last executing test programs: 5.829987325s ago: executing program 2 (id=504): getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000001500)=0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x2400) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001080)=0x91b) read$dsp(r2, &(0x7f0000001300)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20081, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x1000000}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x31a, 0x0, 0x3}, {0xb66, 0x0, 0xf}, {0xa3a, 0x0, 0x9}, {0xbd1, 0x0, 0x3}, {0xa5a, 0x0, 0x1}]}) 3.909197289s ago: executing program 1 (id=519): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/235, 0xeb}], 0x1, 0x5, 0x0) 3.710075755s ago: executing program 3 (id=521): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.709827437s ago: executing program 3 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x7, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f00000022c0)="d72973f9", 0x4}], 0x1}, 0x44815) 3.488943758s ago: executing program 0 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x46, 0xa, 0x2feb) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 2.988939344s ago: executing program 1 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,3', 0x2e) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "140086ddffffffff"}}}}}, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) read(r2, &(0x7f0000000300)=""/172, 0xdc) unlinkat(r0, &(0x7f0000000080)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {}, {0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1800018, 0x31, r2, 0xd0fb4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) write(r4, &(0x7f0000000640)='usbip-vudc.0', 0xc) 2.769838004s ago: executing program 2 (id=525): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x255fdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r6, &(0x7f0000000180)='10', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x20042, 0x0) write(r7, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) write(r5, &(0x7f0000001400)='dummy_udc.0', 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) 2.388827534s ago: executing program 0 (id=526): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x255fdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r5, &(0x7f0000000180)='10', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x20042, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) 2.387898987s ago: executing program 2 (id=527): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) 2.387505971s ago: executing program 3 (id=528): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0xfffe}, &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) 2.330054131s ago: executing program 0 (id=529): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xce1, 0x1, 0x400, 0x8}}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {0x5e7a44bcecf19a41, 0xfff3}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5d06}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x2000c000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='traceon', 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x448d0}, 0x4010) close_range(r2, 0xffffffffffffffff, 0x0) 2.209962978s ago: executing program 0 (id=530): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) close(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000240)={0xee, 0x81, 0x3, 0x7, 0x1}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 2.117446446s ago: executing program 1 (id=531): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0xfffe}, &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r9 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r9, &(0x7f0000005000)=""/4096, 0x1000, 0x0) 2.020206807s ago: executing program 0 (id=532): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) 2.01991013s ago: executing program 0 (id=533): getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000001500)=0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x2400) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001080)=0x91b) read$dsp(r2, &(0x7f0000001300)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20081, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x1000000}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) 1.510121847s ago: executing program 2 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x46, 0xa, 0x2feb) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 1.509742104s ago: executing program 3 (id=535): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x255fdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r6, &(0x7f0000000180)='10', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x20042, 0x0) write(r7, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) write(r5, &(0x7f0000001400)='dummy_udc.0', 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) 1.420152304s ago: executing program 3 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x7, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f00000022c0)="d72973f9", 0x4}], 0x1}, 0x44815) 1.419572013s ago: executing program 2 (id=537): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x255fdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r5, &(0x7f0000000180)='10', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x20042, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) 1.219372624s ago: executing program 1 (id=538): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xce1, 0x1, 0x400, 0x8}}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {0x5e7a44bcecf19a41, 0xfff3}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5d06}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x2000c000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='traceon', 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x448d0}, 0x4010) close_range(r2, 0xffffffffffffffff, 0x0) 137.80929ms ago: executing program 1 (id=539): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x3e, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x1], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 137.438329ms ago: executing program 2 (id=540): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 137.26789ms ago: executing program 3 (id=541): r0 = semget(0x1, 0x4, 0x39c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r1, 0x0) msync(&(0x7f0000ac9000/0x3000)=nil, 0x3000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000340)=""/4096) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) read(r4, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioperm(0x3, 0x9, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_getoverrun(r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x70) fremovexattr(r6, &(0x7f0000000000)=@known='system.posix_acl_default\x00') unlink(&(0x7f0000000180)='./file1\x00') socketpair(0x1, 0x100000005, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 0s ago: executing program 1 (id=542): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x1, 0x4, 0x3, &(0x7f0000000040)={0x5, "51748c5aa07217d8d50200000000190040000001000011008000"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30033' (ED25519) to the list of known hosts. [ 40.643518][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.643591][ T43] audit: type=1400 audit(1788068270.344:138): avc: denied { name_bind } for pid=5715 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.690267][ T43] audit: type=1400 audit(1788068270.394:139): avc: denied { execute } for pid=5716 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.690900][ T43] audit: type=1400 audit(1788068270.394:140): avc: denied { execute_no_trans } for pid=5716 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.324427][ T43] audit: type=1400 audit(1788068273.024:141): avc: denied { mounton } for pid=5716 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.332672][ T43] audit: type=1400 audit(1788068273.034:142): avc: denied { mount } for pid=5716 