last executing test programs: 2.050622725s ago: executing program 1 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000800b0001007470726f7879000014000280080002400000000c080001400000000a0900020073797a3200000000140000001100010000000000000000000200000a0000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r1, 0x1, 0x53, &(0x7f0000000280), 0x10) (async) close(r0) 1.941383428s ago: executing program 1 (id=810): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x4f, 0x40002021, 0x0, 0x0) 1.288516719s ago: executing program 2 (id=820): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x521840, 0x0) 1.190993787s ago: executing program 3 (id=821): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x7, 0x10001, 0x3, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/167}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f00000003c0)={{r1}, &(0x7f0000000300)=0x4, &(0x7f0000000380)='%pI4 \x00'}, 0x20) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"}) 1.100776059s ago: executing program 2 (id=822): socket(0x10, 0x803, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="494d495820274d61737465722043617074757265fabef40b30303030383030303030303030"], 0x2b) close(r1) syz_open_dev$dri(0x0, 0x1f, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x214100, 0x0) write$selinux_access(r5, &(0x7f00000000c0)={'system_u:object_r:ldconfig_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x8}, 0x4a) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x121002, 0x0) 1.100568976s ago: executing program 3 (id=823): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8fd, 0x12) inotify_init() 1.100147725s ago: executing program 1 (id=824): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x20050800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x200000000000002, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000400), 0x20002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x7, [0x200, 0x2], 0x2}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0xcb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095", @ANYRES32=r4, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa6, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r7, 0x89f2, &(0x7f0000000000)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='lzo-rle', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r8, &(0x7f0000000480)="001122", 0x3) close(r8) 1.079672289s ago: executing program 3 (id=825): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000200)={'bridge_slave_0\x00', 0x2088, 0x7cd}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x804) 960.923358ms ago: executing program 3 (id=826): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0xa, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 932.096263ms ago: executing program 2 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1-1', 0x7) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0), 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x0, 0x0, 0xc3100, 0x50, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000240)='add 5-', 0x6) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0), 0x0) write(r0, &(0x7f0000000300), 0x0) 845.756832ms ago: executing program 3 (id=828): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r0, 0x1, 0x53, &(0x7f0000000280), 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') read$FUSE(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 813.091073ms ago: executing program 1 (id=830): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 812.57431ms ago: executing program 2 (id=831): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a53bd7000"], 0x14}}, 0x24040000) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0xfffff000, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) 805.178021ms ago: executing program 0 (id=832): recvfrom(0xffffffffffffffff, 0x0, 0x4f, 0x40002021, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) 729.735674ms ago: executing program 0 (id=833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xf}, {0x0, 0x9}, {0xa, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000900)={{@_ha_fsid={[0x1, 0x8000]}, {0x9, 0x0, 0x1c000, 0x9}}, {{[0x3d1, 0x91, 0x26796bdd, 0x9]}, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000800)=[{{@align=0x21, {0x7fff, 0x9, 0x4, 0x7b5}}, 0x2, 0x0, '/dev/net/tun\x00'}, {{@align=0x8, {0x3ff, 0x7f, 0x70, 0x4b06}}, 0x8c5, 0x0, '*.[%.-\x00'}, {{@_ha_fsid={[0x23, 0x1]}, {0x4, 0xcc9, 0x1, 0x2}}, 0x2, 0x0, '/dev/net/tun\x00'}, {{@_ha_fsid={[0x9, 0x446]}, {0xdcf, 0x0, 0x2, 0x7ff}}, 0x9, 0x0, '/dev/input/event#\x00'}, {{@_ha_fsid={[0x7, 0x2]}, {0x3, 0x6, 0x3, 0x2}}, 0x4, 0x0, '*\'#*\\/.\x00'}, {{@_ha_fsid={[0x8001, 0x3732]}, {0x4, 0x80, 0xffffffff, 0x7fffffff}}, 0xfffffff8, 0x0, '\x00'}]}}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f00000005c0)=""/29, 0x4000, 0x1000, 0x100, 0x3}, 0x20) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x30, r6, 0x9, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) (async, rerun: 32) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000006c0)=0x9, 0x3, 0xc) (rerun: 32) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x24068c11}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) (async) mknod(0x0, 0x4, 0x6) (async, rerun: 64) syz_open_dev$evdev(&(0x7f0000000680), 0xf, 0x804) (rerun: 64) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r10, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x1c, 0x7, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4040) (async) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xd, 0x4}, {0xf, 0xd}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffbff, 0x4, 0x6, 0xdbb, 0x100}, 0x1, 0x0, 0x6, 0x3, 0xffffff00, 0x7, 0x13, 0xf, 0x5, 0x0, {0x79, 0x1, 0xb, 0x2fef, 0x97, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0xa, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 729.061994ms ago: executing program 1 (id=834): socket$kcm(0x10, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setns(0xc9, 0x0) socket(0x10, 0x3, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 660.873837ms ago: executing program 1 (id=835): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000040)={0x5, 0x8, 0x5, 0x263, 0x9}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40880) ioctl$EVIOCGMASK(r6, 0x5b04, 0x0) 540.952463ms ago: executing program 0 (id=836): socket$kcm(0x10, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setns(0xc9, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket(0x10, 0x3, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 481.245512ms ago: executing program 0 (id=837): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, 0x0, 0x50) 480.775584ms ago: executing program 0 (id=838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='/dev/loop0,131072\x00', 0x12) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000121800e28d00000000000600006000386840ca286410f1f3c88f63cc6c39e71a81b5cfbe40c36436d7169d5f00"/66], 0x38}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 129.628395ms ago: executing program 2 (id=839): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000003000000000000000000bbfe8000000000000000000000000000aa1100"], 0x0) 942.925µs ago: executing program 2 (id=840): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) r4 = syz_open_dev$ndb(&(0x7f0000000680), 0x0, 0x2000) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) ioctl$BLKRRPART(r4, 0x125f, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x183098, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0xf) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0x2, 0xeff56bf55f85fa97}, 0x6) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x1}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="227300238f8cf1cbec25121d1ea7af24000000200001000000000000000000020000040000000000000000050019003c000000"], 0x24}}, 0x48850) 282.815µs ago: executing program 0 (id=841): mount$afs(0x0, 0x0, &(0x7f0000000200), 0x4080, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b8064", 0x4a}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376f", 0x20}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df5", 0x45}, {0x0}, {&(0x7f0000000840)="d04140dc4bd4a687ee1eb92a", 0xc}], 0x6, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000000580)=[{0x1b, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x0, @svalue=0xc32}, {0x1, @svalue=0x40000000000000}, {0x0, @svalue=0x1}]}, 0x5}, {0x14, '\x00', @st={0x4, [{0x3, @uvalue=0x3a}, {0x3, @uvalue=0x1}, {0x1, @svalue=0xfffffffffffffff6}, {0x1, @uvalue=0x9}]}, 0xd}, {0x2f, '\x00', @st={0x4, [{0x0, @uvalue=0x7}, {0x0, @uvalue=0x6bb02165}, {0x0, @svalue=0x2000000001}, {0x2, @svalue=0x400}]}, 0x8}, {0x25, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x3, @svalue=0x55}, {0x2, @svalue=0x800}, {0x2, @svalue=0x1}]}, 0x4}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setns(0xc9, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xffffff78, 0x1, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x5, 0xb, 0x0, 0x6, 0x20000, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r1, 0x0, 0x0, 0x800) accept4(r5, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0x2) write(r0, &(0x7f0000000300)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./sys/bus/pci/rescan/file0\x00', &(0x7f0000000180), &(0x7f0000000440)={0x0, 0xfb, 0xce, 0x2, 0x2, "8c48a7b9ad1542a7379db18663c008fb", "daf364d1dce4b85b9d4813473a3075fcf00eb8bcfa80fcc70378f8079f12b1c4688e26dd37d0c8ddefba3fdb57782241ba9d586fa250d3d1d43fcc592866e30949479d94f81f596b67fdfe3b09781b9686529f14789d61223dd436e6dfbd91fc79c1aed55957a8c84ca92dcb5b7f05d7b26c9a0acd4766cdd5d28b74430f833e061bee07872137c2467e563e4ed1966b0c49e60848303eb1433a7bf8d15a55bb560bba373d29820e313e114f6ec9e4e701eb79aac82ecfea9d"}, 0xce, 0x2) kernel console output (not intermixed with test programs): U: 0 UID: 0 PID: 8853 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT(full) [ 102.732460][ T8853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.732479][ T8853] Call Trace: [ 102.732509][ T8853] [ 102.732517][ T8853] dump_stack_lvl+0x100/0x190 [ 102.732569][ T8853] should_fail_ex.cold+0x5/0xa [ 102.732607][ T8853] _copy_from_user+0x2e/0xd0 [ 102.732640][ T8853] dev_ethtool+0x1ab2/0x6bb0 [ 102.732697][ T8853] ? bpf_ksym_find+0x128/0x1c0 [ 102.732731][ T8853] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.732765][ T8853] ? __pfx_dev_ethtool+0x10/0x10 [ 102.732792][ T8853] ? tomoyo_path_number_perm+0x46d/0x580 [ 102.732819][ T8853] ? stack_trace_save+0x8e/0xc0 [ 102.732838][ T8853] ? __pfx_stack_trace_save+0x10/0x10 [ 102.732854][ T8853] ? stack_depot_save_flags+0x27/0x9d0 [ 102.732878][ T8853] ? __lock_acquire+0x49f/0x1a40 [ 102.732908][ T8853] ? __lock_acquire+0x49f/0x1a40 [ 102.732929][ T8853] ? __kasan_slab_free+0x5f/0x80 [ 102.732955][ T8853] ? kfree+0x22b/0x6c0 [ 102.732987][ T8853] ? tomoyo_path_number_perm+0x46d/0x580 [ 102.733012][ T8853] ? security_file_ioctl+0xd3/0x230 [ 102.733039][ T8853] ? __x64_sys_ioctl+0xb7/0x210 [ 102.733064][ T8853] ? do_syscall_64+0x115/0x870 [ 102.733127][ T8853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.733154][ T8853] ? find_held_lock+0x2b/0x80 [ 102.733170][ T8853] ? avc_has_extended_perms+0x33a/0x1080 [ 102.733192][ T8853] ? avc_has_extended_perms+0x33a/0x1080 [ 102.733230][ T8853] ? __lock_acquire+0x49f/0x1a40 [ 102.733265][ T8853] ? find_held_lock+0x2b/0x80 [ 102.733280][ T8853] ? dev_load+0x8e/0x240 [ 102.733321][ T8853] ? dev_load+0x8e/0x240 [ 102.733349][ T8853] dev_ioctl+0x63b/0x10e0 [ 102.733375][ T8853] sock_do_ioctl+0x1a0/0x280 [ 102.733412][ T8853] ? __pfx_sock_do_ioctl+0x10/0x10 [ 102.733447][ T8853] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.733473][ T8853] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.733507][ T8853] sock_ioctl+0x599/0x6b0 [ 102.733526][ T8853] ? __pfx_sock_ioctl+0x10/0x10 [ 102.733542][ T8853] ? hook_file_ioctl_common+0x140/0x440 [ 102.733571][ T8853] ? selinux_file_ioctl+0x13b/0x290 [ 102.733598][ T8853] ? selinux_file_ioctl+0xb6/0x290 [ 102.733627][ T8853] ? __pfx_sock_ioctl+0x10/0x10 [ 102.733647][ T8853] __x64_sys_ioctl+0x18e/0x210 [ 102.733675][ T8853] do_syscall_64+0x115/0x870 [ 102.733696][ T8853] ? clear_bhb_loop+0x40/0x90 [ 102.733718][ T8853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.733737][ T8853] RIP: 0033:0x7f325b59e019 [ 102.733754][ T8853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.733771][ T8853] RSP: 002b:00007f325c393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.733797][ T8853] RAX: ffffffffffffffda RBX: 00007f325b825fa0 RCX: 00007f325b59e019 [ 102.733809][ T8853] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000006 [ 102.733819][ T8853] RBP: 00007f325c393090 R08: 0000000000000000 R09: 0000000000000000 [ 102.733830][ T8853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.733841][ T8853] R13: 00007f325b826038 R14: 00007f325b825fa0 R15: 00007ffc7e0d1898 [ 102.733864][ T8853] [ 102.968511][ T8872] team0: Device xfrm0 is of different type [ 103.200494][ T5824] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 103.237612][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.243461][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.490817][ T5831] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 103.670616][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 103.677233][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 103.686559][ T5831] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.689823][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.693419][ T5831] usb 6-1: Product: syz [ 103.695162][ T5831] usb 6-1: Manufacturer: syz [ 103.696802][ T5831] usb 6-1: SerialNumber: syz [ 103.712258][ T5831] usb 6-1: config 0 descriptor?? [ 103.725330][ T5831] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 103.728343][ T5831] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 103.942622][ T5824] usb 8-1: Using ep0 maxpacket: 16 [ 103.946149][ T5824] usb 8-1: config 0 has no interfaces? [ 103.949616][ T5824] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.952670][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.955277][ T5824] usb 8-1: Product: syz [ 103.956611][ T5824] usb 8-1: Manufacturer: syz [ 103.958127][ T5824] usb 8-1: SerialNumber: syz [ 103.961322][ T5824] usb 8-1: config 0 descriptor?? [ 103.999406][ T8916] capability: warning: `syz.2.454' uses deprecated v2 capabilities in a way that may be insecure [ 104.028242][ T8916] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 104.175408][ T8867] FAULT_INJECTION: forcing a failure. [ 104.175408][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 104.179868][ T8867] CPU: 3 UID: 0 PID: 8867 Comm: syz.3.448 Not tainted syzkaller #0 PREEMPT(full) [ 104.179883][ T8867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.179890][ T8867] Call Trace: [ 104.179894][ T8867] [ 104.179899][ T8867] dump_stack_lvl+0x100/0x190 [ 104.179918][ T8867] should_fail_ex.cold+0x5/0xa [ 104.179934][ T8867] should_failslab+0xc2/0x120 [ 104.179948][ T8867] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 104.179963][ T8867] ? __alloc_skb+0x140/0x710 [ 104.179981][ T8867] __alloc_skb+0x140/0x710 [ 104.179992][ T8867] ? __alloc_skb+0x5b7/0x710 [ 104.180005][ T8867] ? __pfx___alloc_skb+0x10/0x10 [ 104.180017][ T8867] ? __mgmt_power_off+0xcc/0x2c0 [ 104.180050][ T8867] mgmt_cmd_status+0x43/0x570 [ 104.180065][ T8867] cmd_complete_rsp+0x181/0x230 [ 104.180079][ T8867] mgmt_pending_foreach+0x227/0x320 [ 104.180092][ T8867] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 104.180106][ T8867] __mgmt_power_off+0x133/0x2c0 [ 104.180116][ T8867] ? __pfx___mgmt_power_off+0x10/0x10 [ 104.180129][ T8867] ? lockdep_hardirqs_on+0x78/0x100 [ 104.180144][ T8867] ? _raw_spin_unlock_irq+0x2e/0x50 [ 104.180155][ T8867] ? drain_workqueue+0x2ef/0x3b0 [ 104.180176][ T8867] hci_dev_close_sync+0xdb4/0x13c0 [ 104.180201][ T8867] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 104.180217][ T8867] ? do_raw_read_unlock+0x3f/0x70 [ 104.180236][ T8867] hci_dev_reset+0x1ab/0x410 [ 104.180251][ T8867] ? __pfx_hci_dev_reset+0x10/0x10 [ 104.180266][ T8867] ? bpf_lsm_capable+0x9/0x10 [ 104.180283][ T8867] ? security_capable+0x80/0x260 [ 104.180299][ T8867] hci_sock_ioctl+0x5c5/0x7e0 [ 104.180314][ T8867] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 104.180326][ T8867] ? tomoyo_path_number_perm+0x188/0x580 [ 104.180347][ T8867] sock_do_ioctl+0x118/0x280 [ 104.180364][ T8867] ? __pfx_sock_do_ioctl+0x10/0x10 [ 104.180398][ T8867] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.180417][ T8867] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.180437][ T8867] sock_ioctl+0x599/0x6b0 [ 104.180448][ T8867] ? __pfx_sock_ioctl+0x10/0x10 [ 104.180458][ T8867] ? hook_file_ioctl_common+0x140/0x440 [ 104.180475][ T8867] ? selinux_file_ioctl+0x13b/0x290 [ 104.180491][ T8867] ? selinux_file_ioctl+0xb6/0x290 [ 104.180508][ T8867] ? __pfx_sock_ioctl+0x10/0x10 [ 104.180599][ T8867] __x64_sys_ioctl+0x18e/0x210 [ 104.180616][ T8867] do_syscall_64+0x115/0x870 [ 104.180629][ T8867] ? clear_bhb_loop+0x40/0x90 [ 104.180643][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.180654][ T8867] RIP: 0033:0x7f02f1d9e019 [ 104.180668][ T8867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.180679][ T8867] RSP: 002b:00007f02f2cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.180691][ T8867] RAX: ffffffffffffffda RBX: 00007f02f2025fa0 RCX: 00007f02f1d9e019 [ 104.180697][ T8867] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000c [ 104.180704][ T8867] RBP: 00007f02f2cfb090 R08: 0000000000000000 R09: 0000000000000000 [ 104.180710][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.180716][ T8867] R13: 00007f02f2026038 R14: 00007f02f2025fa0 R15: 00007fff947b2cf8 [ 104.180730][ T8867] [ 104.321232][ T5831] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 104.357763][ T8939] validate_nla: 6 callbacks suppressed [ 104.357776][ T8939] netlink: 'syz.2.457': attribute type 21 has an invalid length. [ 104.363079][ T8939] netlink: 'syz.2.457': attribute type 7 has an invalid length. [ 104.468165][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 104.468193][ T42] audit: type=1400 audit(1785875479.734:760): avc: denied { write } for pid=8946 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.556417][ T42] audit: type=1400 audit(1785875479.824:761): avc: denied { write } for pid=8949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.619712][ T42] audit: type=1400 audit(1785875479.884:762): avc: denied { write } for pid=8955 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.723137][ T42] audit: type=1400 audit(1785875479.994:763): avc: denied { write } for pid=8958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.801422][ T42] audit: type=1400 audit(1785875480.074:764): avc: denied { write } for pid=8965 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.978246][ T42] audit: type=1400 audit(1785875480.244:765): avc: denied { write } for pid=8969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.040223][ T42] audit: type=1400 audit(1785875480.304:766): avc: denied { write } for pid=8972 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.123236][ T42] audit: type=1400 audit(1785875480.394:767): avc: denied { write } for pid=8974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.166817][ T42] audit: type=1400 audit(1785875480.434:768): avc: denied { write } for pid=8977 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.179138][ T9] usb 5-1: USB disconnect, device number 13 [ 105.279569][ T42] audit: type=1400 audit(1785875480.544:769): avc: denied { write } for pid=8980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.551850][ T5831] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.554825][ T5831] em28xx 6-1:0.0: board has no eeprom [ 105.578537][ T8992] MTD: Couldn't look up './dev/mtdblock0': -2 [ 105.593213][ T8993] netlink: 'syz.0.462': attribute type 21 has an invalid length. [ 105.599341][ T8993] netlink: 'syz.0.462': attribute type 7 has an invalid length. [ 105.610518][ T5831] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.613067][ T5831] em28xx 6-1:0.0: dvb set to bulk mode. [ 105.615456][ T1350] em28xx 6-1:0.0: Binding DVB extension [ 105.620759][ T5831] usb 6-1: USB disconnect, device number 15 [ 105.624404][ T5831] em28xx 6-1:0.0: Disconnecting em28xx [ 105.670103][ T1350] em28xx 6-1:0.0: Registering input extension [ 105.672290][ T5831] em28xx 6-1:0.0: Closing input extension [ 105.678229][ T5831] em28xx 6-1:0.0: Freeing device [ 105.814634][ T9013] netlink: 'syz.0.466': attribute type 21 has an invalid length. [ 105.817963][ T9013] netlink: 'syz.0.466': attribute type 7 has an invalid length. [ 105.917525][ T8867] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.938385][ T10] usb 8-1: USB disconnect, device number 13 [ 105.952629][ T9023] __nla_validate_parse: 12 callbacks suppressed [ 105.952642][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 105.957709][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 105.968903][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 105.971777][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 106.087022][ T9038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9038 comm=syz.1.471 [ 106.103296][ T9038] team0: Device vlan2 is already an upper device of the team interface [ 106.178563][ T9043] bond1 (unregistering): Released all slaves [ 106.331464][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 106.407691][ T9058] netlink: 'syz.1.473': attribute type 21 has an invalid length. [ 106.412456][ T9058] netlink: 'syz.1.473': attribute type 7 has an invalid length. [ 106.493428][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 106.496652][ T10] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 106.501044][ T10] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 106.510985][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.515911][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.768026][ T9073] MTD: Couldn't look up './dev/mtdblock0': -2 [ 106.816383][ T9075] /dev/sr0: Can't open blockdev [ 106.953756][ T9080] netlink: 'syz.2.476': attribute type 21 has an invalid length. [ 106.959033][ T9080] netlink: 'syz.2.476': attribute type 7 has an invalid length. [ 107.074166][ T9088] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.108473][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.112119][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.184833][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 107.189165][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 107.328089][ T9112] MTD: Couldn't look up './dev/mtdblock0': -2 [ 107.331110][ T6737] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 107.376315][ T9109] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 107.422763][ T9121] FAULT_INJECTION: forcing a failure. [ 107.422763][ T9121] name failslab, interval 1, probability 0, space 0, times 0 [ 107.427505][ T9121] CPU: 3 UID: 0 PID: 9121 Comm: syz.0.485 Not tainted syzkaller #0 PREEMPT(full) [ 107.427527][ T9121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.427536][ T9121] Call Trace: [ 107.427540][ T9121] [ 107.427546][ T9121] dump_stack_lvl+0x100/0x190 [ 107.427565][ T9121] should_fail_ex.cold+0x5/0xa [ 107.427580][ T9121] should_failslab+0xc2/0x120 [ 107.427595][ T9121] kmem_cache_alloc_noprof+0x91/0x6a0 [ 107.427609][ T9121] ? __pfx_map_id_range_down+0x10/0x10 [ 107.427633][ T9121] ? security_inode_alloc+0x3b/0x2c0 [ 107.427651][ T9121] security_inode_alloc+0x3b/0x2c0 [ 107.427673][ T9121] inode_init_always_gfp+0xc77/0xfb0 [ 107.427695][ T9121] alloc_inode+0x8e/0x250 [ 107.427719][ T9121] new_inode+0x22/0x1c0 [ 107.427745][ T9121] __debugfs_create_file+0x105/0x4f0 [ 107.427781][ T9121] debugfs_create_file_full+0x41/0x60 [ 107.427794][ T9121] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 107.427811][ T9121] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 107.427839][ T9121] ? lockdep_init_map_type+0x5c/0x250 [ 107.427856][ T9121] ? __pfx_geneve_setup+0x10/0x10 [ 107.427887][ T9121] alloc_netdev_mqs+0x314/0x15c0 [ 107.427906][ T9121] rtnl_create_link+0xc13/0xf80 [ 107.427924][ T9121] rtnl_newlink+0x13bd/0x2380 [ 107.427943][ T9121] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.427957][ T9121] ? find_held_lock+0x2b/0x80 [ 107.427966][ T9121] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 107.427979][ T9121] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 107.427994][ T9121] ? avc_has_perm_noaudit+0x145/0x3b0 [ 107.428018][ T9121] ? find_held_lock+0x2b/0x80 [ 107.428027][ T9121] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 107.428042][ T9121] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 107.428057][ T9121] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.428072][ T9121] rtnetlink_rcv_msg+0x95e/0xe90 [ 107.428088][ T9121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.428107][ T9121] ? ref_tracker_free+0x37e/0x6c0 [ 107.428124][ T9121] netlink_rcv_skb+0x159/0x420 [ 107.428137][ T9121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.428153][ T9121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.428169][ T9121] ? netlink_deliver_tap+0x1ae/0xcc0 [ 107.428183][ T9121] netlink_unicast+0x585/0x850 [ 107.428196][ T9121] ? __pfx_netlink_unicast+0x10/0x10 [ 107.428211][ T9121] netlink_sendmsg+0x8b0/0xda0 [ 107.428224][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.428237][ T9121] ? selinux_socket_sendmsg+0x198/0x2f0 [ 107.428257][ T9121] ____sys_sendmsg+0xa4d/0xbe0 [ 107.428274][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.428287][ T9121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.428310][ T9121] ___sys_sendmsg+0x190/0x1e0 [ 107.428322][ T9121] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.428331][ T9121] ? __lock_acquire+0x49f/0x1a40 [ 107.428344][ T9121] ? get_pid_task+0x106/0x250 [ 107.428374][ T9121] __sys_sendmsg+0x160/0x210 [ 107.428389][ T9121] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.428411][ T9121] do_syscall_64+0x115/0x870 [ 107.428425][ T9121] ? clear_bhb_loop+0x40/0x90 [ 107.428439][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.428450][ T9121] RIP: 0033:0x7f385a19e019 [ 107.428461][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.428471][ T9121] RSP: 002b:00007f38583f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.428484][ T9121] RAX: ffffffffffffffda RBX: 00007f385a425fa0 RCX: 00007f385a19e019 [ 107.428494][ T9121] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 107.428504][ T9121] RBP: 00007f38583f6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.428513][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.428521][ T9121] R13: 00007f385a426038 R14: 00007f385a425fa0 R15: 00007ffe22e4ab58 [ 107.428544][ T9121] [ 107.428577][ T9121] debugfs: out of free dentries, can not create file 'netdev@ffff88805a7f4700' [ 107.480533][ T6737] usb 7-1: Using ep0 maxpacket: 16 [ 107.494378][ T9121] bond1: (slave geneve2): making interface the new active one [ 107.498499][ T6737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.502616][ T9121] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 107.510786][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.517714][ T6737] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.529691][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.536300][ T6737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.537168][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.538893][ T6737] usb 7-1: Product: syz [ 107.542012][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.543784][ T6737] usb 7-1: Manufacturer: syz [ 107.614013][ T6737] usb 7-1: SerialNumber: syz [ 107.618841][ T6737] usb 7-1: config 0 descriptor?? [ 107.629080][ T6737] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.633943][ T6737] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 108.085078][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 108.091669][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 108.239631][ T6737] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 108.456587][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 108.512773][ T9178] MTD: Couldn't look up './dev/mtdblock0': -2 [ 108.558900][ T9182] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 108.637436][ T9186] netlink: 100 bytes leftover after parsing attributes in process `syz.1.495'. [ 108.687854][ T9190] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 108.731831][ T9092] em28xx 7-1:0.0: write to i2c device at 0xe failed with unknown error (status=1) [ 108.906124][ T9202] ifb1: entered promiscuous mode [ 108.908310][ T6737] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 108.912279][ T6737] em28xx 7-1:0.0: board has no eeprom [ 108.972440][ T6737] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.973788][ T5831] usb 8-1: USB disconnect, device number 14 [ 108.977718][ T6737] em28xx 7-1:0.0: dvb set to bulk mode. [ 108.983325][ T50] em28xx 7-1:0.0: Binding DVB extension [ 109.001004][ T6737] usb 7-1: USB disconnect, device number 15 [ 109.024535][ T6737] em28xx 7-1:0.0: Disconnecting em28xx [ 109.032187][ T50] em28xx 7-1:0.0: Registering input extension [ 109.041700][ T6737] em28xx 7-1:0.0: Closing input extension [ 109.066971][ T6737] em28xx 7-1:0.0: Freeing device [ 109.096998][ T9223] jffs2: notice: (9223) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 109.142239][ T9228] No source specified [ 109.287185][ T9241] 8021q: adding VLAN 0 to HW filter on device macvlan41 [ 109.323365][ T9241] 8021q: adding VLAN 0 to HW filter on device macvlan58 [ 109.479582][ T9265] jffs2: notice: (9265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 109.555291][ T42] kauditd_printk_skb: 68 callbacks suppressed [ 109.555307][ T42] audit: type=1400 audit(1785875484.824:838): avc: denied { write } for pid=9274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.580572][ T6737] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 109.616103][ T42] audit: type=1400 audit(1785875484.884:839): avc: denied { write } for pid=9282 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.696837][ T42] audit: type=1400 audit(1785875484.964:840): avc: denied { write } for pid=9284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.731277][ T6737] usb 8-1: Using ep0 maxpacket: 8 [ 109.734826][ T6737] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 109.737867][ T6737] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 109.742106][ T6737] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.745419][ T6737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.760322][ T42] audit: type=1400 audit(1785875485.024:841): avc: denied { write } for pid=9287 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.948773][ T42] audit: type=1400 audit(1785875485.214:842): avc: denied { write } for pid=9289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.002242][ T42] audit: type=1400 audit(1785875485.274:843): avc: denied { write } for pid=9292 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.115281][ T42] audit: type=1400 audit(1785875485.384:844): avc: denied { write } for pid=9295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.179741][ T42] audit: type=1400 audit(1785875485.444:845): avc: denied { write } for pid=9298 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.319062][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.324503][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.335312][ T42] audit: type=1400 audit(1785875485.604:846): avc: denied { write } for pid=9304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.375041][ T9313] overlayfs: failed to resolve './file1': -2 [ 110.380346][ T42] audit: type=1400 audit(1785875485.644:847): avc: denied { create } for pid=9310 comm="syz.1.517" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.426633][ T9317] validate_nla: 16 callbacks suppressed [ 110.426651][ T9317] netlink: 'syz.2.519': attribute type 21 has an invalid length. [ 110.436513][ T9317] netlink: 'syz.2.519': attribute type 7 has an invalid length. [ 110.511440][ T9317] 8021q: adding VLAN 0 to HW filter on device macvlan59 [ 110.547588][ T9317] 8021q: adding VLAN 0 to HW filter on device macvlan60 [ 110.826974][ T9374] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.850620][ T9048] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 111.020605][ T9048] usb 6-1: Using ep0 maxpacket: 16 [ 111.024055][ T9048] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.029639][ T9048] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.033104][ T9048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.035802][ T9048] usb 6-1: Product: syz [ 111.037164][ T9048] usb 6-1: Manufacturer: syz [ 111.038634][ T9048] usb 6-1: SerialNumber: syz [ 111.050015][ T9048] usb 6-1: config 0 descriptor?? [ 111.055574][ T9048] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.059368][ T9048] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 111.144207][ T9385] netlink: 'syz.2.529': attribute type 3 has an invalid length. [ 111.147548][ T9385] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 111.583273][ T9410] netlink: 'syz.0.531': attribute type 21 has an invalid length. [ 111.586509][ T9410] netlink: 'syz.0.531': attribute type 7 has an invalid length. [ 