_mode_loop+0x139/0x6f0 [ 122.959889][ T6155] ? rcu_is_watching+0x12/0xc0 [ 122.961857][ T6155] do_syscall_64+0x666/0x870 [ 122.963717][ T6155] ? clear_bhb_loop+0x40/0x90 [ 122.965599][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.968098][ T6155] RIP: 0033:0x7f2ef695e84e [ 122.969695][ T6155] RSP: 002b:00007fff34a15e98 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 122.972727][ T6155] RAX: fffffffffffffe00 RBX: 000055556f0c3500 RCX: 00007f2ef695e84e [ 122.975102][ T6155] RDX: 0000000040000000 RSI: 00007fff34a15f3c RDI: ffffffffffffffff [ 122.977612][ T6155] RBP: 00007fff34a15f3c R08: 0000000000000000 R09: 0000000000000000 [ 122.980008][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.982423][ T6155] R13: 000055556f0d69f0 R14: 000000000001149c R15: 00007fff34a15f90 [ 122.984778][ T6155] [ 122.986440][ T6155] OOM killer enabled. [ 122.988146][ T6155] Restarting tasks: Starting [ 122.996639][ T6155] Restarting tasks: Done [ 123.008689][ T6155] PM: hibernation: hibernation exit [ 123.031452][ T42] audit: type=1400 audit(1785856486.967:324): avc: denied { write } for pid=6317 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.090369][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 123.211435][ T42] audit: type=1400 audit(1785856487.147:325): avc: denied { write } for pid=6326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.242476][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.247080][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.249966][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.252998][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.256117][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.305521][ T42] audit: type=1400 audit(1785856487.237:326): avc: denied { write } for pid=6332 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.353210][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 123.399677][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.407217][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.408349][ T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.414368][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.414673][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.419590][ T5753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.420699][ T64] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.426124][ T5753] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.431311][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.431443][ T5753] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.431697][ T64] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.432208][ T64] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.432772][ T64] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.433114][ T64] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.440629][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.466179][ T42] audit: type=1400 audit(1785856487.397:327): avc: denied { write } for pid=6350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.495121][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.508103][ T42] audit: type=1400 audit(1785856487.447:328): avc: denied { write } for pid=6358 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.543795][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 123.596859][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.626086][ T42] audit: type=1400 audit(1785856487.557:329): avc: denied { write } for pid=6372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.667438][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.669343][ T42] audit: type=1400 audit(1785856487.607:330): avc: denied { write } for pid=6380 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.708531][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 123.768610][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.998422][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.000962][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.003370][ T6330] bridge_slave_0: entered allmulticast mode [ 124.006168][ T6330] bridge_slave_0: entered promiscuous mode [ 124.034722][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.037164][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.039685][ T6330] bridge_slave_1: entered allmulticast mode [ 124.042393][ T6330] bridge_slave_1: entered promiscuous mode [ 124.091008][ T13] bridge_slave_1: left allmulticast mode [ 124.092847][ T13] bridge_slave_1: left promiscuous mode [ 124.094747][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.098597][ T13] bridge_slave_0: left allmulticast mode [ 124.100440][ T13] bridge_slave_0: left promiscuous mode [ 124.102230][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.183970][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.191844][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.195312][ T13] bond0 (unregistering): Released all slaves [ 124.210226][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.233463][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.264786][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.267118][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.269455][ T6348] bridge_slave_0: entered allmulticast mode [ 124.272784][ T6348] bridge_slave_0: entered promiscuous mode [ 124.295367][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.297881][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.300194][ T6348] bridge_slave_1: entered allmulticast mode [ 124.302857][ T6348] bridge_slave_1: entered promiscuous mode [ 124.310144][ T6330] team0: Port device team_slave_0 added [ 124.347731][ T6330] team0: Port device team_slave_1 added [ 124.372344][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.376905][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.383677][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.386025][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.388549][ T6342] bridge_slave_0: entered allmulticast mode [ 124.392595][ T6342] bridge_slave_0: entered promiscuous mode [ 124.429657][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.432699][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.435801][ T6342] bridge_slave_1: entered allmulticast mode [ 124.440627][ T6342] bridge_slave_1: entered promiscuous mode [ 124.453349][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.455620][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.463717][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.501886][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.504124][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.512392][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.521549][ T6348] team0: Port device team_slave_0 added [ 124.530402][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.535672][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.541105][ T6348] team0: Port device team_slave_1 added [ 124.606333][ T42] audit: type=1400 audit(1785856488.537:331): avc: denied { write } for pid=6419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.611245][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.615839][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.623323][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.626970][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.629328][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.631674][ T6343] bridge_slave_0: entered allmulticast mode [ 124.634428][ T6343] bridge_slave_0: entered promiscuous mode [ 124.646842][ T13] hsr_slave_0: left promiscuous mode [ 124.649041][ T13] hsr_slave_1: left promiscuous mode [ 124.651093][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.653421][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.656129][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.658941][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.662952][ T42] audit: type=1400 audit(1785856488.597:332): avc: denied { write } for pid=6424 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.670479][ T13] veth1_macvtap: left promiscuous mode [ 124.672242][ T13] veth0_macvtap: left promiscuous mode [ 124.674097][ T13] veth1_vlan: left promiscuous mode [ 124.675748][ T13] veth0_vlan: left promiscuous mode [ 124.795223][ T13] team0 (unregistering): Port device team_slave_1 removed [ 124.803427][ T13] team0 (unregistering): Port device team_slave_0 removed [ 124.858909][ T6330] hsr_slave_0: entered promiscuous mode [ 124.861169][ T6330] hsr_slave_1: entered promiscuous mode [ 124.867385][ T6342] team0: Port device team_slave_0 added [ 124.870938][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.873684][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.883192][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.888253][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.892689][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.896111][ T6343] bridge_slave_1: entered allmulticast mode [ 124.902247][ T6343] bridge_slave_1: entered promiscuous mode [ 124.907844][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 124.912953][ T6342] team0: Port device team_slave_1 added [ 124.969544][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.974878][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.978618][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.980861][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.989227][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.021009][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.023216][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.031909][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.047063][ T6348] hsr_slave_0: entered promiscuous mode [ 125.050256][ T6348] hsr_slave_1: entered promiscuous mode [ 125.053248][ T6348] debugfs: 'hsr0' already exists in 'hsr' [ 125.055636][ T6348] Cannot create hsr debugfs directory [ 125.069303][ T6343] team0: Port device team_slave_0 added [ 125.084621][ T6343] team0: Port device team_slave_1 added [ 125.090913][ T42] audit: type=1400 audit(1785856489.027:333): avc: denied { write } for pid=6427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.164604][ T6342] hsr_slave_0: entered promiscuous mode [ 125.167001][ T6342] hsr_slave_1: entered promiscuous mode [ 125.169486][ T6342] debugfs: 'hsr0' already exists in 'hsr' [ 125.171334][ T6342] Cannot create hsr debugfs directory [ 125.175779][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.178855][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.189459][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.220089][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.223021][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.233581][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.262722][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 125.316663][ T5749] Bluetooth: hci0: command tx timeout [ 125.407589][ T6343] hsr_slave_0: entered promiscuous mode [ 125.410006][ T6343] hsr_slave_1: entered promiscuous mode [ 125.412119][ T6343] debugfs: 'hsr0' already exists in 'hsr' [ 125.413925][ T6343] Cannot create hsr debugfs directory [ 125.476749][ T5096] Bluetooth: hci5: command tx timeout [ 125.479763][ T5740] Bluetooth: hci6: command tx timeout [ 125.483876][ T5749] Bluetooth: hci1: command tx timeout [ 125.564091][ T6330] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 125.579119][ T6330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.581845][ T6330] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 125.586901][ T6330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.589536][ T6330] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 125.594989][ T6330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.637551][ T6330] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 125.642937][ T6330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.680336][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 125.740804][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.752825][ T6330] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.761965][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.764005][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.772664][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.774949][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.912236][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 126.064871][ T6342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.100804][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 126.131050][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.160466][ T6342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.232771][ T6342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.305262][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13 [ 126.314104][ T6330] veth0_vlan: entered promiscuous mode [ 126.322803][ T6330] veth1_vlan: entered promiscuous mode [ 126.343465][ T6342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.375250][ T6330] veth0_macvtap: entered promiscuous mode [ 126.379833][ T6330] veth1_macvtap: entered promiscuous mode [ 126.388866][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.395234][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.454439][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.457903][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.472315][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.479431][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.492944][ T5789] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.497124][ T5789] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.517542][ T5449] 8021q: adding VLAN 0 to HW filter on device eth14 [ 126.561530][ T6342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.567695][ T6342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.573180][ T6342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.578231][ T6342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.581118][ T6342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.586274][ T6342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.593689][ T6342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.598055][ T6342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.636638][ T6414] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.650896][ T6348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.655027][ T6348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.659013][ T6348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.662839][ T6348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.666613][ T6348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.670814][ T6348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.677429][ T6348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.681608][ T6348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.719342][ T5449] 8021q: adding VLAN 0 to HW filter on device eth18 [ 126.746014][ T6343] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 126.750590][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.757404][ T6343] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 126.761144][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.763877][ T6343] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 126.769168][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.772273][ T6343] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 126.779922][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.786617][ T61] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 126.810609][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.832737][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.847944][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.850320][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.861306][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.863727][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.877388][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.900409][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.919813][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.922166][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.934343][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.941626][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.943991][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.947658][ T61] usb 13-1: not running at top speed; connect to a high speed hub [ 126.951322][ T6342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.952605][ T61] usb 13-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 126.956655][ T5449] 8021q: adding VLAN 0 to HW filter on device eth16 [ 126.957557][ T61] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.971638][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.006346][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.008784][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.023717][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.026032][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.088763][ T6343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.107246][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.198437][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17 [ 127.233280][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.272200][ T6342] veth0_vlan: entered promiscuous mode [ 127.281109][ T6342] veth1_vlan: entered promiscuous mode [ 127.304268][ T6342] veth0_macvtap: entered promiscuous mode [ 127.310252][ T6342] veth1_macvtap: entered promiscuous mode [ 127.322502][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.336155][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.344898][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.350045][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.369362][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.392002][ T5449] 8021q: adding VLAN 0 to HW filter on device eth19 [ 127.396897][ T5749] Bluetooth: hci0: command tx timeout [ 127.433422][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.439052][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.446673][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.463454][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.468786][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.472956][ T6348] veth0_vlan: entered promiscuous mode [ 127.476570][ T6414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.485577][ T6348] veth1_vlan: entered promiscuous mode [ 127.509638][ T6348] veth0_macvtap: entered promiscuous mode [ 127.514508][ T6348] veth1_macvtap: entered promiscuous mode [ 127.523794][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.540057][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.566730][ T5749] Bluetooth: hci1: command tx timeout [ 127.568464][ T5749] Bluetooth: hci5: command tx timeout [ 127.571343][ T5096] Bluetooth: hci6: command tx timeout [ 127.616906][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.628292][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.671157][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.679435][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.679882][ T6572] scsi host6: ata_generic [ 127.691338][ T6343] veth0_vlan: entered promiscuous mode [ 127.706176][ T6572] scsi host7: ata_generic [ 127.721608][ T5449] 8021q: adding VLAN 0 to HW filter on device eth15 [ 127.722758][ T6572] ata7: PATA max UDMA/100 cmd 0xc0a0 ctl 0xfeaf5000 bmdma 0x380800004000 irq 23 lpm-pol 0 [ 127.733026][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.733639][ T6343] veth1_vlan: entered promiscuous mode [ 127.734677][ T6572] ata8: DUMMY [ 127.740739][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.769867][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.775600][ T6343] veth0_macvtap: entered promiscuous mode [ 127.780638][ T6343] veth1_macvtap: entered promiscuous mode [ 127.787595][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.788089][ T6580] loop1: detected capacity change from 0 to 128 [ 127.791717][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.800804][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.805774][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.807896][ T6580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.822852][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.825742][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.840587][ T6584] jffs2: notice: (6584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 127.856639][ T5789] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.875289][ T6580] md: invalid superblock checksum on loop1 [ 127.878725][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.886115][ T6580] md: loop1 does not have a valid v1.1 superblock, not importing! [ 127.953188][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.958640][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.991987][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.994645][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.002688][ T6598] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 128.009860][ T5449] 8021q: adding VLAN 0 to HW filter on device eth20 [ 128.082220][ T5749] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:200' [ 128.088957][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 128.088970][ T42] audit: type=1400 audit(1785856492.027:369): avc: denied { read } for pid=6606 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.089800][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: kworker/u34:6 Not tainted syzkaller #0 PREEMPT(full) [ 128.089831][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.089846][ T5749] Workqueue: hci5 hci_rx_work [ 128.089878][ T5749] Call Trace: [ 128.089885][ T5749] [ 128.089894][ T5749] dump_stack_lvl+0x100/0x190 [ 128.089922][ T5749] sysfs_warn_dup.cold+0x1c/0x28 [ 128.089949][ T5749] sysfs_create_dir_ns+0x24b/0x2b0 [ 128.089969][ T5749] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.089986][ T5749] ? find_held_lock+0x2b/0x80 [ 128.090003][ T5749] ? kobject_add_internal+0x25f/0x930 [ 128.090033][ T5749] ? kobject_add_internal+0x25f/0x930 [ 128.090065][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.090094][ T5749] kobject_add_internal+0x2c8/0x930 [ 128.090125][ T5749] kobject_add+0x16a/0x1e0 [ 128.090155][ T5749] ? __pfx_kobject_add+0x10/0x10 [ 128.090182][ T5749] ? class_to_subsys+0x10f/0x150 [ 128.090215][ T5749] ? kobject_put+0xb9/0x640 [ 128.090242][ T5749] ? _raw_spin_unlock+0x28/0x50 [ 128.090271][ T5749] device_add+0x294/0x1970 [ 128.090301][ T5749] ? __pfx_dev_set_name+0x10/0x10 [ 128.090321][ T5749] ? __pfx_device_add+0x10/0x10 [ 128.090348][ T5749] ? mgmt_send_event_skb+0x2fb/0x460 [ 128.090379][ T5749] hci_conn_add_sysfs+0x1a3/0x260 [ 128.090406][ T5749] le_conn_complete_evt+0x11eb/0x1f60 [ 128.090433][ T5749] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.090460][ T5749] ? hci_event_packet+0x186/0xcd0 [ 128.090489][ T5749] hci_le_conn_complete_evt+0x23c/0x3a0 [ 128.090514][ T5749] ? skb_pull_data+0x15f/0x1e0 [ 128.090547][ T5749] hci_le_meta_evt+0x34a/0x5f0 [ 128.090574][ T5749] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 128.090599][ T5749] hci_event_packet+0x51c/0xcd0 [ 128.090621][ T5749] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.090644][ T5749] ? __pfx_hci_event_packet+0x10/0x10 [ 128.090667][ T5749] ? kcov_remote_start+0x384/0x670 [ 128.090690][ T5749] ? lockdep_hardirqs_on+0x78/0x100 [ 128.090718][ T5749] hci_rx_work+0x451/0xfc0 [ 128.090744][ T5749] process_one_work+0xa23/0x1940 [ 128.090775][ T5749] ? __pfx_process_one_work+0x10/0x10 [ 128.090806][ T5749] ? __pfx_hci_rx_work+0x10/0x10 [ 128.090833][ T5749] worker_thread+0x5ef/0xe50 [ 128.090862][ T5749] ? kthread+0x13a/0x450 [ 128.090880][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 128.090900][ T5749] kthread+0x370/0x450 [ 128.090917][ T5749] ? __pfx_kthread+0x10/0x10 [ 128.090937][ T5749] ret_from_fork+0x72b/0xd50 [ 128.090964][ T5749] ? __pfx_ret_from_fork+0x10/0x10 [ 128.090990][ T5749] ? __switch_to+0x800/0x10f0 [ 128.091009][ T5749] ? __pfx_kthread+0x10/0x10 [ 128.091027][ T5749] ret_from_fork_asm+0x1a/0x30 [ 128.091068][ T5749] [ 128.091206][ T5749] kobject: kobject_add_internal failed for hci5:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.109710][ T42] audit: type=1400 audit(1785856492.027:370): avc: denied { read open } for pid=6606 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.110417][ T5749] Bluetooth: hci5: failed to register connection device [ 128.113968][ T42] audit: type=1400 audit(1785856492.027:371): avc: denied { getattr } for pid=6606 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.113997][ T42] audit: type=1400 audit(1785856492.037:372): avc: denied { write } for pid=6601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.114018][ T42] audit: type=1400 audit(1785856492.037:373): avc: denied { add_name } for pid=6601 comm="dhcpcd-run-hook" name="resolv.conf.eth21.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.147592][ T6613] dummy_hcd dummy_hcd.0: remove, state 4 [ 128.178258][ T42] audit: type=1400 audit(1785856492.117:374): avc: denied { write } for pid=6614 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.180259][ T6613] usb usb5: USB disconnect, device number 1 [ 128.221002][ T5449] 8021q: adding VLAN 0 to HW filter on device eth21 [ 128.247889][ T6613] dummy_hcd dummy_hcd.0: stopped [ 128.250041][ T6613] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 128.261343][ T6616] dwc3 dummy_hcd.0: missing memory resource [ 128.329774][ T42] audit: type=1400 audit(1785856492.267:375): avc: denied { write } for pid=6620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.370615][ T42] audit: type=1400 audit(1785856492.307:376): avc: denied { write } for pid=6624 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.377487][ T1352] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 128.402549][ T5449] 8021q: adding VLAN 0 to HW filter on device eth22 [ 128.473957][ T42] audit: type=1400 audit(1785856492.407:377): avc: denied { write } for pid=6629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.520422][ T42] audit: type=1400 audit(1785856492.457:378): avc: denied { write } for pid=6632 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.529174][ T1352] usb 6-1: not running at top speed; connect to a high speed hub [ 128.533641][ T1352] usb 6-1: config index 0 descriptor too short (expected 161, got 153) [ 128.538573][ T1352] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 128.541878][ T1352] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 128.544703][ T1352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.555359][ T1352] gspca_main: spca501-2.14.0 probing 0000:0000 [ 128.565690][ T5449] 8021q: adding VLAN 0 to HW filter on device eth23 [ 128.678840][ T6640] jffs2: notice: (6640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 128.686727][ T6051] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 128.712968][ T5449] 8021q: adding VLAN 0 to HW filter on device eth24 [ 128.760774][ T6647] loop1: detected capacity change from 0 to 128 [ 128.770996][ T6647] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.818051][ T6647] md: invalid superblock checksum on loop1 [ 128.820017][ T6647] md: loop1 does not have a valid v1.1 superblock, not importing! [ 128.839986][ T6051] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 128.843873][ T6051] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 128.850019][ T6051] usb 8-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 128.856241][ T6051] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.862154][ T6051] usb 8-1: Product: syz [ 128.863491][ T6051] usb 8-1: Manufacturer: syz [ 128.868859][ T6051] usb 8-1: SerialNumber: syz [ 128.883528][ T6653] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 128.914573][ T5449] 8021q: adding VLAN 0 to HW filter on device eth25 [ 129.135699][ T6051] snd-usb-caiaq 8-1:1.0: can't set alt interface. [ 129.137902][ T6051] usb 8-1: unable to init card! (ret=-5) [ 129.139948][ T6051] snd-usb-caiaq 8-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 129.148910][ T6051] usb 8-1: USB disconnect, device number 2 [ 129.266855][ T1352] gspca_spca501: reg write: error -110 [ 129.268692][ T1352] spca501 6-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 129.271499][ T1352] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 129.274920][ T1352] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:0000) [ 129.278411][ T1352] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 129.281926][ T1352] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 129.284860][ T1352] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 129.288429][ T1352] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -5 [ 129.317623][ T5887] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 129.408968][ T6685] cxacru 13-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 129.413492][ T6685] cxacru 13-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 129.469542][ T5887] usb 14-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 129.472712][ T5887] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.475284][ T5887] usb 14-1: Product: syz [ 129.476871][ T5749] Bluetooth: hci0: command tx timeout [ 129.478864][ T5887] usb 14-1: Manufacturer: syz [ 129.480447][ T5887] usb 14-1: SerialNumber: syz [ 129.648262][ T5749] Bluetooth: hci5: command tx timeout [ 129.648371][ T5096] Bluetooth: hci6: command tx timeout [ 129.648451][ T5753] Bluetooth: hci1: command tx timeout [ 129.957134][ T6052] usb 6-1: USB disconnect, device number 2 [ 129.959987][ C0] usb 14-1: received EP1 urb->status = -2 [ 129.961802][ T5887] usb 14-1: unable to init card! (ret=-110) [ 129.963868][ T5887] snd-usb-caiaq 14-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 130.246554][ T5887] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 130.397364][ T5887] usb 8-1: not running at top speed; connect to a high speed hub [ 130.401084][ T5887] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 130.404020][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.413597][ T5887] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 130.736645][ T6051] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 130.898617][ T6051] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00 [ 130.901643][ T6051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.023444][ T6051] mvusb_mdio 6-1:1.0: probe with driver mvusb_mdio failed with error -5 [ 131.171009][ T29] usb 13-1: USB disconnect, device number 2 [ 131.209332][ T6738] jffs2: notice: (6738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 131.716657][ T5753] Bluetooth: hci6: command tx timeout [ 131.716760][ T5744] Bluetooth: hci5: command 0x0419 tx timeout [ 131.718347][ T5096] Bluetooth: hci1: command tx timeout [ 132.122704][ T6754] loop1: detected capacity change from 0 to 128 [ 132.130095][ T6754] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.169257][ T6754] md: invalid superblock checksum on loop1 [ 132.171799][ T6754] md: loop1 does not have a valid v1.1 superblock, not importing! [ 132.209423][ T6756] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 132.514545][ T5887] usb 14-1: USB disconnect, device number 2 [ 132.678489][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.680678][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.231390][ T5887] usb 8-1: USB disconnect, device number 3 [ 133.252431][ T6772] jffs2: notice: (6772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 133.258818][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 133.258827][ T42] audit: type=1400 audit(1785856497.197:410): avc: denied { write } for pid=6771 comm="syz.3.94" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.398381][ T5749] Bluetooth: hci0: command 0x2016 tx timeout [ 133.499198][ T6222] usb 6-1: USB disconnect, device number 3 [ 133.531290][ T6777] loop1: detected capacity change from 0 to 128 [ 133.538845][ T42] audit: type=1400 audit(1785856497.477:411): avc: denied { unmount } for pid=6343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.545625][ T6777] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.597575][ T6777] md: invalid superblock checksum on loop1 [ 133.599944][ T6777] md: loop1 does not have a valid v1.1 superblock, not importing! [ 133.626584][ T5887] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 133.631125][ T42] audit: type=1800 audit(1785856497.567:412): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.98" name="zoned" dev="configfs" ino=17089 res=0 errno=0 [ 133.637503][ T6781] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 133.641478][ T42] audit: type=1800 audit(1785856497.567:413): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.98" name="zone_nr_conv" dev="configfs" ino=17090 res=0 errno=0 [ 133.648539][ T42] audit: type=1800 audit(1785856497.567:414): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.98" name="zoned" dev="configfs" ino=17091 res=0 errno=0 [ 133.655058][ T42] audit: type=1800 audit(1785856497.567:415): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.98" name="zone_nr_conv" dev="configfs" ino=17092 res=0 errno=0 [ 133.778391][ T5887] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 133.783351][ T5887] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 133.786227][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.788941][ T5887] usb 8-1: Product: syz [ 133.790297][ T5887] usb 8-1: Manufacturer: syz [ 133.791785][ T5887] usb 8-1: SerialNumber: syz [ 133.796770][ T5740] Bluetooth: hci5: command 0x0419 tx timeout [ 133.801108][ T5887] go7007 8-1:1.0: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 133.804531][ T5887] go7007 8-1:1.0: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 133.816576][ T6051] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 133.987674][ T6051] usb 14-1: not running at top speed; connect to a high speed hub [ 133.991793][ T6051] usb 14-1: config 0 has an invalid interface number: 143 but max is 0 [ 133.994475][ T6051] usb 14-1: config 0 has no interface number 0 [ 133.996409][ T6051] usb 14-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 133.999356][ T6051] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.003759][ T6051] usb 14-1: config 0 descriptor?? [ 134.117453][ T6051] viperboard 14-1:0.143: version 0.00 found at bus 014 address 003 [ 134.135615][ T6051] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 134.138883][ T6051] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 134.816712][ T6783] NFSD: Unable to initialize client recovery tracking! (-110) [ 134.819841][ T6783] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 134.823444][ T6783] NFSD: starting 90-second grace period (net f00004bc) [ 135.175936][ T6802] vivid-000: unregistering video7 [ 135.179298][ T6802] vivid-000: unregistering video8 [ 135.183365][ T6802] vivid-000: unregistering vbi0 [ 135.199787][ T6802] vivid-000: unregistering vbi1 [ 135.219645][ T6051] usb 14-1: USB disconnect, device number 3 [ 135.227387][ T6802] vivid-000: unregistering swradio0 [ 135.235620][ T6802] vivid-000: unregistering radio0 [ 135.245088][ T6802] vivid-000: unregistering radio1 [ 135.258337][ T6802] vivid-000: unregistering video9 [ 135.266320][ T6802] vivid-000: unregistering video10 [ 135.270094][ T6802] vivid-000: unregistering v4l-touch0 [ 135.281647][ T6805] vim2m vim2m.0: Removing vim2m [ 135.335842][ T6809] vicodec vicodec.0: Removing vicodec [ 135.361420][ T6802] vivid-001: unregistering video11 [ 135.371911][ T6802] vivid-001: unregistering video12 [ 135.378464][ T6802] vivid-001: unregistering vbi2 [ 135.385861][ T6802] vivid-001: unregistering vbi3 [ 135.398518][ T6802] vivid-001: unregistering swradio1 [ 135.424146][ T6802] vivid-001: unregistering radio2 [ 135.443409][ T6802] vivid-001: unregistering radio3 [ 135.451448][ T6802] vivid-001: unregistering video13 [ 135.454190][ T6802] vivid-001: unregistering video14 [ 135.460445][ T6802] vivid-001: unregistering v4l-touch1 [ 135.478623][ T5740] Bluetooth: hci0: command 0x2016 tx timeout [ 135.492902][ T6802] vivid-002: unregistering video15 [ 135.495748][ T6802] vivid-002: unregistering video16 [ 135.498459][ T6802] vivid-002: unregistering vbi4 [ 135.504949][ T6802] vivid-002: unregistering vbi5 [ 135.508957][ T6802] vivid-002: unregistering swradio2 [ 135.514164][ T6802] vivid-002: unregistering radio4 [ 135.521596][ T6802] vivid-002: unregistering radio5 [ 135.527890][ T6802] vivid-002: unregistering video17 [ 135.531892][ T6802] vivid-002: unregistering video18 [ 135.534277][ T6802] vivid-002: unregistering v4l-touch2 [ 135.556625][ T6802] vivid-003: unregistering video19 [ 135.559310][ T6802] vivid-003: unregistering video20 [ 135.563951][ T6802] vivid-003: unregistering vbi6 [ 135.568141][ T6802] vivid-003: unregistering vbi7 [ 135.578148][ T6802] vivid-003: unregistering swradio3 [ 135.581368][ T6802] vivid-003: unregistering radio6 [ 135.585689][ T6802] vivid-003: unregistering radio7 [ 135.589537][ T6802] vivid-003: unregistering video21 [ 135.592187][ T6802] vivid-003: unregistering video22 [ 135.597739][ T6802] vivid-003: unregistering v4l-touch3 [ 135.616562][ T6108] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 135.621322][ T6802] vivid-004: unregistering video23 [ 135.623639][ T6802] vivid-004: unregistering video24 [ 135.626329][ T6802] vivid-004: unregistering vbi8 [ 135.634458][ T6802] vivid-004: unregistering vbi9 [ 135.637439][ T6802] vivid-004: unregistering swradio4 [ 135.642096][ T6802] vivid-004: unregistering radio8 [ 135.646165][ T6802] vivid-004: unregistering radio9 [ 135.650228][ T6802] vivid-004: unregistering video25 [ 135.654797][ T6802] vivid-004: unregistering video26 [ 135.660991][ T6802] vivid-004: unregistering v4l-touch4 [ 135.689274][ T6802] vivid-005: unregistering video27 [ 135.691501][ T6802] vivid-005: unregistering video28 [ 135.693969][ T6802] vivid-005: unregistering vbi10 [ 135.703065][ T6802] vivid-005: unregistering vbi11 [ 135.707872][ T6802] vivid-005: unregistering swradio5 [ 135.711826][ T6802] vivid-005: unregistering radio10 [ 135.717668][ T6802] vivid-005: unregistering radio11 [ 135.720297][ T6802] vivid-005: unregistering video29 [ 135.723047][ T6802] vivid-005: unregistering video30 [ 135.726186][ T6802] vivid-005: unregistering v4l-touch5 [ 135.756081][ T6802] vivid-006: unregistering video31 [ 135.762122][ T6802] vivid-006: unregistering video32 [ 135.764993][ T6802] vivid-006: unregistering vbi12 [ 135.771509][ T6802] vivid-006: unregistering vbi13 [ 135.778224][ T6802] vivid-006: unregistering swradio6 [ 135.790620][ T6802] vivid-006: unregistering radio12 [ 135.793572][ T6108] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 135.802319][ T6108] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 135.805396][ T6108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.808706][ T6108] usb 6-1: Product: syz [ 135.810235][ T6108] usb 6-1: Manufacturer: syz [ 135.811767][ T6108] usb 6-1: SerialNumber: syz [ 135.815582][ T6802] vivid-006: unregistering radio13 [ 135.819261][ T6802] vivid-006: unregistering video33 [ 135.821564][ T6805] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.824385][ T6802] vivid-006: unregistering video34 [ 135.829477][ T6802] vivid-006: unregistering v4l-touch6 [ 135.836028][ T6108] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 135.844914][ T6108] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb6/6-1/input/input13 [ 135.855732][ T42] audit: type=1800 audit(1785856499.787:416): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.108" name="zoned" dev="configfs" ino=18091 res=0 errno=0 [ 135.858824][ T6821] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 135.866852][ T42] audit: type=1800 audit(1785856499.787:417): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.108" name="zone_nr_conv" dev="configfs" ino=18092 res=0 errno=0 [ 135.866883][ T42] audit: type=1800 audit(1785856499.797:418): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.108" name="zoned" dev="configfs" ino=18093 res=0 errno=0 [ 135.866904][ T42] audit: type=1800 audit(1785856499.797:419): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.108" name="zone_nr_conv" dev="configfs" ino=18094 res=0 errno=0 [ 135.882510][ T6802] vivid-007: unregistering video35 [ 135.886979][ T5749] Bluetooth: hci5: command 0x0419 tx timeout [ 135.897957][ T6802] vivid-007: unregistering video36 [ 135.901396][ T6802] vivid-007: unregistering vbi14 [ 135.909846][ T6802] vivid-007: unregistering vbi15 [ 135.924963][ T6802] vivid-007: unregistering swradio7 [ 135.943088][ T6802] vivid-007: unregistering radio14 [ 135.950157][ T6802] vivid-007: unregistering radio15 [ 135.955822][ T6802] vivid-007: unregistering video37 [ 135.968577][ T6802] vivid-007: unregistering video38 [ 135.974570][ T6802] vivid-007: unregistering v4l-touch7 [ 136.001613][ T6802] vivid-008: unregistering video39 [ 136.003909][ T6802] vivid-008: unregistering video40 [ 136.009025][ T6802] vivid-008: unregistering vbi16 [ 136.012933][ T6802] vivid-008: unregistering vbi17 [ 136.016089][ T6802] vivid-008: unregistering swradio8 [ 136.021305][ T6802] vivid-008: unregistering radio16 [ 136.025096][ T6802] vivid-008: unregistering radio17 [ 136.029859][ T6802] vivid-008: unregistering video41 [ 136.032311][ T6802] vivid-008: unregistering video42 [ 136.034662][ T6802] vivid-008: unregistering v4l-touch8 [ 136.070651][ T6802] vivid-009: unregistering video43 [ 136.073894][ T6802] vivid-009: unregistering video44 [ 136.078630][ T6802] vivid-009: unregistering vbi18 [ 136.089403][ T6802] vivid-009: unregistering vbi19 [ 136.092640][ T6802] vivid-009: unregistering swradio9 [ 136.096296][ T6802] vivid-009: unregistering radio18 [ 136.099821][ T6802] vivid-009: unregistering radio19 [ 136.102281][ T6802] vivid-009: unregistering video45 [ 136.104953][ T6802] vivid-009: unregistering video46 [ 136.110284][ T6802] vivid-009: unregistering v4l-touch9 [ 136.134761][ T6802] vivid-010: unregistering video47 [ 136.137521][ T6802] vivid-010: unregistering video48 [ 136.139819][ T6802] vivid-010: unregistering vbi20 [ 136.148803][ T6802] vivid-010: unregistering vbi21 [ 136.153473][ T6802] vivid-010: unregistering swradio10 [ 136.158696][ T6802] vivid-010: unregistering radio20 [ 136.163765][ T6802] vivid-010: unregistering radio21 [ 136.166621][ T6802] vivid-010: unregistering video49 [ 136.169390][ T6802] vivid-010: unregistering video50 [ 136.171918][ T6802] vivid-010: unregistering v4l-touch10 [ 136.176592][ T41] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 136.193524][ T6802] vivid-011: unregistering video51 [ 136.195823][ T6802] vivid-011: unregistering video52 [ 136.199469][ T6802] vivid-011: unregistering vbi22 [ 136.206102][ T6802] vivid-011: unregistering vbi23 [ 136.208964][ T6802] vivid-011: unregistering swradio11 [ 136.214549][ T6802] vivid-011: unregistering radio22 [ 136.216898][ T6802] vivid-011: unregistering radio23 [ 136.219181][ T6802] vivid-011: unregistering video53 [ 136.221473][ T6802] vivid-011: unregistering video54 [ 136.228206][ T6802] vivid-011: unregistering v4l-touch11 [ 136.251776][ T6802] vivid-012: unregistering video55 [ 136.254097][ T6802] vivid-012: unregistering video56 [ 136.256672][ T6802] vivid-012: unregistering vbi24 [ 136.263900][ T6802] vivid-012: unregistering vbi25 [ 136.267270][ T6802] vivid-012: unregistering swradio12 [ 136.272486][ T6802] vivid-012: unregistering radio24 [ 136.274904][ T6802] vivid-012: unregistering radio25 [ 136.277211][ T6802] vivid-012: unregistering video57 [ 136.279421][ T6802] vivid-012: unregistering video58 [ 136.282022][ T6802] vivid-012: unregistering v4l-touch12 [ 136.303935][ T6802] vivid-013: unregistering video59 [ 136.306357][ T6802] vivid-013: unregistering video60 [ 136.311169][ T6802] vivid-013: unregistering vbi26 [ 136.317600][ T6802] vivid-013: unregistering vbi27 [ 136.320947][ T6802] vivid-013: unregistering swradio13 [ 136.325549][ T6802] vivid-013: unregistering