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.335526][ T5716] cgroup: Unknown subsys name 'net' [ 43.337238][ T43] audit: type=1400 audit(1788068273.044:143): avc: denied { unmount } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.468270][ T5716] cgroup: Unknown subsys name 'cpuset' [ 43.471821][ T5716] cgroup: Unknown subsys name 'rlimit' [ 43.632612][ T43] audit: type=1400 audit(1788068273.334:144): avc: denied { setattr } for pid=5716 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.633158][ T43] audit: type=1400 audit(1788068273.334:145): avc: denied { create } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.633512][ T43] audit: type=1400 audit(1788068273.334:146): avc: denied { write } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.634105][ T43] audit: type=1400 audit(1788068273.334:147): avc: denied { read } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.688690][ T5720] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.416008][ T5716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.759566][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 48.759686][ T43] audit: type=1400 audit(1788068278.454:156): avc: denied { execmem } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.967698][ T43] audit: type=1400 audit(1788068278.674:157): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.967781][ T43] audit: type=1400 audit(1788068278.674:158): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.968110][ T43] audit: type=1400 audit(1788068278.674:159): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.968701][ T43] audit: type=1400 audit(1788068278.674:160): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.977098][ T43] audit: type=1400 audit(1788068278.684:161): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[5893]" dev="sockfs" ino=5893 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.010218][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.016489][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.018253][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.019724][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.020296][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.020360][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.022567][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.025125][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.025473][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.025960][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.026368][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.027450][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.028368][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.029477][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.030366][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.033625][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.036111][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.036598][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.038645][ T43] audit: type=1400 audit(1788068278.744:162): avc: denied { read } for pid=5727 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.038922][ T43] audit: type=1400 audit(1788068278.744:163): avc: denied { open } for pid=5727 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.039741][ T43] audit: type=1400 audit(1788068278.744:164): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.043017][ T43] audit: type=1400 audit(1788068278.744:165): avc: denied { module_request } for pid=5727 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.045085][ T5730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.051556][ T5730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.546543][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.546637][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.548342][ T5738] bridge_slave_0: entered allmulticast mode [ 49.549363][ T5738] bridge_slave_0: entered promiscuous mode [ 49.553723][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.553814][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.553915][ T5738] bridge_slave_1: entered allmulticast mode [ 49.555569][ T5738] bridge_slave_1: entered promiscuous mode [ 49.612135][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.633770][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.715059][ T5738] team0: Port device team_slave_0 added [ 49.723748][ T5738] team0: Port device team_slave_1 added [ 49.724151][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.724211][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.724400][ T5734] bridge_slave_0: entered allmulticast mode [ 49.726099][ T5734] bridge_slave_0: entered promiscuous mode [ 49.729901][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.729998][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.730178][ T5727] bridge_slave_0: entered allmulticast mode [ 49.730992][ T5727] bridge_slave_0: entered promiscuous mode [ 49.745721][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.745733][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.745746][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.746348][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.746390][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.746472][ T5734] bridge_slave_1: entered allmulticast mode [ 49.748264][ T5734] bridge_slave_1: entered promiscuous mode [ 49.749218][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.749296][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.749485][ T5727] bridge_slave_1: entered allmulticast mode [ 49.750249][ T5727] bridge_slave_1: entered promiscuous mode [ 49.760222][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.760237][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.760255][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.768855][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.788868][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.790584][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.791641][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.878083][ T5727] team0: Port device team_slave_0 added [ 49.886646][ T5734] team0: Port device team_slave_0 added [ 49.904539][ T5727] team0: Port device team_slave_1 added [ 49.906188][ T5734] team0: Port device team_slave_1 added [ 49.929545][ T5738] hsr_slave_0: entered promiscuous mode [ 49.930328][ T5738] hsr_slave_1: entered promiscuous mode [ 49.971480][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.971631][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.971759][ T5728] bridge_slave_0: entered allmulticast mode [ 49.972898][ T5728] bridge_slave_0: entered promiscuous mode [ 49.975772][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.975838][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.975927][ T5728] bridge_slave_1: entered allmulticast mode [ 49.977371][ T5728] bridge_slave_1: entered promiscuous mode [ 49.979093][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.979104][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.979121][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.991315][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.991327][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.991344][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.001616][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.001629][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.001647][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.003229][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.003834][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.003846][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.003872][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.006365][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.081029][ T5728] team0: Port device team_slave_0 added [ 50.084856][ T5728] team0: Port device team_slave_1 added [ 50.165038][ T5727] hsr_slave_0: entered promiscuous