111.613352][ T9410] 8021q: adding VLAN 0 to HW filter on device macvlan61 [ 111.629228][ T9411] 0: reclassify loop, rule prio 0, protocol 03 [ 111.641081][ T9410] 8021q: adding VLAN 0 to HW filter on device macvlan62 [ 111.657375][ T9048] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 111.753534][ T9416] __nla_validate_parse: 6 callbacks suppressed [ 111.753548][ T9416] netlink: 256 bytes leftover after parsing attributes in process `syz.0.533'. [ 111.766093][ T9416] unsupported nlmsg_type 40 [ 111.773082][ T9416] debugfs: Bad value for 'uid' [ 111.774826][ T9416] debugfs: Bad value for 'uid' [ 111.924961][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 111.929584][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 112.007542][ T9434] MTD: Couldn't look up './dev/mtdblock0': -2 [ 112.270223][ T9048] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 112.274363][ T9048] em28xx 6-1:0.0: board has no eeprom [ 112.331164][ T9048] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 112.334187][ T9048] em28xx 6-1:0.0: dvb set to bulk mode. [ 112.336391][ T1484] em28xx 6-1:0.0: Binding DVB extension [ 112.348010][ T9048] usb 6-1: USB disconnect, device number 16 [ 112.360004][ T9048] em28xx 6-1:0.0: Disconnecting em28xx [ 112.369259][ T5832] usb 8-1: USB disconnect, device number 15 [ 112.373606][ T1484] em28xx 6-1:0.0: Registering input extension [ 112.376354][ T9048] em28xx 6-1:0.0: Closing input extension [ 112.390109][ T9048] em28xx 6-1:0.0: Freeing device [ 112.724379][ T9478] netlink: 'syz.2.541': attribute type 21 has an invalid length. [ 112.730489][ T9478] netlink: 'syz.2.541': attribute type 7 has an invalid length. [ 112.736341][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 112.812482][ T9477] netlink: 56 bytes leftover after parsing attributes in process `syz.3.542'. [ 112.815603][ T9477] netlink: 68 bytes leftover after parsing attributes in process `syz.3.542'. [ 112.895408][ T9490] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 112.895408][ T9490] The task syz.2.543 (9490) triggered the difference, watch for misbehavior. [ 112.923082][ T9490] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 112.933541][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 112.937228][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 112.966110][ T9506] MTD: Couldn't look up './dev/mtdblock0': -2 [ 113.165220][ T9525] sit0: entered promiscuous mode [ 113.168946][ T9525] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 113.171662][ T9525] netlink: 1 bytes leftover after parsing attributes in process `syz.0.555'. [ 113.227250][ T9528] bridge_slave_1: left allmulticast mode [ 113.229156][ T9528] bridge_slave_1: left promiscuous mode [ 113.231189][ T5832] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 113.234831][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.242381][ T50] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 113.246209][ T9528] bridge_slave_0: left allmulticast mode [ 113.249237][ T9528] bridge_slave_0: left promiscuous mode [ 113.251913][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.401410][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 113.405093][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.410471][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 113.411787][ T50] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.414560][ T5832] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 113.416015][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.416028][ T50] usb 8-1: Product: syz [ 113.418801][ T5832] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 113.421908][ T50] usb 8-1: Manufacturer: syz [ 113.421919][ T50] usb 8-1: SerialNumber: syz [ 113.423711][ T5832] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.427305][ T9535] syz.0.557 uses obsolete (PF_INET,SOCK_PACKET) [ 113.428196][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.429764][ T50] usb 8-1: config 0 descriptor?? [ 113.450710][ T50] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.458113][ T50] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 113.713457][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 113.777717][ T9548] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 114.005239][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.009113][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.047786][ T50] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 114.052650][ T5832] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.202898][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 114.206848][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.213942][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.220144][ T5832] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 114.223856][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.226988][ T5832] usb 5-1: Product: syz [ 114.228697][ T5832] usb 5-1: Manufacturer: syz [ 114.230896][ T5832] usb 5-1: SerialNumber: syz [ 114.235746][ T5832] usb 5-1: config 0 descriptor?? [ 114.449787][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 114.458402][ T5832] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input23 [ 114.478697][ T5832] imon:send_packet: packet tx failed (-71) [ 114.500988][ T5832] imon 5-1:0.0: panel buttons/knobs setup failed [ 114.560519][ T5832] rc_core: IR keymap rc-imon-pad not found [ 114.562838][ T5832] Registered IR keymap rc-empty [ 114.564695][ T5832] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 114.567926][ T5832] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 114.572630][ T5832] imon:send_packet: packet tx failed (-71) [ 114.591161][ T5832] imon 5-1:0.0: remote input dev register failed [ 114.593166][ T5832] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 114.604205][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 114.604215][ T42] audit: type=1400 audit(1785875489.874:903): avc: denied { write } for pid=9568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.619722][ T9572] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 114.625363][ T9572] overlayfs: overlapping lowerdir path [ 114.631429][ T5832] imon 5-1:0.0: unable to initialize intf0, err 0 [ 114.633672][ T5832] imon:imon_probe: failed to initialize context! [ 114.636325][ T5832] imon 5-1:0.0: unable to register, err -19 [ 114.642567][ T5832] usb 5-1: USB disconnect, device number 14 [ 114.661798][ T50] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 114.665349][ T50] em28xx 8-1:0.0: board has no eeprom [ 114.679103][ T42] audit: type=1400 audit(1785875489.944:904): avc: denied { write } for pid=9573 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.697767][ T9575] bridge_slave_0: left allmulticast mode [ 114.700045][ T9575] bridge_slave_0: left promiscuous mode [ 114.702752][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.707859][ T9575] bridge_slave_1: left allmulticast mode [ 114.710077][ T9575] bridge_slave_1: left promiscuous mode [ 114.713464][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.719703][ T9575] bond0: (slave bond_slave_0): Releasing backup interface [ 114.730797][ T50] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.734618][ T9575] bond0: (slave bond_slave_1): Releasing backup interface [ 114.736694][ T50] em28xx 8-1:0.0: dvb set to bulk mode. [ 114.746021][ T847] em28xx 8-1:0.0: Binding DVB extension [ 114.747230][ T9575] team0: Port device team_slave_0 removed [ 114.754345][ T50] usb 8-1: USB disconnect, device number 16 [ 114.756332][ T9575] team0: Port device team_slave_1 removed [ 114.758222][ T50] em28xx 8-1:0.0: Disconnecting em28xx [ 114.760016][ T9575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.764843][ T9575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.771499][ T9575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.774680][ T9575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.778795][ T847] em28xx 8-1:0.0: Registering input extension [ 114.781744][ T50] em28xx 8-1:0.0: Closing input extension [ 114.781837][ T9575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.795157][ T50] em28xx 8-1:0.0: Freeing device [ 114.806415][ T9577] team0: Port device xfrm0 added [ 114.809130][ T9575] tipc: Started in network mode [ 114.813994][ T9575] tipc: Node identity e2e7265daa82, cluster identity 4711 [ 114.817523][ T9575] tipc: Enabled bearer , priority 0 [ 114.982209][ T42] audit: type=1400 audit(1785875490.254:905): avc: denied { write } for pid=9582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.051335][ T42] audit: type=1400 audit(1785875490.324:906): avc: denied { write } for pid=9585 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.100547][ T1484] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 115.217465][ T42] audit: type=1800 audit(1785875490.484:907): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.566" name="file0" dev="overlay" ino=823 res=0 errno=0 [ 115.250492][ T1484] usb 5-1: Using ep0 maxpacket: 16 [ 115.254558][ T1484] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.259097][ T1484] usb 5-1: config 0 interface 0 has no altsetting 0 [ 115.264930][ T1484] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 115.268921][ T1484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.275305][ T1484] usb 5-1: Product: syz [ 115.277053][ T1484] usb 5-1: Manufacturer: syz [ 115.278927][ T1484] usb 5-1: SerialNumber: syz [ 115.284207][ T1484] usb 5-1: config 0 descriptor?? [ 115.285628][ T42] audit: type=1400 audit(1785875490.554:908): avc: denied { write } for pid=9592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.359023][ T42] audit: type=1400 audit(1785875490.624:909): avc: denied { write } for pid=9598 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.411388][ T42] audit: type=1400 audit(1785875490.684:910): avc: denied { name_bind } for pid=9604 comm="syz.3.569" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 115.482944][ T9615] xt_limit: Overflow, try lower: 271964/0 [ 115.497542][ T1484] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input26 [ 115.537429][ T42] audit: type=1400 audit(1785875490.804:911): avc: denied { write } for pid=9616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.590672][ T42] audit: type=1400 audit(1785875490.854:912): avc: denied { write } for pid=9622 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.690722][ T9551] netlink: 'syz.0.563': attribute type 10 has an invalid length. [ 115.696405][ T1484] imon:send_packet: packet tx failed (-32) [ 115.699617][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 115.731656][ T1484] imon 5-1:0.0: panel buttons/knobs setup failed [ 115.790793][ T1484] rc_core: IR keymap rc-imon-pad not found [ 115.793598][ T1484] Registered IR keymap rc-empty [ 115.795817][ T1484] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 115.800192][ T1484] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 115.804629][ T1484] imon:send_packet: packet tx failed (-71) [ 115.812353][ T5832] tipc: Node number set to 1214588509 [ 115.815566][ T5824] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 115.833538][ T1484] imon 5-1:0.0: remote input dev register failed [ 115.836335][ T1484] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 115.852063][ T1484] imon 5-1:0.0: unable to initialize intf0, err 0 [ 115.854852][ T1484] imon:imon_probe: failed to initialize context! [ 115.857486][ T1484] imon 5-1:0.0: unable to register, err -19 [ 115.864992][ T1484] usb 5-1: USB disconnect, device number 15 [ 115.950564][ T5824] usb 7-1: device descriptor read/64, error -71 [ 116.008816][ T9048] usb 6-1: USB disconnect, device number 17 [ 116.202460][ T5824] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 116.341050][ T5824] usb 7-1: device descriptor read/64, error -71 [ 116.463469][ T5824] usb usb7-port1: attempt power cycle [ 116.811228][ T5824] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 116.831782][ T5824] usb 7-1: device descriptor read/8, error -71 [ 117.054735][ T847] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 117.080518][ T5824] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 117.101977][ T5824] usb 7-1: device descriptor read/8, error -71 [ 117.210483][ T847] usb 6-1: Using ep0 maxpacket: 8 [ 117.214704][ T847] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 117.218220][ T847] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 117.222978][ T847] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.225518][ T5824] usb usb7-port1: unable to enumerate USB device [ 117.226765][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.604576][ T9733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9733 comm=syz.0.590 [ 117.615883][ T9733] capability: warning: `syz.0.590' uses 32-bit capabilities (legacy support in use) [ 117.696348][ T9743] tmpfs: Unknown parameter 'grpquota' [ 117.800103][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.805239][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.119793][ T9768] 8021q: adding VLAN 0 to HW filter on device macvlan63 [ 118.154009][ T9768] 8021q: adding VLAN 0 to HW filter on device macvlan64 [ 118.470495][ T41] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 118.624209][ T41] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 118.628914][ T41] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25697, setting to 1024 [ 118.635705][ T41] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 118.640564][ T41] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25697, setting to 1024 [ 118.646802][ T41] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 118.650309][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.653979][ T41] usb 5-1: Product: syz [ 118.655565][ T41] usb 5-1: Manufacturer: syz [ 118.657134][ T41] usb 5-1: SerialNumber: syz [ 118.662507][ T9776] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 118.666302][ T41] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 118.670771][ T41] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 118.676446][ T41] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 118.869498][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.872290][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.874841][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.877474][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.880199][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.883344][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.886691][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.889833][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.893185][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.896535][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.899665][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.902171][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.904848][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.907370][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.909839][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.912300][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.914935][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.917898][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.921093][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.924244][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.927338][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.930502][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.933467][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.936173][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.938564][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.940951][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.943309][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.945833][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.948332][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.950674][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.953019][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.955833][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.958963][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.961912][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.965044][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.968166][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.971294][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.974411][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.977512][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.980728][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.983855][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.986951][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.990013][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.993138][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.996207][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 