radio26 [ 136.329209][ T6802] vivid-013: unregistering radio27 [ 136.331923][ T6802] vivid-013: unregistering video61 [ 136.334357][ T6802] vivid-013: unregistering video62 [ 136.337583][ T6802] vivid-013: unregistering v4l-touch13 [ 136.341286][ T41] usb 14-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 136.344189][ T41] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.348070][ T41] usb 14-1: Product: syz [ 136.349481][ T41] usb 14-1: Manufacturer: syz [ 136.351011][ T41] usb 14-1: SerialNumber: syz [ 136.357583][ T41] gspca_main: spca500-2.14.0 probing 046d:0900 [ 136.360062][ T6802] vivid-014: unregistering video63 [ 136.362393][ T6802] vivid-014: unregistering video64 [ 136.365214][ T6802] vivid-014: unregistering vbi28 [ 136.373439][ T6802] vivid-014: unregistering vbi29 [ 136.377695][ T6802] vivid-014: unregistering swradio14 [ 136.383364][ T6802] vivid-014: unregistering radio28 [ 136.387917][ T6802] vivid-014: unregistering radio29 [ 136.391533][ T6802] vivid-014: unregistering video65 [ 136.395259][ T6802] vivid-014: unregistering video66 [ 136.395761][ T6832] Zero length message leads to an empty skb [ 136.401621][ T6802] vivid-014: unregistering v4l-touch14 [ 136.438544][ T6802] vivid-015: unregistering video67 [ 136.442723][ T6802] vivid-015: unregistering video68 [ 136.446444][ T6802] vivid-015: unregistering vbi30 [ 136.450321][ T6802] vivid-015: unregistering vbi31 [ 136.454248][ T6802] vivid-015: unregistering swradio15 [ 136.458736][ T6802] vivid-015: unregistering radio30 [ 136.463660][ T6802] vivid-015: unregistering radio31 [ 136.470037][ T6802] vivid-015: unregistering video69 [ 136.470623][ T6836] UDC core: g1: couldn't find an available UDC or it's busy [ 136.473344][ T6802] vivid-015: unregistering video70 [ 136.481678][ T6802] vivid-015: unregistering v4l-touch15 [ 136.499633][ T6802] vivid-016: unregistering video71 [ 136.502298][ T6802] vivid-016: unregistering video72 [ 136.505428][ T6802] vivid-016: unregistering vbi32 [ 136.509669][ T6802] vivid-016: unregistering vbi33 [ 136.512621][ T6802] vivid-016: unregistering swradio16 [ 136.515919][ T6802] vivid-016: unregistering radio32 [ 136.519844][ T6802] vivid-016: unregistering radio33 [ 136.522312][ T6802] vivid-016: unregistering video73 [ 136.524766][ T6802] vivid-016: unregistering video74 [ 136.527945][ T6802] vivid-016: unregistering v4l-touch16 [ 136.548720][ T6802] vivid-017: unregistering video75 [ 136.551253][ T6802] vivid-017: unregistering video76 [ 136.555848][ T6802] vivid-017: unregistering vbi34 [ 136.560796][ T6802] vivid-017: unregistering vbi35 [ 136.563119][ T6802] vivid-017: unregistering swradio17 [ 136.565883][ T6802] vivid-017: unregistering radio34 [ 136.570377][ T6802] vivid-017: unregistering radio35 [ 136.573191][ T6802] vivid-017: unregistering video77 [ 136.575571][ T6802] vivid-017: unregistering video78 [ 136.578677][ T6802] vivid-017: unregistering v4l-touch17 [ 136.605627][ T6802] vivid-018: unregistering video79 [ 136.609762][ T6802] vivid-018: unregistering video80 [ 136.617701][ T6802] vivid-018: unregistering vbi36 [ 136.629646][ T6802] vivid-018: unregistering vbi37 [ 136.632402][ T6802] vivid-018: unregistering swradio18 [ 136.634992][ T6802] vivid-018: unregistering radio36 [ 136.639698][ T6802] vivid-018: unregistering radio37 [ 136.642168][ T6802] vivid-018: unregistering video81 [ 136.644340][ T6802] vivid-018: unregistering video82 [ 136.647414][ T6802] vivid-018: unregistering v4l-touch18 [ 136.667967][ T6802] vivid-019: unregistering video83 [ 136.670323][ T6802] vivid-019: unregistering video84 [ 136.672659][ T6802] vivid-019: unregistering vbi38 [ 136.678043][ T6802] vivid-019: unregistering vbi39 [ 136.680535][ T6802] vivid-019: unregistering swradio19 [ 136.683258][ T6802] vivid-019: unregistering radio38 [ 136.688224][ T5918] dlm: foo: group event done 0 [ 136.690641][ T6802] vivid-019: unregistering radio39 [ 136.692843][ T6802] vivid-019: unregistering video85 [ 136.695136][ T6802] vivid-019: unregistering video86 [ 136.698955][ T6802] vivid-019: unregistering v4l-touch19 [ 136.720747][ T6802] vivid-020: unregistering video87 [ 136.723094][ T6802] vivid-020: unregistering video88 [ 136.725787][ T6802] vivid-020: unregistering vbi40 [ 136.729415][ T6802] vivid-020: unregistering vbi41 [ 136.731991][ T6802] vivid-020: unregistering swradio20 [ 136.734570][ T6802] vivid-020: unregistering radio40 [ 136.737462][ T6802] vivid-020: unregistering radio41 [ 136.740052][ T6802] vivid-020: unregistering video89 [ 136.742436][ T6802] vivid-020: unregistering video90 [ 136.744940][ T6802] vivid-020: unregistering v4l-touch20 [ 136.772941][ T6802] vivid-021: unregistering video91 [ 136.775571][ T6802] vivid-021: unregistering video92 [ 136.778688][ T6802] vivid-021: unregistering vbi42 [ 136.782483][ T6802] vivid-021: unregistering vbi43 [ 136.784885][ T6802] vivid-021: unregistering swradio21 [ 136.787709][ T6802] vivid-021: unregistering radio42 [ 136.790235][ T6802] vivid-021: unregistering radio43 [ 136.792744][ T6802] vivid-021: unregistering video93 [ 136.795206][ T6802] vivid-021: unregistering video94 [ 136.795393][ T6839] dlm: dlm user daemon left 1 lockspaces [ 136.801866][ T6802] vivid-021: unregistering v4l-touch21 [ 136.826331][ T6802] vivid-022: unregistering video95 [ 136.831194][ T6802] vivid-022: unregistering video96 [ 136.836201][ T6802] vivid-022: unregistering vbi44 [ 136.843995][ T6802] vivid-022: unregistering vbi45 [ 136.846715][ T6802] vivid-022: unregistering swradio22 [ 136.849134][ T6802] vivid-022: unregistering radio44 [ 136.851401][ T6802] vivid-022: unregistering radio45 [ 136.854600][ T6802] vivid-022: unregistering video97 [ 136.857377][ T6802] vivid-022: unregistering video98 [ 136.860229][ T6802] vivid-022: unregistering v4l-touch22 [ 136.877051][ T41] gspca_spca500: reg write: error -32 [ 136.879225][ T41] gspca_spca500: reg write: error -32 [ 136.879264][ T6802] vivid-023: unregistering video99 [ 136.881207][ T41] gspca_spca500: reg write: error -32 [ 136.884361][ T6802] vivid-023: unregistering video100 [ 136.884595][ T41] gspca_spca500: reg write: error -32 [ 136.887168][ T6802] vivid-023: unregistering vbi46 [ 136.889546][ T41] gspca_spca500: reg write: error -32 [ 136.890976][ T6802] vivid-023: unregistering vbi47 [ 136.891502][ T41] gspca_spca500: reg write: error -32 [ 136.893464][ T6802] vivid-023: unregistering swradio23 [ 136.894712][ T41] gspca_spca500: reg write: error -32 [ 136.897705][ T6802] vivid-023: unregistering radio46 [ 136.898430][ T41] gspca_spca500: reg write: error -32 [ 136.901204][ T6802] vivid-023: unregistering radio47 [ 136.901801][ T41] gspca_spca500: reg write: error -32 [ 136.904022][ T6802] vivid-023: unregistering video101 [ 136.905082][ T41] gspca_spca500: reg write: error -32 [ 136.908598][ T41] gspca_spca500: reg write: error -32 [ 136.909057][ T6802] vivid-023: unregistering video102 [ 136.910576][ T41] gspca_spca500: reg write: error -32 [ 136.912519][ T6802] vivid-023: unregistering v4l-touch23 [ 136.914852][ T41] gspca_spca500: reg write: error -32 [ 136.918365][ T41] gspca_spca500: reg write: error -32 [ 137.035625][ T5888] usb 6-1: USB disconnect, device number 4 [ 137.558661][ T5888] usb 14-1: USB disconnect, device number 4 [ 137.571609][ T6850] loop0: detected capacity