mode [ 50.165758][ T5727] hsr_slave_1: entered promiscuous mode [ 50.166241][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 50.166316][ T5727] Cannot create hsr debugfs directory [ 50.182655][ T5734] hsr_slave_0: entered promiscuous mode [ 50.183390][ T5734] hsr_slave_1: entered promiscuous mode [ 50.183868][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 50.183883][ T5734] Cannot create hsr debugfs directory [ 50.184450][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.184460][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.184473][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.219641][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.219700][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.219744][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.372830][ T5728] hsr_slave_0: entered promiscuous mode [ 50.373679][ T5728] hsr_slave_1: entered promiscuous mode [ 50.375319][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 50.375337][ T5728] Cannot create hsr debugfs directory [ 50.518973][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.527833][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.550171][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.555999][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.559581][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.564851][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.582641][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.586669][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.653621][ T5727] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.659805][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.660505][ T5727] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.664890][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.668158][ T5727] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.671122][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.671915][ T5727] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.677075][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.732319][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.738497][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.739172][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.746889][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.751883][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.758938][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.759620][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.764222][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.830036][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.835872][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.836276][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.840440][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.849469][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.856240][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.857335][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.860678][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.876572][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.923282][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.927878][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.937567][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.937716][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.955492][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.962418][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.962507][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.963667][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.963714][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.977911][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.978405][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.995876][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.047516][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.055743][ T5733] Bluetooth: hci2: command tx timeout [ 51.056993][ T5733] Bluetooth: hci0: command tx timeout [ 51.057234][ T5730] Bluetooth: hci1: command tx timeout [ 51.061197][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.065963][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.066879][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.077745][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.077814][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.103120][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.112237][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.112332][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.127333][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.127443][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.136906][ T5730] Bluetooth: hci3: command tx timeout [ 51.361952][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.391771][ T5727] veth0_vlan: entered promiscuous mode [ 51.398841][ T5727] veth1_vlan: entered promiscuous mode [ 51.417438][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.422144][ T5727] veth0_macvtap: entered promiscuous mode [ 51.427189][ T5727] veth1_macvtap: entered promiscuous mode [ 51.444953][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.448710][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.458301][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.524974][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.528438][ T5738] veth0_vlan: entered promiscuous mode [ 51.559436][ T5738] veth1_vlan: entered promiscuous mode [ 51.584197][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.596269][ T5734] veth0_vlan: entered promiscuous mode [ 51.598573][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.599009][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.613604][ T5738] veth0_macvtap: entered promiscuous mode [ 51.622225][ T5734] veth1_vlan: entered promiscuous mode [ 51.637145][ T5738] veth1_macvtap: entered promiscuous mode [ 51.651787][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.651868][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.655385][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.655421][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.655447][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.668517][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.673196][ T5734] veth0_macvtap: entered promiscuous mode [ 51.680619][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.691137][ T5734] veth1_macvtap: entered promiscuous mode [ 51.692760][ T5728] veth0_vlan: entered promiscuous mode [ 51.712639][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.722510][ T5727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.722857][ T5728] veth1_vlan: entered promiscuous mode [ 51.727532][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.804281][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.804343][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.814172][ T5728] veth0_macvtap: entered promiscuous mode [ 51.828558][ T5728] veth1_macvtap: entered promiscuous mode [ 51.847339][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.847388][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.876491][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.881406][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.881460][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.887056][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.887267][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.887364][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.895914][ T5882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.910673][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.910772][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.944920][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.975542][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.975833][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.975969][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.975987][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.976004][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.976390][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.976418][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.976444][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.976470][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.025182][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.025218][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.047635][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.047672][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.198250][ T5900] random: crng reseeded on system resumption [ 52.218728][ T5902] Set syz0 is full, maxelem 0 reached [ 52.258938][ T5906] loop5: detected capacity change from 0 to 7 [ 52.265391][ T5906] Dev loop5: unable to read RDB block 7 [ 52.265458][ T5906] loop5: unable to read partition table [ 52.265564][ T5906] loop5: partition table beyond EOD, truncated [ 52.265574][ T5906] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 52.344649][ T5814] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 52.500936][ T5814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 52.503361][ T5814] usb 5-1: not running at top speed; connect to a high speed hub [ 52.503379][ T5814] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 52.504377][ T5814] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 52.504390][ T5814] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 52.504400][ T5814] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 52.504409][ T5814] usb 5-1: config 14 has no interface number 0 [ 52.504416][ T5814] usb 5-1: config 14 has no interface number 1 [ 52.504441][ T5814] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 52.504453][ T5814] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 52.504464][ T5814] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.504477][ T5814] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 52.504489][ T5814] usb 5-1: config 14 interface 57 has no altsetting 0 [ 52.504497][ T5814] usb 5-1: config 14 interface 228 has no altsetting 0 [ 52.508030][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.508052][ T5814] usb 5-1: Product: syz [ 52.508064][ T5814] usb 5-1: Manufacturer: syz [ 52.508077][ T5814] usb 5-1: SerialNumber: syz [ 52.934759][ T5814] legousbtower 5-1:14.57: interrupt endpoints not found [ 53.071860][ T5921] netlink: 'syz.1.10': attribute type 32 has an invalid length. [ 53.134981][ T5741] Bluetooth: hci0: command tx timeout [ 53.135060][ T5741] Bluetooth: hci2: command tx timeout [ 53.135171][ T5730] Bluetooth: hci1: command tx timeout [ 53.212117][ T5927] syzkaller0: entered promiscuous mode [ 53.212181][ T5927] syzkaller0: entered allmulticast mode [ 53.342024][ T5814] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 53.344941][ T5814] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 53.844400][ T5730] Bluetooth: Unexpected continuation frame (len 18) [ 53.846085][ T5730] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 53.849341][ T43] kauditd_printk_skb: 117 callbacks suppressed [ 53.849357][ T43] audit: type=1400 audit(1788068283.554:283): avc: denied { create } for pid=5932 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.850395][ T43] audit: type=1400 audit(1788068283.554:284): avc: denied { shutdown } for pid=5932 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.896404][ T43] audit: type=1400 audit(1788068283.604:285): avc: denied { write } for pid=5891 comm="syz.0.6" name="legousbtower0" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.004766][ T5829] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.114439][ T5841] usb 5-1: USB disconnect, device number 2 [ 54.122883][ T5841] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 54.154992][ T5829] usb 6-1: Using ep0 maxpacket: 32 [ 54.158428][ T5829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 54.158547][ T5829] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 54.162579][ T5829] usb 6-1: string descriptor 0 read error: -22 [ 54.162700][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.171323][ T5829] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 54.171407][ T5829] dw2102: su3000_power_ctrl: 1, initialized 0 [ 54.171725][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 54.183502][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 54.187779][ T5829] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 54.187869][ T5829] usb 6-1: media controller created [ 54.188246][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 54.188261][ T5829] dw2102: i2c transfer failed. [ 54.188286][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 54.188297][ T5829] dw2102: i2c transfer failed. [ 54.188306][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 54.188316][ T5829] dw2102: i2c transfer failed. [ 54.188326][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 54.188336][ T5829] dw2102: i2c transfer failed. [ 54.188345][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 54.188354][ T5829] dw2102: i2c transfer failed. [ 54.188364][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 54.188373][ T5829] dw2102: i2c transfer failed. [ 54.188380][ T5829] dvb-usb: MAC address: 02:02:02:02:02:02 [ 54.199233][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 54.217398][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 54.217414][ T5829] dw2102: command 0x0e transfer failed. [ 54.217420][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 54.217430][ T5829] dw2102: command 0x0e transfer failed. [ 54.322466][ T43] audit: type=1400 audit(1788068284.024:286): avc: denied { write } for pid=5935 comm="syz.3.15" name="ip6_mr_cache" dev="proc" ino=4026533420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 54.380825][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.386152][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.418087][ T43] audit: type=1400 audit(1788068284.124:287): avc: denied { prog_load } for pid=5941 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.419513][ T43] audit: type=1400 audit(1788068284.124:288): avc: denied { prog_run } for pid=5941 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.424119][ T43] audit: type=1400 audit(1788068284.124:289): avc: denied { write } for pid=5941 comm="syz.2.18" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.426406][ T43] audit: type=1400 audit(1788068284.124:290): avc: denied { write } for pid=5941 comm="syz.2.18" name="functions" dev="configfs" ino=9548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.429940][ T43] audit: type=1400 audit(1788068284.124:291): avc: denied { write } for pid=5941 comm="syz.2.18" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.429973][ T43] audit: type=1400 audit(1788068284.124:292): avc: denied { write } for pid=5941 comm="syz.2.18" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.438919][ T5942] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.525696][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 54.525745][ T5829] dw2102: command 0x0e transfer failed. [ 54.525794][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 54.525821][ T5829] dw2102: command 0x0e transfer failed. [ 54.525844][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 54.525872][ T5829] dw2102: command 0x51 transfer failed. [ 54.527641][ T5931] dvb-usb: bulk message failed: -22 (5/0) [ 54.527687][ T5931] dw2102: i2c transfer failed. [ 54.529322][ T5943] dvb-usb: bulk message failed: -22 (31/0) [ 54.529341][ T5943] dw2102: i2c transfer failed. [ 54.569635][ T5829] DVB: Unable to find symbol ds3000_attach() [ 54.569649][ T5829] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 54.605360][ T5881] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.624757][ T5829] rc_core: IR keymap rc-su3000 