118.999669][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.002807][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.005949][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.009026][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.012116][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.015234][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.018231][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.021316][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.024441][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.027510][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.030666][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.033656][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.036839][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.040096][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.043173][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.046371][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.049334][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.052215][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.055294][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.058365][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.061840][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.064835][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.067705][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.070272][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.072624][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.075405][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.077922][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.080248][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.082680][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.085514][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.088736][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.091554][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.094130][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.097316][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.100890][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.104296][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.107481][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.110674][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.113835][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.117042][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.120216][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.123359][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.126518][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.129510][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.132572][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.135554][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.138647][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.141749][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.144949][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.148168][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.151421][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.154538][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.157613][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.160820][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.164152][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.167268][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.170925][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.174249][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.178132][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.181767][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.185256][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.188562][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.192135][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.195463][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.198662][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.202162][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.205370][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.208405][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.211460][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.214455][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.217518][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.220859][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.223958][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.227134][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.230298][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.233403][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.236660][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.241268][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.244508][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.247710][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.250975][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.254212][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.257443][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.260705][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.264110][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.267336][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.270872][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.274606][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.277841][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.281068][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.284238][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.287379][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.290510][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.293665][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.296934][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.300119][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.303436][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.306836][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.311386][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.315001][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.318231][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.322009][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.325054][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.328106][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.331248][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.334526][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.337840][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.341036][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.344191][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.347026][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.350142][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.353337][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.356463][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.359562][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.359776][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.361378][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.361596][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.361838][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.362047][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.362258][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.362467][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.362690][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.362923][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.363132][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.363349][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.363559][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.363768][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.363973][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.364185][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.364394][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.364603][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.364810][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.365070][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.365278][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.365490][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.365699][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.365907][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.366117][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.366320][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.366527][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.366737][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.366960][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.367175][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.367386][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.367596][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.367838][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.368047][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.368233][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.368412][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.368591][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.369207][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.371698][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.372118][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.374451][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.376706][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.378942][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.381353][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.381535][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.381709][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.381879][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.382049][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.382229][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.382421][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.382612][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.382793][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.382961][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.383129][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.383304][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.383488][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.383659][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.383829][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.384010][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.384221][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.384409][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.385666][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.385853][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.386034][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.386208][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.386382][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.386555][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.386749][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.386924][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.387090][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.387257][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.387424][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.387591][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.387757][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.565033][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.565398][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.565604][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.567335][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.577369][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.577580][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.583252][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.586450][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.589630][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.592819][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.596015][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.599242][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.602403][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.605570][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.608835][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.612267][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.615560][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.618576][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.621606][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.624655][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.627759][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.630955][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.634068][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.637185][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.640335][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.643474][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.646667][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.649891][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.653073][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.656147][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.659324][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.662460][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.665547][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.668721][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.671854][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.674974][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.678122][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.681217][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.684211][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.686509][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.688874][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.691205][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.693611][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.696671][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.699723][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.702960][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.706099][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.709255][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.712477][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.716046][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.719139][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.722258][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.725268][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.728233][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.731340][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.734321][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.737425][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.740524][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.743628][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.746405][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.749435][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.752543][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.755589][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.758675][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.761806][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.764916][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.767994][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.771110][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.773996][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.776474][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.779410][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.782597][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.785886][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.788909][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.792054][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.795203][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.798304][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.801425][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.804424][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.807419][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.810461][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.810677][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.810882][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.811113][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.811316][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.811530][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.811742][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.811955][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.812180][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.812389][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.812608][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.812811][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.813012][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.813211][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.813421][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.813632][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.813841][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.814046][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.814260][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.814500][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.814698][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.814930][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.815132][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.815515][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.835693][ T5831] usb 6-1: USB disconnect, device number 18 [ 119.838509][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.887864][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.888112][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.888330][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.888535][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.890021][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.890259][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.890506][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.890713][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.890938][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.891140][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.891360][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.891562][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.891754][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.891944][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.892153][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.892359][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.892560][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.892761][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.892960][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.893172][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.893397][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.893595][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.893840][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.894050][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.894271][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.894486][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.894686][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.894915][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.895129][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.895329][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.895530][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.895732][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.895944][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.896147][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.896355][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.896556][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.896760][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.896971][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.897176][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.897375][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.897588][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.897791][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.898005][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.898222][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.898434][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.898645][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 119.898846][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.010530][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 120.010547][ T42] audit: type=1400 audit(1785875495.254:961): avc: denied { write } for pid=9843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.012872][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.044010][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.044208][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.049897][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.050005][ T9776] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 120.053152][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.056716][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.059241][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.061910][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.064733][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.067461][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.069501][ T42] audit: type=1400 audit(1785875495.334:962): avc: denied { write } for pid=9846 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.070238][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.084550][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.084684][ T9776] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 120.084745][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.084792][ T9776] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 120.084935][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 120.085028][ T9776] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 120.088432][ T5813] usb 5-1: USB disconnect, device number 16 [ 120.144807][ T5813] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 120.148160][ T5743] Bluetooth: unknown link type 18 [ 120.154962][ T5743] Bluetooth: hci1: connection err: -111 [ 120.159267][ T5813] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 120.165273][ T5813] ti_usb_3410_5052 5-1:2.0: device disconnected [ 120.167503][ T42] audit: type=1400 audit(1785875495.434:963): avc: denied { bind } for pid=9855 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.177997][ T42] audit: type=1400 audit(1785875495.444:964): avc: denied { read } for pid=9855 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.239153][ T42] audit: type=1400 audit(1785875495.504:965): avc: denied { ioctl } for pid=9868 comm="syz.3.617" path="cgroup:[4026532872]" dev="nsfs" ino=4026532872 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.240332][ T9870] Cannot find set identified by id 0 to match [ 120.324085][ T42] audit: type=1400 audit(1785875495.594:966): avc: denied { write } for pid=9855 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.346194][ T9883] __nla_validate_parse: 5 callbacks suppressed [ 120.346207][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 120.508237][ T42] audit: type=1400 audit(1785875495.774:967): avc: denied { write } for pid=9905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.560055][ T42] audit: type=1400 audit(1785875495.824:968): avc: denied { write } for pid=9908 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.641090][ T9915] netlink: 'syz.1.621': attribute type 21 has an invalid length. [ 120.644332][ T9915] netlink: 'syz.1.621': attribute type 7 has an invalid length. [ 120.690508][ T50] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 120.706510][ T42] audit: type=1400 audit(1785875495.974:969): avc: denied { write } for pid=9913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.713940][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 120.747119][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 120.762469][ T42] audit: type=1400 audit(1785875496.034:970): avc: denied { write } for pid=9926 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.774451][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 120.781535][ T5789] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.785122][ T5789] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.788962][ T5789] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.799227][ T5789] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.840600][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 120.845985][ T50] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 120.852107][ T50] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 120.860113][ T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.863785][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.102141][ T9949] ip_tables: iptables: counters copy to user failed while replacing table [ 121.276110][ T9964] xt_hashlimit: size too large, truncated to 1048576 [ 121.334066][ T9968] sctp: [Deprecated]: syz.2.633 (pid 9968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.334066][ T9968] Use struct sctp_sack_info instead [ 121.437478][ T9978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.447408][ T9978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.810586][ T9048] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 121.973048][ T9048] usb 6-1: not running at top speed; connect to a high speed hub [ 121.976692][ T9048] usb 6-1: config 4 has an invalid interface number: 79 but max is 2 [ 121.979439][ T9048] usb 6-1: config 4 has an invalid interface number: 126 but max is 2 [ 121.982355][ T9048] usb 6-1: config 4 has an invalid interface number: 159 but max is 2 [ 121.985167][ T9048] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 121.988055][ T9048] usb 6-1: config 4 has no interface number 0 [ 121.989975][ T9048] usb 6-1: config 4 has no interface number 1 [ 121.992275][ T9048] usb 6-1: config 4 has no interface number 2 [ 121.994367][ T9048] usb 6-1: config 4 interface 79 altsetting 9 endpoint 0x5 has an invalid bInterval 179, changing to 4 [ 121.997869][ T9048] usb 6-1: config 4 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 122.002099][ T9048] usb 6-1: config 4 interface 126 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 122.005605][ T9048] usb 6-1: config 4 interface 126 altsetting 0 endpoint 0x3 has invalid maxpacket 72, setting to 64 [ 122.009187][ T9048] usb 6-1: config 4 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.012826][ T9048] usb 6-1: config 4 interface 126 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 122.016128][ T9048] usb 6-1: config 4 interface 126 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 122.019618][ T9048] usb 6-1: config 4 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.024016][ T9048] usb 6-1: config 4 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.027616][ T9048] usb 6-1: config 4 interface 126 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 122.030872][ T9048] usb 6-1: config 4 interface 159 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 122.034214][ T9048] usb 6-1: config 4 interface 159 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 122.037478][ T9048] usb 6-1: config 4 interface 159 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 122.040892][ T9048] usb 6-1: config 4 interface 159 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 122.044182][ T9048] usb 6-1: config 4 interface 159 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 122.047447][ T9048] usb 6-1: config 4 interface 159 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 122.050835][ T9048] usb 6-1: config 4 interface 159 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 122.054294][ T9048] usb 6-1: config 4 interface 159 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 122.057602][ T9048] usb 6-1: config 4 interface 159 altsetting 3 endpoint 0xE has an invalid bInterval 203, changing to 4 [ 122.061218][ T9048] usb 6-1: config 4 interface 159 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 122.066569][ T9048] usb 6-1: config 4 interface 79 has no altsetting 0 [ 122.069979][ T9048] usb 6-1: config 4 interface 159 has no altsetting 0 [ 122.073842][ T9048] usb 6-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=fe.2b [ 122.076689][ T9048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.079120][ T9048] usb 6-1: Product:  [ 122.080506][ T9048] usb 6-1: Manufacturer: ⷿ좢읐隉ꐚᮕ茀ꔭ挙䍚뎥࠳祭ᾲ퟊贬ഗ⎫꒵ⷸ恘Œ륶祊ঊ䫯씎뼅㡶뫲肶ⴳ넰꜂㫘쿰ࢮ߮潓뢾剪̆냌ꕃ↛┨ꄭ宩︉﹚煴䵽ี⓹ᠰ鷃䟈歳݈胈죢歬鼚 [ 122.086842][ T9048] usb 6-1: SerialNumber: 쫣簐緫싋钅盔뫧뜒풋패⎫啪墀떧돈⠔鑓⼣竮㗘냖㑦戮師忏绽頧Ԓ샘鉾ㄠ莌酪ـ劢劥햒禉輯듁沂᧹赻轖ह殢夂㻆㮪谑볇ﾇ鍵᚞摢픸揆炕㕍ꇢ鞑첐쏕Ოᒓଚ꓍ﾏ⣱픆ꂣ滱쀉餓Ⲥ२쿿ട츾䎵녏ꌪ丠덺韩冠鄞ᆴ碪⨐õ劚ꎶ캠⪠ᰝ釛렸⊗䗃⠽爞 [ 122.953630][ T9995] kexec: Could not allocate control_code_buffer [ 123.380632][ T5824] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 123.435922][ T50] usb 8-1: USB disconnect, device number 17 [ 123.540541][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 123.544781][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.550987][ T5824] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.555202][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.558745][ T5824] usb 7-1: Product: syz [ 123.560691][ T5824] usb 7-1: Manufacturer: syz [ 123.562740][ T5824] usb 7-1: SerialNumber: syz [ 123.567497][ T5824] usb 7-1: config 0 descriptor?? [ 123.574446][ T5824] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.578731][ T5824] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 124.177861][ T5824] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 124.350540][ T50] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 124.426897][ T9985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.500535][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 124.504457][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 124.511976][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 124.519401][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.524337][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 124.528322][ T50] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 124.531509][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 124.534496][ T50] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 124.539917][ T50] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 124.543137][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.548324][ T50] usb 8-1: Product: syz [ 124.551449][ T50] usb 8-1: Manufacturer: syz [ 124.552716][ T9048] usb 6-1: USB disconnect, device number 19 [ 124.553345][ T50] usb 8-1: SerialNumber: syz [ 124.560254][T10024] jffs2: notice: (10024) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 124.563556][ T50] usb 8-1: config 0 descriptor?? [ 124.564664][T10026] netlink: 'syz.0.649': attribute type 21 has an invalid length. [ 124.564683][T10026] netlink: 'syz.0.649': attribute type 7 has an invalid length. [ 124.579292][T10016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.584002][T10016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.593474][ T50] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.662918][T10034] fuse: fd is not a fuse device [ 124.812710][ T5824] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 124.819778][ T5824] em28xx 7-1:0.0: board has no eeprom [ 124.888228][ T50] usb 8-1: USB disconnect, device number 18 [ 124.900888][ T5824] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 124.904132][ T5824] em28xx 7-1:0.0: dvb set to bulk mode. [ 124.906909][ T5813] em28xx 7-1:0.0: Binding DVB extension [ 124.929728][ T5824] usb 7-1: USB disconnect, device number 20 [ 124.940602][ T5824] em28xx 7-1:0.0: Disconnecting em28xx [ 124.969878][ T5813] em28xx 7-1:0.0: Registering input extension [ 124.972471][ T5824] em28xx 7-1:0.0: Closing input extension [ 124.981531][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 125.002058][ T5824] em28xx 7-1:0.0: Freeing device [ 125.130555][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 125.133591][ T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 125.136425][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.139709][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.144390][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.270539][ T9048] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 