change from 0 to 128 [ 137.575821][ T6850] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.608953][ T6850] md: loop0 does not have a valid v1.1 superblock, not importing! [ 137.896581][ T6075] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 138.049341][ T6075] usb 6-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 138.052078][ T6075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.054638][ T6075] usb 6-1: Product: syz [ 138.056015][ T6075] usb 6-1: Manufacturer: syz [ 138.057543][ T6075] usb 6-1: SerialNumber: syz [ 138.089331][ T6856] Buffer I/O error on dev nullb2, logical block 0, lost async page write [ 139.245449][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 139.245463][ T42] audit: type=1400 audit(1785856503.177:451): avc: denied { write } for pid=6863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.286897][ T42] audit: type=1400 audit(1785856503.227:452): avc: denied { write } for pid=6866 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.636246][ T42] audit: type=1400 audit(1785856503.567:453): avc: denied { write } for pid=6869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.657921][ T42] audit: type=1800 audit(1785856503.597:454): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.120" name="streaming_maxpacket" dev="configfs" ino=17147 res=0 errno=0 [ 139.659555][ T6873] UDC core: g1: couldn't find an available UDC or it's busy [ 139.669562][ T42] audit: type=1800 audit(1785856503.597:455): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.120" name="UDC" dev="configfs" ino=17148 res=0 errno=0 [ 139.680080][ T42] audit: type=1400 audit(1785856503.617:456): avc: denied { write } for pid=6874 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.799597][ T42] audit: type=1400 audit(1785856503.737:457): avc: denied { write } for pid=6878 comm="syz.9.121" name="configs" dev="configfs" ino=15215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.806791][ T42] audit: type=1400 audit(1785856503.737:458): avc: denied { write } for pid=6878 comm="syz.9.121" name="yuyv" dev="configfs" ino=15244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.812247][ T6879] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 139.813731][ T42] audit: type=1400 audit(1785856503.747:459): avc: denied { write } for pid=6878 comm="syz.9.121" name="c.1" dev="configfs" ino=18616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.817284][ T6879] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 139.817299][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.9.121 Not tainted syzkaller #0 PREEMPT(full) [ 139.817315][ T6879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.817323][ T6879] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 139.817348][ T6879] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 dd 1d 3a fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 139.817360][ T6879] RSP: 0018:ffffc9000422f8e0 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 139.817371][ T6879] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90028d4a000 [ 139.817379][ T6879] RDX: 0000000000000000 RSI: ffffffff87d04703 RDI: ffff88802c2e1290 [ 139.817387][ T6879] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 139.817395][ T6879] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 139.825033][ T42] audit: type=1400 audit(1785856503.747:460): avc: denied { write } for pid=6878 comm="syz.9.121" name="c.1" dev="configfs" ino=18616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.826891][ T6879] R13: ffff88802c2e0068 R14: ffff88802c2e0c58 R15: ffff88803d5d4810 [ 139.826903][ T6879] FS: 00007f8a2133c6c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 139.826925][ T6879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.826936][ T6879] CR2: 00007f8a2133bff8 CR3: 000000003275e000 CR4: 0000000000352ef0 [ 139.826944][ T6879] Call Trace: [ 139.826949][ T6879] [ 139.826955][ T6879] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 139.826982][ T6879] usb_gadget_set_selfpowered+0x73/0x2b0 [ 139.827003][ T6879] composite_dev_prepare+0x254/0x420 [ 139.827023][ T6879] configfs_composite_bind+0xd2/0x1960 [ 139.827041][ T6879] ? kernfs_create_link+0x1bd/0x240 [ 139.880786][ T6879] gadget_bind_driver+0x28c/0xbf0 [ 139.882369][ T6879] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 139.884126][ T6879] ? __pfx_gadget_bind_driver+0x10/0x10 [ 139.885857][ T6879] really_probe+0x241/0xa60 [ 139.887290][ T6879] __driver_probe_device+0x20e/0x450 [ 139.888942][ T6879] driver_probe_device+0x4a/0x140 [ 139.890554][ T6879] __driver_attach+0x21f/0x5b0 [ 139.892061][ T6879] ? __pfx___driver_attach+0x10/0x10 [ 139.893713][ T6879] bus_for_each_dev+0x13e/0x1d0 [ 139.895235][ T6879] ? __pfx_bus_for_each_dev+0x10/0x10 [ 139.896899][ T6879] ? bus_add_driver+0x2b5/0x5b0 [ 139.898435][ T6879] bus_add_driver+0x305/0x5b0 [ 139.899910][ T6879] driver_register+0x1e2/0x360 [ 139.901412][ T6879] usb_gadget_register_driver_owner+0x132/0x210 [ 139.903279][ T6879] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 139.904973][ T6879] configfs_write_iter+0x302/0x4e0 [ 139.906535][ T6879] vfs_write+0x6ac/0x1050 [ 139.907915][ T6879] ? __pfx_configfs_write_iter+0x10/0x10 [ 139.909681][ T6879] ? __pfx_vfs_write+0x10/0x10 [ 139.911214][ T6879] ksys_write+0x12a/0x250 [ 139.912574][ T6879] ? __pfx_ksys_write+0x10/0x10 [ 139.914114][ T6879] do_syscall_64+0x115/0x870 [ 139.915576][ T6879] ? clear_bhb_loop+0x40/0x90 [ 139.917061][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.918915][ T6879] RIP: 0033:0x7f8a2039e019 [ 139.920320][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.926243][ T6879] RSP: 002b:00007f8a2133c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.928816][ T6879] RAX: ffffffffffffffda RBX: 00007f8a20625fa0 RCX: 00007f8a2039e019 [ 139.931278][ T6879] RDX: 000000000000000b RSI: 0000200000000600 RDI: 0000000000000003 [ 139.933731][ T6879] RBP: 00007f8a2043500c R08: 0000000000000000 R09: 0000000000000000 [ 139.936173][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.938620][ T6879] R13: 00007f8a20626038 R14: 00007f8a20625fa0 R15: 00007ffe007cf4c8 [ 139.941090][ T6879] [ 139.942092][ T6879] Modules linked in: [ 139.944025][ T6879] ---[ end trace 0000000000000000 ]--- [ 139.947034][ T6879] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 139.951318][ T6879] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 dd 1d 3a fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 139.965121][ T6879] RSP: 0018:ffffc9000422f8e0 EFLAGS: 00010246 [ 139.967336][ T6879] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90028d4a000 [ 139.970058][ T6879] RDX: 0000000000000000 RSI: ffffffff87d04703 RDI: ffff88802c2e1290 [ 139.972735][ T6879] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 139.975440][ T6879] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 139.978262][ T6879] R13: ffff88802c2e0068 R14: ffff88802c2e0c58 R15: ffff88803d5d4810 [ 139.981155][ T6879] FS: 00007f8a2133c6c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 139.984176][ T6879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.986760][ T6879] CR2: 00007f8a2131bd58 CR3: 000000003275e000 CR4: 0000000000352ef0 [ 139.989325][ T6879] Kernel panic - not syncing: Fatal exception [ 139.991752][ T6879] Kernel Offset: disabled [ 139.993120][ T6879] Rebooting in 86400 seconds..