125.359865][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 125.359894][ T42] audit: type=1400 audit(1785875500.624:995): avc: denied { read write } for pid=10056 comm="syz.2.657" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 125.371265][ T42] audit: type=1400 audit(1785875500.624:996): avc: denied { open } for pid=10056 comm="syz.2.657" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 125.373909][T10057] UHID_CREATE from different security context by process 368 (syz.2.657), this is not allowed. [ 125.391918][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.395653][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.398677][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.402044][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.405104][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.408093][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.411558][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.414597][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.417506][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.420483][ T9048] usb 6-1: Using ep0 maxpacket: 8 [ 125.421822][ T9048] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 125.423490][ T5831] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 125.431007][ T9048] usb 6-1: config 1 interface 0 has no altsetting 0 [ 125.438917][ T9048] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 125.445806][ T5831] hid-generic 0000:0000:0004.0002: hidraw1: HID v0.03 Device [syz1] on syz0 [ 125.454997][ T9048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.463198][ T9048] usb 6-1: Product: syz [ 125.465086][ T9048] usb 6-1: Manufacturer: syz [ 125.470229][ T9048] usb 6-1: SerialNumber: syz [ 125.499545][T10058] fido_id[10058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.545723][T10060] fuse: Bad value for 'group_id' [ 125.548119][T10060] fuse: Bad value for 'group_id' [ 125.591515][T10062] jffs2: notice: (10062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 125.730155][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.737209][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.787385][ T42] audit: type=1400 audit(1785875501.054:997): avc: denied { ioctl } for pid=10071 comm="syz.2.661" path="socket:[21995]" dev="sockfs" ino=21995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.808080][ T42] audit: type=1400 audit(1785875501.074:998): avc: denied { write } for pid=10066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.824384][T10072] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.837786][T10072] netlink: 'syz.2.661': attribute type 11 has an invalid length. [ 125.841499][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 125.866272][T10072] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 125.872426][ T42] audit: type=1400 audit(1785875501.134:999): avc: denied { write } for pid=10075 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.892010][T10072] bond1 (unregistering): Released all slaves [ 125.930046][ T42] audit: type=1400 audit(1785875501.194:1000): avc: denied { connect } for pid=10071 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.122388][T10052] syz.3.655 (10052): drop_caches: 2 [ 126.221749][ T9048] usbhid 6-1:1.0: can't add hid device: -71 [ 126.226397][ T9048] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 126.240475][ T9048] usb 6-1: USB disconnect, device number 20 [ 126.307578][T10113] vlan2: entered promiscuous mode [ 126.313375][T10113] hsr0: entered promiscuous mode [ 126.315876][T10113] vlan2: entered allmulticast mode [ 126.317984][T10113] hsr0: entered allmulticast mode [ 126.320035][T10113] hsr_slave_0: entered allmulticast mode [ 126.323282][T10113] hsr_slave_1: entered allmulticast mode [ 126.377378][T10120] netlink: 'syz.2.666': attribute type 21 has an invalid length. [ 126.382761][T10120] netlink: 'syz.2.666': attribute type 7 has an invalid length. [ 126.517967][ T42] audit: type=1400 audit(1785875501.784:1001): avc: denied { ioctl } for pid=10126 comm="syz.2.667" path="socket:[24694]" dev="sockfs" ino=24694 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.570594][ T41] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 126.757883][ T41] usb 8-1: Using ep0 maxpacket: 16 [ 126.762077][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 126.767871][ T41] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.772207][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.775893][ T41] usb 8-1: Product: syz [ 126.777529][ T41] usb 8-1: Manufacturer: syz [ 126.779767][ T41] usb 8-1: SerialNumber: syz [ 126.793613][ T41] usb 8-1: config 0 descriptor?? [ 126.798517][ T41] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.803668][ T41] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 126.808526][T10142] netlink: 'syz.2.668': attribute type 8 has an invalid length. [ 126.812598][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 126.825934][T10142] bond0: entered promiscuous mode [ 126.833910][T10142] gretap0: entered promiscuous mode [ 126.838079][T10142] bond0: left promiscuous mode [ 126.842039][T10142] gretap0: left promiscuous mode [ 126.843089][ T42] audit: type=1400 audit(1785875502.114:1002): avc: denied { write } for pid=10140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.862384][ T42] audit: type=1400 audit(1785875502.134:1003): avc: denied { mount } for pid=10141 comm="syz.2.668" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.878558][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 126.886121][T10148] netlink: 'syz.1.669': attribute type 3 has an invalid length. [ 126.890016][T10148] netlink: 'syz.1.669': attribute type 1 has an invalid length. [ 126.894971][T10148] netlink: 224 bytes leftover after parsing attributes in process `syz.1.669'. [ 126.898662][T10148] NCSI netlink: No device for ifindex 0 [ 126.904102][ T42] audit: type=1400 audit(1785875502.174:1004): avc: denied { read } for pid=10144 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.398943][T10160] syz.2.671 (10160): drop_caches: 2 [ 127.400170][ T41] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 127.762543][ T5813] usb 5-1: USB disconnect, device number 17 [ 127.948827][ T50] hid-generic 0000:0000:0004.0003: hidraw1: HID v0.03 Device [syz1] on syz0 [ 128.000686][T10207] fido_id[10207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.013501][ T41] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 128.023700][ T41] em28xx 8-1:0.0: board has no eeprom [ 128.035382][T10213] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 128.079143][T10215] [ 128.081548][ T41] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 128.085072][ T41] em28xx 8-1:0.0: dvb set to bulk mode. [ 128.087142][ T5887] em28xx 8-1:0.0: Binding DVB extension [ 128.093808][ T41] usb 8-1: USB disconnect, device number 19 [ 128.103557][ T41] em28xx 8-1:0.0: Disconnecting em28xx [ 128.135051][ T5887] em28xx 8-1:0.0: Registering input extension [ 128.138469][ T41] em28xx 8-1:0.0: Closing input extension [ 128.147550][ T41] em28xx 8-1:0.0: Freeing device [ 128.834294][T10251] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 129.110201][T10269] netlink: 84 bytes leftover after parsing attributes in process `syz.3.691'. [ 129.111906][T10276] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 129.114964][T10269] netlink: 84 bytes leftover after parsing attributes in process `syz.3.691'. [ 129.116593][T10276] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 129.116915][T10276] vhci_hcd vhci_hcd.0: Device attached [ 129.129921][T10277] vhci_hcd: unknown pdu 1 [ 129.134329][ T5817] vhci_hcd vhci_hcd.1: stop threads [ 129.138505][ T5817] vhci_hcd vhci_hcd.1: release socket [ 129.140179][ T5817] vhci_hcd vhci_hcd.1: disconnect device [ 129.165315][T10285] netlink: 'syz.3.694': attribute type 21 has an invalid length. [ 129.167770][T10285] netlink: 'syz.3.694': attribute type 7 has an invalid length. [ 129.207863][T10291] xt_hashlimit: size too large, truncated to 1048576 [ 129.291945][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.697'. [ 129.331563][T10297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10297 comm=syz.0.697 [ 129.360559][ T41] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 129.530665][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 129.537039][ T41] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 129.549472][T10311] kvm: pic: non byte write [ 129.552971][ T41] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 129.556998][ T41] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.560333][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.757469][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 129.924544][T10344] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 129.926348][T10348] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 130.100466][T10363] netlink: 'syz.0.714': attribute type 8 has an invalid length. [ 130.103791][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 130.119122][T10363] bond0: entered promiscuous mode [ 130.121840][T10363] bond_slave_0: entered promiscuous mode [ 130.124412][T10363] bond_slave_1: entered promiscuous mode [ 130.134192][T10363] gretap0: entered promiscuous mode [ 130.134551][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.137548][T10363] team0: entered promiscuous mode [ 130.141347][T10363] team_slave_0: entered promiscuous mode [ 130.143169][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.143840][T10363] team_slave_1: entered promiscuous mode [ 130.157512][T10363] hsr1: entered promiscuous mode [ 130.161166][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 130.205007][T10365] team_slave_0 (unregistering): left promiscuous mode [ 130.221438][T10365] team0: Port device team_slave_0 removed [ 130.377164][T10393] netlink: 'syz.0.719': attribute type 21 has an invalid length. [ 130.380564][T10393] netlink: 'syz.0.719': attribute type 7 has an invalid length. [ 130.385897][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 130.385922][ T42] audit: type=1400 audit(1785875505.654:1072): avc: denied { write } for pid=10383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.446921][ T42] audit: type=1400 audit(1785875505.714:1073): avc: denied { write } for pid=10399 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.525093][T10406] netlink: 'syz.0.721': attribute type 21 has an invalid length. [ 130.528330][T10406] netlink: 'syz.0.721': attribute type 7 has an invalid length. [ 130.845961][ T42] audit: type=1400 audit(1785875506.114:1074): avc: denied { write } for pid=10457 comm="syz.3.726" name="cluster" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.855072][ T42] audit: type=1400 audit(1785875506.114:1075): avc: denied { write } for pid=10457 comm="syz.3.726" name="heartbeat" dev="configfs" ino=24173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.864169][ T42] audit: type=1400 audit(1785875506.114:1076): avc: denied { read append } for pid=10457 comm="syz.3.726" name="blocks" dev="configfs" ino=24180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 130.873653][ T42] audit: type=1800 audit(1785875506.124:1077): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.726" name="blocks" dev="configfs" ino=24180 res=0 errno=0 [ 130.883797][ T42] audit: type=1400 audit(1785875506.144:1078): avc: denied { write } for pid=10456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.941620][ T42] audit: type=1400 audit(1785875506.214:1079): avc: denied { write } for pid=10464 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.106396][ T50] usb 7-1: USB disconnect, device number 21 [ 132.180559][T10470] __nla_validate_parse: 2 callbacks suppressed [ 132.180576][T10470] netlink: 256 bytes leftover after parsing attributes in process `syz.2.728'. [ 132.189076][T10470] debugfs: Bad value for 'uid' [ 132.191132][T10470] debugfs: Bad value for 'uid' [ 132.273497][T10476] jffs2: notice: (10476) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 132.316504][T10482] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=4 [ 132.320707][T10482] tmpfs: Unknown parameter 'grpquota' [ 132.757236][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759750][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.587176][T10421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.696426][ T42] audit: type=1400 audit(1785875508.964:1080): avc: denied { write } for pid=10502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.734142][T10514] netlink: 124 bytes leftover after parsing attributes in process `syz.1.744'. [ 133.758266][T10514] loop8: detected capacity change from 0 to 4194304 [ 133.773303][T10517] /dev/nullb0: Can't open blockdev [ 133.803907][T10514] overlay: Unknown parameter 'subj_type' [ 133.807053][T10514] netlink: 23 bytes leftover after parsing attributes in process `syz.1.744'. [ 133.825484][ T42] audit: type=1400 audit(1785875509.094:1081): avc: denied { write } for pid=10515 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.875766][T10523] FAULT_INJECTION: forcing a failure. [ 133.875766][T10523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.880584][T10523] CPU: 3 UID: 0 PID: 10523 Comm: syz.1.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.880602][T10523] Tainted: [L]=SOFTLOCKUP [ 133.880606][T10523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.880620][T10523] Call Trace: [ 133.880639][T10523] [ 133.880643][T10523] dump_stack_lvl+0x100/0x190 [ 133.880671][T10523] should_fail_ex.cold+0x5/0xa [ 133.880698][T10523] _copy_from_user+0x2e/0xd0 [ 133.880721][T10523] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 133.880791][T10523] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 133.880827][T10523] do_sock_getsockopt+0x2d0/0x6e0 [ 133.880857][T10523] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 133.880883][T10523] ? rcu_read_lock_any_held+0x6a/0xa0 [ 133.880906][T10523] ? find_held_lock+0x2b/0x80 [ 133.880928][T10523] ? __fget_files+0x21f/0x3d0 [ 133.880952][T10523] __sys_getsockopt+0x148/0x260 [ 133.880980][T10523] ? __x64_sys_getsockopt+0xbd/0x160 [ 133.881001][T10523] __x64_sys_getsockopt+0xbd/0x160 [ 133.881022][T10523] ? do_syscall_64+0x90/0x870 [ 133.881088][T10523] ? lockdep_hardirqs_on+0x78/0x100 [ 133.881109][T10523] do_syscall_64+0x115/0x870 [ 133.881129][T10523] ? clear_bhb_loop+0x40/0x90 [ 133.881150][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.881168][T10523] RIP: 0033:0x7f325b59e019 [ 133.881183][T10523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.881200][T10523] RSP: 002b:00007f325c393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 133.881232][T10523] RAX: ffffffffffffffda RBX: 00007f325b825fa0 RCX: 00007f325b59e019 [ 133.881243][T10523] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000005 [ 133.881254][T10523] RBP: 00007f325c393090 R08: 0000200000000300 R09: 0000000000000000 [ 133.881265][T10523] R10: 0000200000032740 R11: 0000000000000246 R12: 0000000000000001 [ 133.881276][T10523] R13: 00007f325b826038 R14: 00007f325b825fa0 R15: 00007ffc7e0d1898 [ 133.881299][T10523] [ 134.094993][T10534] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 134.268174][T10549] tipc: Started in network mode [ 134.269816][T10549] tipc: Node identity 4, cluster identity 4711 [ 134.272281][T10549] tipc: Node number set to 4 [ 135.424552][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 135.424565][ T42] audit: type=1400 audit(1785875510.694:1095): avc: denied { write } for pid=10582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.485603][T10528] syz.2.748 (10528): drop_caches: 1 [ 135.490646][T10536] syz.2.748 (10536): drop_caches: 1 [ 135.494434][ T42] audit: type=1400 audit(1785875510.764:1096): avc: denied { write } for pid=10585 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.616508][ T42] audit: type=1400 audit(1785875510.884:1097): avc: denied { write } for pid=10588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.668534][ T42] audit: type=1400 audit(1785875510.934:1098): avc: denied { read write } for pid=10591 comm="syz.2.756" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 135.676438][T10592] MTRR 1 not used [ 135.680878][T10592] syzkaller0: entered promiscuous mode [ 135.682704][T10592] syzkaller0: entered allmulticast mode [ 135.685213][ T5743] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 135.685254][ T5743] Bluetooth: hci1: Dropping invalid advertising data [ 135.690318][ T5743] Bluetooth: hci1: Dropping invalid advertising data [ 135.692682][ T5743] Bluetooth: hci1: Malformed LE Event: 0x02 [ 135.695187][ T42] audit: type=1400 audit(1785875510.934:1099): avc: denied { open } for pid=10591 comm="syz.2.756" path="/155/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 135.708288][ T42] audit: type=1400 audit(1785875510.944:1100): avc: denied { ioctl } for pid=10591 comm="syz.2.756" path="/155/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 135.716556][ T42] audit: type=1400 audit(1785875510.964:1101): avc: denied { write } for pid=10593 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.838950][ T42] audit: type=1400 audit(1785875511.104:1102): avc: denied { write } for pid=10596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.930300][ T42] audit: type=1400 audit(1785875511.194:1103): avc: denied { write } for pid=10600 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.280457][ T42] audit: type=1400 audit(1785875511.544:1104): avc: denied { write } for pid=10635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.233636][T10545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.506157][T10684] libceph: secret too big 3051 [ 137.720123][T10698] FAULT_INJECTION: forcing a failure. [ 137.720123][T10698] name failslab, interval 1, probability 0, space 0, times 0 [ 137.736838][T10698] CPU: 1 UID: 0 PID: 10698 Comm: syz.0.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.736859][T10698] Tainted: [L]=SOFTLOCKUP [ 137.736863][T10698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.736869][T10698] Call Trace: [ 137.736873][T10698] [ 137.736878][T10698] dump_stack_lvl+0x100/0x190 [ 137.736897][T10698] should_fail_ex.cold+0x5/0xa [ 137.736914][T10698] should_failslab+0xc2/0x120 [ 137.736947][T10698] __kmalloc_noprof+0xfc/0x820 [ 137.736973][T10698] ? rcu_is_watching+0x12/0xc0 [ 137.737001][T10698] ? tomoyo_realpath_from_path+0xb6/0x690 [ 137.737024][T10698] tomoyo_realpath_from_path+0xb6/0x690 [ 137.737040][T10698] tomoyo_path_number_perm+0x23c/0x580 [ 137.737061][T10698] ? tomoyo_path_number_perm+0x22e/0x580 [ 137.737077][T10698] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.737105][T10698] ? find_held_lock+0x2b/0x80 [ 137.737115][T10698] ? __fget_files+0x215/0x3d0 [ 137.737126][T10698] ? hook_file_ioctl_common+0x140/0x440 [ 137.737139][T10698] ? __fget_files+0x215/0x3d0 [ 137.737152][T10698] ? __fget_files+0x21f/0x3d0 [ 137.737164][T10698] security_file_ioctl+0xd3/0x230 [ 137.737182][T10698] __x64_sys_ioctl+0xb7/0x210 [ 137.737199][T10698] do_syscall_64+0x115/0x870 [ 137.737219][T10698] ? clear_bhb_loop+0x40/0x90 [ 137.737240][T10698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.737259][T10698] RIP: 0033:0x7f385a19e019 [ 137.737276][T10698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.737293][T10698] RSP: 002b:00007f38583f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.737313][T10698] RAX: ffffffffffffffda RBX: 00007f385a425fa0 RCX: 00007f385a19e019 [ 137.737325][T10698] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 137.737335][T10698] RBP: 00007f38583f6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.737346][T10698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.737356][T10698] R13: 00007f385a426038 R14: 00007f385a425fa0 R15: 00007ffe22e4ab58 [ 137.737380][T10698] [ 137.737389][T10698] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.773512][T10706] netlink: 84 bytes leftover after parsing attributes in process `syz.3.765'. [ 137.793408][T10703] netlink: 'syz.2.767': attribute type 4 has an invalid length. [ 137.795449][T10706] netlink: 84 bytes leftover after parsing attributes in process `syz.3.765'. [ 137.948061][T10721] netlink: 'syz.1.770': attribute type 4 has an invalid length. [ 138.089715][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 138.210699][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 138.260650][T10742] : renamed from bond0 (while UP) [ 138.327244][T10744] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 138.400749][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 138.405641][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 138.409063][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.420908][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 138.424617][ T10] pvrusb2: ********** [ 138.425937][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 138.429122][ T10] pvrusb2: Important functionality might not be entirely working. [ 138.435943][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 138.440132][ T10] pvrusb2: ********** [ 138.519849][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 138.583078][T10761] bond2: entered promiscuous mode [ 138.586925][T10761] bond2: entered allmulticast mode [ 138.602570][T10761] team0: Device xfrm0 is of different type [ 138.624369][ T2522] pvrusb2: Invalid write control endpoint [ 138.694278][ T2522] pvrusb2: Invalid write control endpoint [ 138.697209][ T2522] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 138.701375][ T2522] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 138.704660][ T2522] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 138.708730][ T2522] pvrusb2: Device being rendered inoperable [ 138.719602][ T2522] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 138.722751][ T2522] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 138.728580][ T2522] pvrusb2: Attached sub-driver cx25840 [ 138.732112][ T2522] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 138.737063][ T2522] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 138.806930][T10772] bridge0: entered allmulticast mode [ 138.822073][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 138.831036][T10721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10721 comm=syz.1.770 [ 138.977432][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 139.194153][T10800] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 139.201359][T10801] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 139.240308][T10801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.260048][T10801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10801 comm=syz.0.788 [ 139.556162][T10796] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 139.615172][T10796] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 139.619585][T10796] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 139.624785][T10796] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 139.627568][T10796] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 139.631190][T10796] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 139.648821][T10796] pci 0000:00:01.0: Adding to iommu group 1 [ 139.661283][T10796] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 139.664130][T10796] pci 0000:00:01.0: vgaarb: bridge control possible [ 139.666450][T10796] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 139.692536][T10796] pci 0000:00:01.0: BAR 0 [mem 0x80800000-0x80ffffff pref]: assigned [ 139.711293][T10796] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 139.724785][T10796] pci 0000:00:01.0: BAR 4 [mem 0x80084000-0x80084fff]: assigned [ 139.797016][T10796] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 139.801046][T10796] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 139.805266][T10796] [drm] features: -virgl +edid -resource_blob -host_visible [ 139.805281][T10796] [drm] features: -context_init -blob_alignment [ 139.839702][T10796] [drm] number of scanouts: 1 [ 139.841458][T10796] [drm] number of cap sets: 0 [ 139.848794][T10796] [drm:virtio_gpu_init.cold] *ERROR* modeset init failed [ 140.192149][T10796] virtio_gpu virtio0: probe with driver virtio_gpu failed with error -4 [ 140.346668][ T5743] Bluetooth: hci1: command 0x2016 tx timeout [ 140.435674][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 140.435696][ T42] audit: type=1400 audit(1785875515.704:1154): avc: denied { write } for pid=10873 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.457941][ T42] audit: type=1400 audit(1785875515.714:1155): avc: denied { write } for pid=10882 comm="syz.0.805" name="kcm" dev="proc" ino=4026533027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 140.481095][ T42] audit: type=1400 audit(1785875515.754:1156): avc: denied { search } for pid=10880 comm="syz.3.804" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.505219][ T42] audit: type=1400 audit(1785875515.774:1157): avc: denied { ioctl } for pid=10882 comm="syz.0.805" path="socket:[23460]" dev="sockfs" ino=23460 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.535315][ T42] audit: type=1400 audit(1785875515.804:1158): avc: denied { ioctl } for pid=10880 comm="syz.3.804" path="/205/tracing/dynamic_events" dev="tracefs" ino=3 ioctlcmd=0x542e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 140.626529][ T42] audit: type=1400 audit(1785875515.894:1159): avc: denied { ioctl } for pid=10890 comm="syz.0.806" path="socket:[25337]" dev="sockfs" ino=25337 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.629248][T10895] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 140.646680][ T42] audit: type=1400 audit(1785875515.894:1160): avc: denied { read write } for pid=10890 comm="syz.0.806" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.656830][ T42] audit: type=1400 audit(1785875515.894:1161): avc: denied { open } for pid=10890 comm="syz.0.806" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.666518][ T42] audit: type=1400 audit(1785875515.914:1162): avc: denied { read } for pid=10890 comm="syz.0.806" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.674601][ T42] audit: type=1400 audit(1785875515.944:1163): avc: denied { write } for pid=10889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.983009][ T1484] usb 6-1: USB disconnect, device number 21 [ 141.080655][T10916] bridge0: entered promiscuous mode [ 141.187827][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 141.453443][T10939] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 141.751728][T10952] FAULT_INJECTION: forcing a failure. [ 141.751728][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 141.756669][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.2.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.756708][T10952] Tainted: [L]=SOFTLOCKUP [ 141.756714][T10952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.756733][T10952] Call Trace: [ 141.756758][T10952] [ 141.756764][T10952] dump_stack_lvl+0x100/0x190 [ 141.756801][T10952] should_fail_ex.cold+0x5/0xa [ 141.756822][T10952] should_failslab+0xc2/0x120 [ 141.756842][T10952] __kmalloc_cache_noprof+0x91/0x6c0 [ 141.756865][T10952] ? lockdep_init_map_type+0x50/0x250 [ 141.756886][T10952] ? alloc_netdev_mqs+0xe3c/0x15c0 [ 141.756970][T10952] alloc_netdev_mqs+0xe3c/0x15c0 [ 141.756995][T10952] rtnl_create_link+0xc13/0xf80 [ 141.757017][T10952] rtnl_newlink+0x13bd/0x2380 [ 141.757037][T10952] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.757051][T10952] ? find_held_lock+0x2b/0x80 [ 141.757062][T10952] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 141.757095][T10952] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 141.757110][T10952] ? avc_has_perm_noaudit+0x145/0x3b0 [ 141.757134][T10952] ? find_held_lock+0x2b/0x80 [ 141.757143][T10952] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 141.757157][T10952] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 141.757173][T10952] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.757188][T10952] rtnetlink_rcv_msg+0x95e/0xe90 [ 141.757204][T10952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.757222][T10952] ? ref_tracker_free+0x37e/0x6c0 [ 141.757241][T10952] netlink_rcv_skb+0x159/0x420 [ 141.757266][T10952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.757282][T10952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.757298][T10952] ? netlink_deliver_tap+0x1ae/0xcc0 [ 141.757311][T10952] netlink_unicast+0x585/0x850 [ 141.757324][T10952] ? __pfx_netlink_unicast+0x10/0x10 [ 141.757340][T10952] netlink_sendmsg+0x8b0/0xda0 [ 141.757354][T10952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.757366][T10952] ? selinux_socket_sendmsg+0x198/0x2f0 [ 141.757385][T10952] ____sys_sendmsg+0xa4d/0xbe0 [ 141.757403][T10952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.757416][T10952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.757438][T10952] ___sys_sendmsg+0x190/0x1e0 [ 141.757450][T10952] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.757460][T10952] ? __lock_acquire+0x49f/0x1a40 [ 141.757473][T10952] ? get_pid_task+0x106/0x250 [ 141.757502][T10952] __sys_sendmsg+0x160/0x210 [ 141.757517][T10952] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.757543][T10952] do_syscall_64+0x115/0x870 [ 141.757612][T10952] ? clear_bhb_loop+0x40/0x90 [ 141.757633][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.757658][T10952] RIP: 0033:0x7f93fd39e019 [ 141.757670][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.757682][T10952] RSP: 002b:00007f93fe1fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.757700][T10952] RAX: ffffffffffffffda RBX: 00007f93fd625fa0 RCX: 00007f93fd39e019 [ 141.757706][T10952] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 141.757712][T10952] RBP: 00007f93fe1fa090 R08: 0000000000000000 R09: 0000000000000000 [ 141.757718][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.757724][T10952] R13: 00007f93fd626038 R14: 00007f93fd625fa0 R15: 00007fff5fa672b8 [ 141.757738][T10952] [ 141.909684][T10954] bond1: ARP target 9.0.0.0 is already present [ 141.912610][T10954] bond1: option arp_ip_target: invalid value (9) [ 141.916429][T10954] bond1 (unregistering): Released all slaves [ 142.154283][T10967] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 142.172214][T10967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.329782][T10976] netlink: Unknown conntrack attr (0) [ 142.331773][T10976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.420902][ T5754] Bluetooth: hci1: command 0x2016 tx timeout [ 142.438504][T10982] team0: Port device xfrm0 removed [ 142.441458][T10982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.448211][ T1168] tipc: Resetting bearer [ 142.466009][T10982] team0: Port device xfrm0 added [ 142.469184][T10982] tipc: Enabling of bearer rejected, already enabled [ 142.780519][ T5887] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 142.851262][T10999] ftl_cs: FTL header not found. [ 142.932731][T11002] kvm: pic: non byte write [ 142.950911][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 142.957136][ T5887] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 142.962371][ T5887] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.967050][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.971322][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.975353][ T5887] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.981673][ T5887] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.985427][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.006625][T10999] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072] [ 143.055719][T11007] xt_hashlimit: size too large, truncated to 1048576 [ 143.268875][ T5887] usb 6-1: usb_control_msg returned -32 [ 143.274008][ T5887] usbtmc 6-1:16.0: can't read capabilities [ 143.334904][T11014] ================================================================== [ 143.337662][T11014] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 143.340669][T11014] Read of size 8 at addr ffff88805b10b738 by task syz.3.842/11014 [ 143.345115][T11014] [ 143.346887][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.3.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.346921][T11014] Tainted: [L]=SOFTLOCKUP [ 143.346929][T11014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.346942][T11014] Call Trace: [ 143.346952][T11014] [ 143.346960][T11014] dump_stack_lvl+0x100/0x190 [ 143.346989][T11014] print_report+0x13d/0x4b0 [ 143.347029][T11014] ? __virt_addr_valid+0x239/0x430 [ 143.347071][T11014] ? __release_resource+0x276/0x2c0 [ 143.347100][T11014] kasan_report+0xdf/0x1c0 [ 143.347125][T11014] ? __release_resource+0x276/0x2c0 [ 143.347157][T11014] __release_resource+0x276/0x2c0 [ 143.347182][T11014] release_resource+0x26/0x40 [ 143.347207][T11014] pci_remove_bus_device+0x2d3/0x3b0 [ 143.347231][T11014] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 143.347255][T11014] remove_store+0x123/0x140 [ 143.347279][T11014] ? __pfx_remove_store+0x10/0x10 [ 143.347304][T11014] ? find_held_lock+0x2b/0x80 [ 143.347324][T11014] ? sysfs_file_kobj+0xe4/0x290 [ 143.347351][T11014] ? sysfs_file_kobj+0xe4/0x290 [ 143.347378][T11014] ? __pfx_remove_store+0x10/0x10 [ 143.347400][T11014] dev_attr_store+0x58/0x80 [ 143.347427][T11014] ? __pfx_dev_attr_store+0x10/0x10 [ 143.347453][T11014] sysfs_kf_write+0xf2/0x150 [ 143.347484][T11014] kernfs_fop_write_iter+0x3e0/0x5f0 [ 143.347512][T11014] ? __pfx_sysfs_kf_write+0x10/0x10 [ 143.347543][T11014] vfs_write+0x6ac/0x1050 [ 143.347588][T11014] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 143.347617][T11014] ? __pfx_vfs_write+0x10/0x10 [ 143.347658][T11014] ksys_write+0x12a/0x250 [ 143.347676][T11014] ? __pfx_ksys_write+0x10/0x10 [ 143.347698][T11014] do_syscall_64+0x115/0x870 [ 143.347723][T11014] ? clear_bhb_loop+0x40/0x90 [ 143.347745][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.347763][T11014] RIP: 0033:0x7f02f1d9e019 [ 143.347780][T11014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.347798][T11014] RSP: 002b:00007f02f2cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.347817][T11014] RAX: ffffffffffffffda RBX: 00007f02f2025fa0 RCX: 00007f02f1d9e019 [ 143.347830][T11014] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 143.347841][T11014] RBP: 00007f02f1e3500c R08: 0000000000000000 R09: 0000000000000000 [ 143.347852][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.347863][T11014] R13: 00007f02f2026038 R14: 00007f02f2025fa0 R15: 00007fff947b2cf8 [ 143.347881][T11014] [ 143.347888][T11014] [ 143.450250][T11014] Allocated by task 8606: [ 143.452113][T11014] kasan_save_stack+0x30/0x50 [ 143.454113][T11014] kasan_save_track+0x14/0x30 [ 143.456074][T11014] __kasan_kmalloc+0xaa/0xb0 [ 143.458097][T11014] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 143.460688][T11014] kmemdup_noprof+0x29/0x60 [ 143.462667][T11014] platform_device_add_resources+0x37/0x100 [ 143.465099][T11014] dwc2_pci_probe+0x1d3/0x360 [ 143.467019][T11014] local_pci_probe+0xdd/0x1b0 [ 143.468840][T11014] pci_call_probe+0x176/0x800 [ 143.470685][T11014] pci_device_probe+0x1cd/0x370 [ 143.472648][T11014] really_probe+0x241/0xa60 [ 143.474564][T11014] __driver_probe_device+0x20e/0x450 [ 143.476740][T11014] device_driver_attach+0xd1/0x220 [ 143.478765][T11014] bind_store+0xf4/0x190 [ 143.480514][T11014] drv_attr_store+0x74/0xb0 [ 143.482397][T11014] sysfs_kf_write+0xf2/0x150 [ 143.484347][T11014] kernfs_fop_write_iter+0x3e0/0x5f0 [ 143.486388][T11014] vfs_write+0x6ac/0x1050 [ 143.488065][T11014] ksys_write+0x12a/0x250 [ 143.489873][T11014] do_syscall_64+0x115/0x870 [ 143.491837][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.494230][T11014] [ 143.495225][T11014] Freed by task 11014: [ 143.496871][T11014] kasan_save_stack+0x30/0x50 [ 143.498748][T11014] kasan_save_track+0x14/0x30 [ 143.500667][T11014] kasan_save_free_info+0x3b/0x70 [ 143.502747][T11014] __kasan_slab_free+0x5f/0x80 [ 143.504809][T11014] kfree+0x22b/0x6c0 [ 143.506475][T11014] platform_device_release+0x8a/0xb0 [ 143.508671][T11014] device_release+0xd2/0x270 [ 143.510626][T11014] kobject_put+0x1f7/0x640 [ 143.512584][T11014] put_device+0x1f/0x30 [ 143.514363][T11014] platform_device_unregister+0x45/0x50 [ 143.516704][T11014] dwc2_pci_remove+0x55/0xd0 [ 143.518677][T11014] pci_device_remove+0xb2/0x1d0 [ 143.520681][T11014] device_remove+0xcb/0x180 [ 143.522598][T11014] device_release_driver_internal+0x44e/0x620 [ 143.525179][T11014] pci_stop_bus_device+0x120/0x160 [ 143.527227][T11014] pci_stop_and_remove_bus_device+0x58/0xa0 [ 143.529516][T11014] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 143.532088][T11014] remove_store+0x123/0x140 [ 143.534000][T11014] dev_attr_store+0x58/0x80 [ 143.535944][T11014] sysfs_kf_write+0xf2/0x150 [ 143.537893][T11014] kernfs_fop_write_iter+0x3e0/0x5f0 [ 143.540091][T11014] vfs_write+0x6ac/0x1050 [ 143.541890][T11014] ksys_write+0x12a/0x250 [ 143.543711][T11014] do_syscall_64+0x115/0x870 [ 143.545514][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.547978][T11014] [ 143.548974][T11014] The buggy address belongs to the object at ffff88805b10b700 [ 143.548974][T11014] which belongs to the cache kmalloc-128 of size 128 [ 143.554227][T11014] The buggy address is located 56 bytes inside of [ 143.554227][T11014] freed 128-byte region [ffff88805b10b700, ffff88805b10b780) [ 143.559781][T11014] [ 143.560845][T11014] The buggy address belongs to the physical page: [ 143.563513][T11014] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b10b [ 143.567033][T11014] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 143.569854][T11014] page_type: f5(slab) [ 143.571493][T11014] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 143.574997][T11014] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 143.578560][T11014] page dumped because: kasan: bad access detected [ 143.581213][T11014] page_owner tracks the page as allocated [ 143.583630][T11014] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5148, tgid 5148 (udevd), ts 99206161616, free_ts 99139810991 [ 143.591829][T11014] post_alloc_hook+0xfd/0x120 [ 143.593842][T11014] get_page_from_freelist+0xf48/0x3530 [ 143.596028][T11014] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 143.598369][T11014] new_slab+0xa2/0x640 [ 143.600017][T11014] refill_objects+0xe3/0x410 [ 143.601902][T11014] __pcs_replace_empty_main+0x376/0x680 [ 143.604082][T11014] __kmalloc_cache_noprof+0x479/0x6c0 [ 143.606192][T11014] kernfs_fop_open+0x9fa/0xd50 [ 143.608143][T11014] do_dentry_open+0x6ab/0x14d0 [ 143.610097][T11014] vfs_open+0x82/0x3f0 [ 143.611661][T11014] path_openat+0x2873/0x4280 [ 143.613515][T11014] do_file_open+0x20e/0x430 [ 143.615376][T11014] do_sys_openat2+0x10f/0x1e0 [ 143.617373][T11014] __x64_sys_openat+0x12d/0x210 [ 143.619453][T11014] do_syscall_64+0x115/0x870 [ 143.621459][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.623925][T11014] page last free pid 7055 tgid 7055 stack trace: [ 143.626555][T11014] __free_frozen_pages+0x79f/0x1090 [ 143.628786][T11014] inode_doinit_with_dentry+0x99d/0x1320 [ 143.631175][T11014] selinux_d_instantiate+0x26/0x40 [ 143.633339][T11014] security_d_instantiate+0x14c/0x1b0 [ 143.635620][T11014] d_splice_alias_ops+0xd7/0x15c0 [ 143.637764][T11014] kernfs_iop_lookup+0x23f/0x2d0 [ 143.639850][T11014] __lookup_slow+0x155/0x320 [ 143.641755][T11014] lookup_slow+0x50/0x70 [ 143.643489][T11014] path_lookupat+0x5e8/0xc40 [ 143.645470][T11014] filename_lookup+0x202/0x590 [ 143.647461][T11014] vfs_statx+0xff/0x3f0 [ 143.649221][T11014] vfs_fstatat+0x77/0xe0 [ 143.651016][T11014] __do_sys_newfstatat+0x9d/0x120 [ 143.653077][T11014] do_syscall_64+0x115/0x870 [ 143.655060][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.657486][T11014] [ 143.658500][T11014] Memory state around the buggy address: [ 143.660833][T11014] ffff88805b10b600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.664153][T11014] ffff88805b10b680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.667461][T11014] >ffff88805b10b700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.670770][T11014] ^ [ 143.673291][T11014] ffff88805b10b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.676532][T11014] ffff88805b10b800: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 143.679758][T11014] ================================================================== [ 143.683711][T11014] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.686390][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.3.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.689754][T11014] Tainted: [L]=SOFTLOCKUP [ 143.691180][T11014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.695128][T11014] Call Trace: [ 143.696554][T11014] [ 143.697808][T11014] dump_stack_lvl+0x100/0x190 [ 143.699800][T11014] vpanic+0x552/0x970 [ 143.701324][T11014] ? __pfx_vpanic+0x10/0x10 [ 143.702865][T11014] ? mark_held_locks+0x40/0x70 [ 143.704607][T11014] ? irqentry_exit+0x24d/0xa00 [ 143.706647][T11014] ? __release_resource+0x276/0x2c0 [ 143.708784][T11014] panic+0xd1/0xe0 [ 143.710301][T11014] ? __pfx_panic+0x10/0x10 [ 143.712195][T11014] check_panic_on_warn.cold+0x19/0x34 [ 143.714434][T11014] end_report.part.0+0x3a/0x90 [ 143.716310][T11014] kasan_report.cold+0xe/0x18 [ 143.718252][T11014] ? __release_resource+0x276/0x2c0 [ 143.720454][T11014] __release_resource+0x276/0x2c0 [ 143.722565][T11014] release_resource+0x26/0x40 [ 143.724465][T11014] pci_remove_bus_device+0x2d3/0x3b0 [ 143.726518][T11014] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 143.729085][T11014] remove_store+0x123/0x140 [ 143.730990][T11014] ? __pfx_remove_store+0x10/0x10 [ 143.733034][T11014] ? find_held_lock+0x2b/0x80 [ 143.734883][T11014] ? sysfs_file_kobj+0xe4/0x290 [ 143.736900][T11014] ? sysfs_file_kobj+0xe4/0x290 [ 143.738933][T11014] ? __pfx_remove_store+0x10/0x10 [ 143.741020][T11014] dev_attr_store+0x58/0x80 [ 143.742922][T11014] ? __pfx_dev_attr_store+0x10/0x10 [ 143.745020][T11014] sysfs_kf_write+0xf2/0x150 [ 143.746964][T11014] kernfs_fop_write_iter+0x3e0/0x5f0 [ 143.749161][T11014] ? __pfx_sysfs_kf_write+0x10/0x10 [ 143.751252][T11014] vfs_write+0x6ac/0x1050 [ 143.753089][T11014] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 143.755400][T11014] ? __pfx_vfs_write+0x10/0x10 [ 143.757425][T11014] ksys_write+0x12a/0x250 [ 143.759253][T11014] ? __pfx_ksys_write+0x10/0x10 [ 143.761303][T11014] do_syscall_64+0x115/0x870 [ 143.763270][T11014] ? clear_bhb_loop+0x40/0x90 [ 143.765256][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.767691][T11014] RIP: 0033:0x7f02f1d9e019 [ 143.769580][T11014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.777387][T11014] RSP: 002b:00007f02f2cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.780763][T11014] RAX: ffffffffffffffda RBX: 00007f02f2025fa0 RCX: 00007f02f1d9e019 [ 143.783907][T11014] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 143.787004][T11014] RBP: 00007f02f1e3500c R08: 0000000000000000 R09: 0000000000000000 [ 143.790155][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.793420][T11014] R13: 00007f02f2026038 R14: 00007f02f2025fa0 R15: 00007fff947b2cf8 [ 143.796719][T11014] [ 143.798872][T11014] Kernel Offset: disabled [ 143.800669][T11014] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:31:58 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a307b5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90003807548 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b6fe225 R15=ffffffff85a30750 RIP=ffffffff85a307df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f02f2cfb6c0 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f02f2cb9d58 CR3=000000005ff5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005608238925a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560823894c00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373257b50fba483 7373257e30941c59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4940a9d9c8ba123d 7373737613f14beb ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e32303a30303a 303030302f30303a 303030306963702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666e757c3d790710 1a0d1003556e0d0c 15195277440d757f 6c717c7974100011 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e32303a30303a 303030303d454d41 4e5f544f4c535f49 435000303030303a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c421730077d6574 617563307909021e 060b151f1a161b49 7e144c7f6f78647b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7e7f7d7f7d777d 7b7f73777f7f7f3e 773b7f7f7f3f7f7f 7e7d7e7f7f7c6d7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4631653134303070 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3638300030303030 323d5342414c4349 434300004430313a 363830383d444255 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e300030303030 3030303038303030 304300004430313a 3638003030303000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88801fada540 RCX=ffffc9000070766c RDX=0000000000000000 RSI=ffffffff8e182307 RDI=ffff88801fadaa04 RBP=0000000000000001 RSP=ffffc90000707670 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000088530 R12=ffffc90000707768 R13=ffffc90000707718 R14=ffffc90000707ae8 R15=ffffc9000070774c RIP=ffffffff81ef5b52 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffeed5fac14 CR3=000000003c934000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000350 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8208000fffffffff ffff0401c7100008 004ed83c0000090b 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003088004379003 0980043780030804 8004050580041881 8392ea0800010000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0208060601149202 0800059003048004 0580030004088183 909a080001000002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060117b00410 0010030610000003 0010000210000280 04060278d0002364 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261632f6972642f 7665642f01ffffff ffffffffffe10802 800300040001e0cd ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000208060601 6bf800080001a7e0 0300100001a7d003 0fffffffffffff04 ZMM25=c92f49eac92f49ea c92f49eac92f49ea c92f49eac92f49ea c92f49eac92f49ea c92f49eac92f49ea c92f49eac92f49ea c92f49eac92f49ea c92f49eac92f49ea ZMM26=2517028525170285 2517028525170285 2517028525170285 2517028525170285 2517028525170285 2517028525170285 2517028525170285 2517028525170285 ZMM27=a5052fbfa5052fbf a5052fbfa5052fbf a5052fbfa5052fbf a5052fbfa5052fbf a5052fbfa5052fbf a5052fbfa5052fbf a5052fbfa5052fbf a5052fbfa5052fbf ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2605000026050000 2605000026050000 2605000026050000 2605000026050000 2605000026050000 2605000026050000 2605000026050000 2605000026050000 info registers vcpu 2 CPU#2 RAX=000000000020139d RBX=ffff88801eef4a80 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a81ca RDI=ffffffff8c402680 RBP=ffffed1003dde950 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f385a1eb700 CR3=000000002e66a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040101 Opmask01=0000000000000001 Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd62c18350 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffffff 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ffffff00 ff00ff00ff00ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffffff 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055794a61a330 000055794a61a3e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69626572004d52 4c4147495300676e 697361656c657200 4d52455447495300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c474057004d52 4c4147495300424b 4c56444049405700 4d52455447495300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6365663a66663837 3a393563623a3a30 386566203a367367 616c66726464615f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014c4f4c4fe ffc9ed8800000000 000080fe00010014 000000fefdc0400a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000003000b0005 000000c000080008 0000326700003267 ffffffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014c4f4c4fe ffc9ed8800000000 000080fe00010014 000000fefdc0400a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 da18c7e46a724c33 0002001400000050 00000003000b0005 000000c000080008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000326300003263 ffffffffffffffff 000600148f1d58fe ff993cb400000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20205f656265640a 006169205f5f6120 362032362020206e 6120393500203020 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001a3781 RBX=ffff88801eef2540 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a81ca RDI=ffffffff8c402680 RBP=ffffed1003dde4a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f02f1deb700 CR3=000000005f03e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8175ec13 ffffffff8175ec13 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010000110208ffff ffffffff8175ec13 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe22e4b046 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe22e4b046 00007ffe22e4b04c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f385a2355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f385a23562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f385a235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f385a235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8298bd6f ffffffff8298bd43 ffffffff8298bcfd ffffffff81ae5b3a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8298bd6f ffffffff8298bd43 ffffffff8298bcfd ffffffff81ae5b3a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 110f0685a0e2454c 67f43e349ebf4718 24487b6de2ce1145 ef463f3fe6a2bdee ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 663e9dd1ba3d2ff0 28c9fdd35a045af0 3a1921e725ed582e 7136c4fc0aaf33b2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7040c3968bdad204 1780cf464ff7666b 75138b56c1941f50 219a6b76934b2fef ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03812a7dadc6e943 c458f1802c9692e8 c55376150bcd3815 cfb1ba5934ad9ece ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000