not found [ 54.624775][ T5829] Registered IR keymap rc-empty [ 54.632575][ T5829] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 54.635388][ T5829] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 54.646115][ T5829] dvb-usb: schedule remote query interval to 150 msecs. [ 54.646136][ T5829] dw2102: su3000_power_ctrl: 0, initialized 1 [ 54.646146][ T5829] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 54.647249][ T5829] usb 6-1: USB disconnect, device number 2 [ 54.759570][ T5881] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 54.768621][ T5881] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 54.773034][ T5881] usb 8-1: Product: syz [ 54.776122][ T5881] usb 8-1: Manufacturer: syz [ 54.778133][ T5881] usb 8-1: SerialNumber: syz [ 54.788795][ T5881] usb 8-1: config 0 descriptor?? [ 54.801067][ T5881] ch341 8-1:0.0: ch341-uart converter detected [ 54.805517][ T5829] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 55.090724][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 55.097047][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 55.110439][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 55.119794][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 55.227916][ T5730] Bluetooth: hci1: command tx timeout [ 55.228095][ T5730] Bluetooth: hci2: command tx timeout [ 55.229498][ T5730] Bluetooth: hci0: command tx timeout [ 55.873021][ T5881] usb 8-1: failed to receive control message: -110 [ 55.882495][ T5881] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 56.096075][ T5733] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 56.096436][ T5733] Bluetooth: hci3: Injecting HCI hardware error event [ 56.107628][ T5730] Bluetooth: hci3: hardware error 0x00 [ 57.296343][ T5733] Bluetooth: hci0: command tx timeout [ 57.300229][ T5733] Bluetooth: hci2: command tx timeout [ 57.306400][ T5733] Bluetooth: hci1: command tx timeout [ 57.410223][ T214] usb 8-1: USB disconnect, device number 2 [ 57.426036][ T214] ch341 8-1:0.0: device disconnected [ 57.592034][ T5981] netlink: 'syz.2.31': attribute type 32 has an invalid length. [ 57.648761][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 57.651859][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 57.745210][ T5991] loop5: detected capacity change from 0 to 7 [ 57.748103][ T5991] Dev loop5: unable to read RDB block 7 [ 57.748126][ T5991] loop5: unable to read partition table [ 57.748216][ T5991] loop5: partition table beyond EOD, truncated [ 57.751624][ T5991] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 57.762568][ T5955] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.801215][ T5993] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 57.801285][ T5993] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 57.801934][ T5993] udc dummy_udc.0: failed to start g1: -19 [ 57.803244][ T5993] UDC core: g1: couldn't find an available UDC or it's busy [ 57.919297][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 57.944696][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 57.949166][ T5955] usb 6-1: unable to get BOS descriptor or descriptor too short [ 57.949261][ T5955] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 57.956081][ T5955] usb 6-1: string descriptor 0 read error: -22 [ 57.956240][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.965424][ T5955] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 57.965484][ T5955] dw2102: su3000_power_ctrl: 1, initialized 0 [ 57.965514][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 57.969870][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 57.970506][ T5955] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 57.970544][ T5955] usb 6-1: media controller created [ 57.970562][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 57.970573][ T5955] dw2102: i2c transfer failed. [ 57.970585][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 57.970595][ T5955] dw2102: i2c transfer failed. [ 57.970603][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 57.970613][ T5955] dw2102: i2c transfer failed. [ 57.970622][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 57.970633][ T5955] dw2102: i2c transfer failed. [ 57.970643][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 57.970653][ T5955] dw2102: i2c transfer failed. [ 57.970662][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 57.970672][ T5955] dw2102: i2c transfer failed. [ 57.970678][ T5955] dvb-usb: MAC address: 02:02:02:02:02:02 [ 57.985600][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 57.996322][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 57.996341][ T5955] dw2102: command 0x0e transfer failed. [ 57.996349][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 57.996361][ T5955] dw2102: command 0x0e transfer failed. [ 58.231321][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.231713][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.255957][ T5730] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 58.315871][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 58.316555][ T5955] dw2102: command 0x0e transfer failed. [ 58.316588][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 58.316612][ T5955] dw2102: command 0x0e transfer failed. [ 58.316634][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 58.316681][ T5955] dw2102: command 0x51 transfer failed. [ 58.319871][ T5979] dvb-usb: bulk message failed: -22 (5/0) [ 58.319888][ T5979] dw2102: i2c transfer failed. [ 58.351066][ T5955] DVB: Unable to find symbol ds3000_attach() [ 58.351119][ T5955] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 58.444720][ T5955] rc_core: IR keymap rc-su3000 not found [ 58.444754][ T5955] Registered IR keymap rc-empty [ 58.445609][ T5955] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 58.446450][ T5955] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input6 [ 58.449809][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 58.449821][ T5955] dw2102: su3000_power_ctrl: 0, initialized 1 [ 58.449835][ T5955] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 58.450687][ T5955] usb 6-1: USB disconnect, device number 3 [ 58.488050][ T5955] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 58.654754][ T950] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.824752][ T950] usb 5-1: Using ep0 maxpacket: 32 [ 58.827352][ T950] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.830651][ T950] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 58.838616][ T950] usb 5-1: string descriptor 0 read error: -22 [ 58.838791][ T950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.849360][ T950] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 58.849437][ T950] dw2102: su3000_power_ctrl: 1, initialized 0 [ 58.849484][ T950] dvb-usb: bulk message failed: -22 (2/0) [ 58.857765][ T950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 58.858455][ T950] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 58.858491][ T950] usb 5-1: media controller created [ 58.858509][ T950] dvb-usb: bulk message failed: -22 (6/0) [ 58.858519][ T950] dw2102: i2c transfer failed. [ 58.858529][ T950] dvb-usb: bulk message failed: -22 (6/0) [ 58.858539][ T950] dw2102: i2c transfer failed. [ 58.858547][ T950] dvb-usb: bulk message failed: -22 (6/0) [ 58.858557][ T950] dw2102: i2c transfer failed. [ 58.858565][ T950] dvb-usb: bulk message failed: -22 (6/0) [ 58.858574][ T950] dw2102: i2c transfer failed. [ 58.858583][ T950] dvb-usb: bulk message failed: -22 (6/0) [ 58.858592][ T950] dw2102: i2c transfer failed. [ 58.858600][ T950] dvb-usb: bulk message failed: -22 (6/0) [ 58.858609][ T950] dw2102: i2c transfer failed. [ 58.858615][ T950] dvb-usb: MAC address: 02:02:02:02:02:02 [ 58.868975][ T950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 58.888389][ T950] dvb-usb: bulk message failed: -22 (3/0) [ 58.888406][ T950] dw2102: command 0x0e transfer failed. [ 58.888412][ T950] dvb-usb: bulk message failed: -22 (3/0) [ 58.888421][ T950] dw2102: command 0x0e transfer failed. [ 58.980958][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 58.984953][ T43] audit: type=1400 audit(1788068288.684:322): avc: denied { mount } for pid=6017 comm="syz.1.46" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.012361][ T6019] Console: switching to colour dummy device 80x25 [ 59.113426][ T43] audit: type=1400 audit(1788068288.814:323): avc: denied { bind } for pid=6017 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.194758][ T950] dvb-usb: bulk message failed: -22 (3/0) [ 59.194816][ T950] dw2102: command 0x0e transfer failed. [ 59.194882][ T950] dvb-usb: bulk message failed: -22 (3/0) [ 59.194899][ T950] dw2102: command 0x0e transfer failed. [ 59.194907][ T950] dvb-usb: bulk message failed: -22 (1/0) [ 59.194915][ T950] dw2102: command 0x51 transfer failed. [ 59.195970][ T6015] dw2102: i2c rd: len=182 is too big! [ 59.195970][ T6015] [ 59.222863][ T950] DVB: Unable to find symbol ds3000_attach() [ 59.222917][ T950] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 59.286583][ T950] rc_core: IR keymap rc-su3000 not found [ 59.286631][ T950] Registered IR keymap rc-empty [ 59.287125][ T950] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 59.289379][ T950] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input7 [ 59.300968][ T950] dvb-usb: schedule remote query interval to 150 msecs. [ 59.301018][ T950] dw2102: su3000_power_ctrl: 0, initialized 1 [ 59.301048][ T950] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 59.307123][ T950] usb 5-1: USB disconnect, device number 3 [ 59.399946][ T43] audit: type=1400 audit(1788068289.104:324): avc: denied { write } for pid=6027 comm="syz.3.49" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.449932][ T6028] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 59.450019][ T6028] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 59.453416][ T6028] udc dummy_udc.0: failed to start g1: -19 [ 59.482334][ T43] audit: type=1400 audit(1788068289.184:325): avc: denied { write } for pid=6030 comm="syz.2.50" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.586593][ T6028] UDC core: g1: couldn't find an available UDC or it's busy [ 59.688480][ T950] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 59.788506][ T5730] Bluetooth: Unexpected continuation frame (len 18) [ 59.793786][ T5730] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 60.104858][ T5835] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.274757][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 60.279945][ T5835] usb 7-1: unable to get BOS descriptor or descriptor too short [ 60.282705][ T5835] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 60.289652][ T5835] usb 7-1: string descriptor 0 read error: -22 [ 60.291859][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.331346][ T6046] loop5: detected capacity change from 0 to 7 [ 60.414110][ T6046] Dev loop5: unable to read RDB block 7 [ 60.414176][ T6046] loop5: unable to read partition table [ 60.414397][ T6046] loop5: partition table beyond EOD, truncated [ 60.414407][ T6046] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 60.418584][ T6020] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 60.440805][ T5835] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 60.443127][ T6020] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 60.443430][ T6020] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 60.443608][ T6020] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 60.446458][ T6020] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 60.449788][ T6020] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 60.456874][ T5835] dw2102: su3000_power_ctrl: 1, initialized 0 [ 60.456894][ T5835] dvb-usb: bulk message failed: -22 (2/0) [ 60.516174][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 60.521676][ T5835] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 60.521753][ T5835] usb 7-1: media controller created [ 60.521780][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 60.521800][ T5835] dw2102: i2c transfer failed. [ 60.521821][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 60.521843][ T5835] dw2102: i2c transfer failed. [ 60.521862][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 60.521882][ T5835] dw2102: i2c transfer failed. [ 60.521901][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 60.521921][ T5835] dw2102: i2c transfer failed. [ 60.521940][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 60.521959][ T5835] dw2102: i2c transfer failed. [ 60.521979][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 60.521998][ T5835] dw2102: i2c transfer failed. [ 60.522015][ T5835] dvb-usb: MAC address: 02:02:02:02:02:02 [ 60.574761][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.582995][ T43] audit: type=1400 audit(1788068290.284:326): avc: denied { write } for pid=6051 comm="syz.0.60" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.611669][ T6020] pci 0000:00:01.0: Adding to iommu group 1 [ 60.634947][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 60.634994][ T5835] dw2102: command 0x0e transfer failed. [ 60.635030][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 60.635059][ T5835] dw2102: command 0x0e transfer failed. [ 60.641196][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.643216][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.650017][ T6020] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 60.650040][ T6020] pci 0000:00:01.0: vgaarb: bridge control possible [ 60.650052][ T6020] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 60.667960][ T6020] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 60.673654][ T6020] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 60.681291][ T6020] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 60.696900][ T43] audit: type=1400 audit(1788068290.404:327): avc: denied { write } for pid=6055 comm="syz.0.61" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.701745][ T6056] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 60.701776][ T6056] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 60.701920][ T6056] udc dummy_udc.0: failed to start g1: -19 [ 60.702991][ T6056] UDC core: g1: couldn't find an available UDC or it's busy [ 60.734847][ T5730] Bluetooth: hci2: command 0x0406 tx timeout [ 60.949567][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 60.949621][ T5835] dw2102: command 0x0e transfer failed. [ 60.949661][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 60.949692][ T5835] dw2102: command 0x0e transfer failed. [ 60.949719][ T5835] dvb-usb: bulk message failed: -22 (1/0) [ 60.949753][ T5835] dw2102: command 0x51 transfer failed. [ 60.988776][ T5835] DVB: Unable to find symbol ds3000_attach() [ 60.988823][ T5835] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 61.055730][ T5835] rc_core: IR keymap rc-su3000 not found [ 61.058399][ T5835] Registered IR keymap rc-empty [ 61.063176][ T5835] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 61.070489][ T5835] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input8 [ 61.085831][ T5835] dvb-usb: schedule remote query interval to 150 msecs. [ 61.092305][ T5835] dw2102: su3000_power_ctrl: 0, initialized 1 [ 61.092376][ T5835] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 61.107370][ T5835] usb 7-1: USB disconnect, device number 2 [ 61.172709][ T5835] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 61.200375][ T6070] loop5: detected capacity change from 0 to 7 [ 61.202144][ T6070] Dev loop5: unable to read RDB block 7 [ 61.202181][ T6070] loop5: unable to read partition table [ 61.202324][ T6070] loop5: partition table beyond EOD, truncated [ 61.202339][ T6070] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 61.306269][ T6020] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 61.306800][ T6020] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 61.309108][ T6020] [drm] features: -virgl +edid -resource_blob -host_visible [ 61.309152][ T6020] [drm] features: -context_init -blob_alignment [ 61.326144][ T6020] [drm] number of scanouts: 1 [ 61.326232][ T6020] [drm] number of cap sets: 0 [ 61.336148][ T6020] virtio-pci 0000:00:01.0: [drm] [PLANE:36:plane-1] pixel format with alpha exposed but blend mode not setup. Please fix. [ 61.377979][ T6020] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 61.514277][ T43] audit: type=1400 audit(1788068291.214:328): avc: denied { write } for pid=6080 comm="syz.0.70" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.522831][ T43] audit: type=1400 audit(1788068291.224:329): avc: denied { write } for pid=6078 comm="syz.3.69" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.524538][ T6020] Console: switching to colour frame buffer device 160x50 [ 61.539353][ T6081] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 61.545711][ T6081] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 61.548846][ T6081] udc dummy_udc.0: failed to start g1: -19 [ 61.556767][ T6081] UDC core: g1: couldn't find an available UDC or it's busy [ 61.563547][ T6020] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 61.575703][ T30] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 61.729937][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 61.730463][ T30] usb 7-1: not running at top speed; connect to a high speed hub [ 61.730490][ T30] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 61.731409][ T30] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 61.731428][ T30] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 61.731445][ T30] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 61.731459][ T30] usb 7-1: config 14 has no interface number 0 [ 61.731471][ T30] usb 7-1: config 14 has no interface number 1 [ 61.731516][ T30] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 61.731535][ T30] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 61.731554][ T30] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.731575][ T30] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 61.731595][ T30] usb 7-1: config 14 interface 57 has no altsetting 0 [ 61.731609][ T30] usb 7-1: config 14 interface 228 has no altsetting 0 [ 61.735957][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.735982][ T30] usb 7-1: Product: syz [ 61.735996][ T30] usb 7-1: Manufacturer: syz [ 61.736014][ T30] usb 7-1: SerialNumber: syz [ 61.816521][ T6093] loop5: detected capacity change from 0 to 7 [ 61.820978][ T6093] Dev loop5: unable to read RDB block 7 [ 61.821061][ T6093] loop5: unable to read partition table [ 61.821249][ T6093] loop5: partition table beyond EOD, truncated [ 61.821275][ T6093] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 62.004632][ T850] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.124130][ T43] audit: type=1400 audit(1788068291.824:330): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.154814][ T850] usb 5-1: Using ep0 maxpacket: 32 [ 62.158797][ T30] legousbtower 7-1:14.57: interrupt endpoints not found [ 62.172161][ T850] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.172382][ T850] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 62.182412][ T850] usb 5-1: string descriptor 0 read error: -22 [ 62.182657][ T850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.212677][ T850] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 62.212758][ T850] dw2102: su3000_power_ctrl: 1, initialized 0 [ 62.212826][ T850] dvb-usb: bulk message failed: -22 (2/0) [ 62.218579][ T850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 62.220596][ T850] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 62.220700][ T850] usb 5-1: media controller created [ 62.220719][ T850] dvb-usb: bulk message failed: -22 (6/0) [ 62.220730][ T850] dw2102: i2c transfer failed. [ 62.220743][ T850] dvb-usb: bulk message failed: -22 (6/0) [ 62.220755][ T850] dw2102: i2c transfer failed. [ 62.220767][ T850] dvb-usb: bulk message failed: -22 (6/0) [ 62.220779][ T850] dw2102: i2c transfer failed. [ 62.220822][ T43] audit: type=1400 audit(1788068291.924:331): avc: denied { write } for pid=6099 comm="syz.1.79" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.220852][ T850] dvb-usb: bulk message failed: -22 (6/0) [ 62.220863][ T850] dw2102: i2c transfer failed. [ 62.220889][ T850] dvb-usb: bulk message failed: -22 (6/0) [ 62.220900][ T850] dw2102: i2c transfer failed. [ 62.220913][ T850] dvb-usb: bulk message failed: -22 (6/0) [ 62.220926][ T850] dw2102: i2c transfer failed. [ 62.220933][ T850] dvb-usb: MAC address: 02:02:02:02:02:02 [ 62.251220][ T850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 62.282528][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 62.285090][ T850] dvb-usb: bulk message failed: -22 (3/0) [ 62.285107][ T850] dw2102: command 0x0e transfer failed. [ 62.285199][ T850] dvb-usb: bulk message failed: -22 (3/0) [ 62.285210][ T850] dw2102: command 0x0e transfer failed. [ 62.289410][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 62.411048][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.411712][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.558308][ T30] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 62.559845][ T30] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 62.595483][ T850] dvb-usb: bulk message failed: -22 (3/0) [ 62.595547][ T850] dw2102: command 0x0e transfer failed. [ 62.595577][ T850] dvb-usb: bulk message failed: -22 (3/0) [ 62.595599][ T850] dw2102: command 0x0e transfer failed. [ 62.595618][ T850] dvb-usb: bulk message failed: -22 (1/0) [ 62.595627][ T850] dw2102: command 0x51 transfer failed. [ 62.619395][ T850] DVB: Unable to find symbol ds3000_attach() [ 62.619466][ T850] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 62.665410][ T850] rc_core: IR keymap rc-su3000 not found [ 62.665471][ T850] Registered IR keymap rc-empty [ 62.666950][ T850] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 62.669714][ T850] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input9 [ 62.672623][ T850] dvb-usb: schedule remote query interval to 150 msecs. [ 62.672650][ T850] dw2102: su3000_power_ctrl: 0, initialized 1 [ 62.672661][ T850] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 62.677427][ T850] usb 5-1: USB disconnect, device number 4 [ 62.708810][ T850] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 62.786270][ T6106] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 62.786341][ T6106] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 62.787324][ T6106] udc dummy_udc.0: failed to start g1: -19 [ 62.788317][ T6106] UDC core: g1: couldn't find an available UDC or it's busy [ 62.991168][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 62.992825][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 63.061818][ T6127] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 63.061901][ T6127] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 63.062342][ T6127] udc dummy_udc.0: failed to start g1: -19 [ 63.062945][ T6127] UDC core: g1: couldn't find an available UDC or it's busy [ 63.332297][ T214] usb 7-1: USB disconnect, device number 3 [ 63.339117][ T214] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 63.861223][ T6147] Set syz0 is full, maxelem 0 reached [ 63.907394][ T6150] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 63.911711][ T6150] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 63.911872][ T6150] udc dummy_udc.0: failed to start g1: -19 [ 63.912629][ T6150] UDC core: g1: couldn't find an available UDC or it's busy [ 63.967298][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 63.970685][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 63.975338][ T1034] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.048341][ T6160] syzkaller0: entered promiscuous mode [ 64.048404][ T6160] syzkaller0: entered allmulticast mode [ 64.134715][ T1034] usb 6-1: Using ep0 maxpacket: 32 [ 64.136546][ T1034] usb 6-1: unable to get BOS descriptor or descriptor too short [ 64.136969][ T1034] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 64.140341][ T1034] usb 6-1: string descriptor 0 read error: -22 [ 64.140429][ T1034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.146708][ T1034] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 64.146734][ T1034] dw2102: su3000_power_ctrl: 1, initialized 0 [ 64.146746][ T1034] dvb-usb: bulk message failed: -22 (2/0) [ 64.148718][ T1034] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.149151][ T1034] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 64.149174][ T1034] usb 6-1: media controller created [ 64.149186][ T1034] dvb-usb: bulk message failed: -22 (6/0) [ 64.149192][ T1034] dw2102: i2c transfer failed. [ 64.149199][ T1034] dvb-usb: bulk message failed: -22 (6/0) [ 64.149215][ T1034] dw2102: i2c transfer failed. [ 64.149663][ T1034] dvb-usb: bulk message failed: -22 (6/0) [ 64.149672][ T1034] dw2102: i2c transfer failed. [ 64.149678][ T1034] dvb-usb: bulk message failed: -22 (6/0) [ 64.149684][ T1034] dw2102: i2c transfer failed. [ 64.149689][ T1034] dvb-usb: bulk message failed: -22 (6/0) [ 64.149695][ T1034] dw2102: i2c transfer failed. [ 64.149700][ T1034] dvb-usb: bulk message failed: -22 (6/0) [ 64.149706][ T1034] dw2102: i2c transfer failed. [ 64.149709][ T1034] dvb-usb: MAC address: 02:02:02:02:02:02 [ 64.157994][ T1034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.164097][ T1034] dvb-usb: bulk message failed: -22 (3/0) [ 64.164107][ T1034] dw2102: command 0x0e transfer failed. [ 64.164111][ T1034] dvb-usb: bulk message failed: -22 (3/0) [ 64.164117][ T1034] dw2102: command 0x0e transfer failed. [ 64.348682][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.349160][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.464859][ T1034] dvb-usb: bulk message failed: -22 (3/0) [ 64.464929][ T1034] dw2102: command 0x0e transfer failed. [ 64.464993][ T1034] dvb-usb: bulk message failed: -22 (3/0) [ 64.465008][ T1034] dw2102: command 0x0e transfer failed. [ 64.465015][ T1034] dvb-usb: bulk message failed: -22 (1/0) [ 64.465026][ T1034] dw2102: command 0x51 transfer failed. [ 64.497499][ T1034] DVB: Unable to find symbol ds3000_attach() [ 64.497564][ T1034] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 64.554745][ T1034] rc_core: IR keymap rc-su3000 not found [ 64.554822][ T1034] Registered IR keymap rc-empty [ 64.556077][ T1034] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 64.560353][ T1034] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input10 [ 64.562545][ T1034] dvb-usb: schedule remote query interval to 150 msecs. [ 64.562564][ T1034] dw2102: su3000_power_ctrl: 0, initialized 1 [ 64.562576][ T1034] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 64.564969][ T1034] usb 6-1: USB disconnect, device number 4 [ 64.617907][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 64.618010][ T43] audit: type=1400 audit(1788068294.324:337): avc: denied { write } for pid=6175 comm="syz.2.109" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.621513][ T6176] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 64.621552][ T6176] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 64.621710][ T6176] udc dummy_udc.0: failed to start g1: -19 [ 64.631285][ T6176] UDC core: g1: couldn't find an available UDC or it's busy [ 64.645943][ T1034] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 64.676924][ T6178] Set syz0 is full, maxelem 0 reached [ 64.712483][ T43] audit: type=1400 audit(1788068294.414:338): avc: denied { write } for pid=6179 comm="syz.2.111" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.878421][ T6186] syzkaller0: entered promiscuous mode [ 64.878512][ T6186] syzkaller0: entered allmulticast mode [ 64.906098][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 64.909692][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 64.944982][ T6190] loop5: detected capacity change from 0 to 7 [ 64.945760][ T6190] Dev loop5: unable to read RDB block 7 [ 64.945789][ T6190] loop5: unable to read partition table [ 64.945935][ T6190] loop5: partition table beyond EOD, truncated [ 64.945950][ T6190] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 65.021191][ T43] audit: type=1400 audit(1788068294.724:339): avc: denied { write } for pid=6194 comm="syz.2.118" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.023872][ T6195] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 65.023906][ T6195] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 65.028449][ T6195] udc dummy_udc.0: failed to start g1: -19 [ 65.030621][ T6195] UDC core: g1: couldn't find an available UDC or it's busy [ 65.113416][ T43] audit: type=1400 audit(1788068294.814:340): avc: denied { write } for pid=6200 comm="syz.2.120" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.434827][ T5881] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.468165][ T6216] syzkaller0: entered promiscuous mode [ 65.468255][ T6216] syzkaller0: entered allmulticast mode [ 65.585814][ T6218] loop5: detected capacity change from 0 to 7 [ 65.587571][ T6218] Dev loop5: unable to read RDB block 7 [ 65.587603][ T6218] loop5: unable to read partition table [ 65.587762][ T6218] loop5: partition table beyond EOD, truncated [ 65.587807][ T6218] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 65.615413][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 65.617698][ T5881] usb 7-1: unable to get BOS descriptor or descriptor too short [ 65.617724][ T5881] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 65.622124][ T5881] usb 7-1: string descriptor 0 read error: -22 [ 65.622204][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.632137][ T5881] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 65.632161][ T5881] dw2102: su3000_power_ctrl: 1, initialized 0 [ 65.632171][ T5881] dvb-usb: bulk message failed: -22 (2/0) [ 65.634877][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 65.635411][ T5881] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 65.635437][ T5881] usb 7-1: media controller created [ 65.635452][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 65.635459][ T5881] dw2102: i2c transfer failed. [ 65.635466][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 65.635472][ T5881] dw2102: i2c transfer failed. [ 65.635477][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 65.635483][ T5881] dw2102: i2c transfer failed. [ 65.635488][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 65.635494][ T5881] dw2102: i2c transfer failed. [ 65.635500][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 65.635506][ T5881] dw2102: i2c transfer failed. [ 65.635511][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 65.635517][ T5881] dw2102: i2c transfer failed. [ 65.635521][ T5881] dvb-usb: MAC address: 02:02:02:02:02:02 [ 65.642598][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 65.660657][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 65.660670][ T5881] dw2102: command 0x0e transfer failed. [ 65.660674][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 65.660681][ T5881] dw2102: command 0x0e transfer failed. [ 65.873610][ T43] audit: type=1400 audit(1788068295.574:341): avc: denied { write } for pid=6224 comm="syz.0.129" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.874430][ T6225] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 65.874449][ T6225] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 65.874521][ T6225] udc dummy_udc.0: failed to start g1: -19 [ 65.875971][ T6225] UDC core: g1: couldn't find an available UDC or it's busy [ 65.965577][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 65.965646][ T5881] dw2102: command 0x0e transfer failed. [ 65.965683][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 65.965696][ T5881] dw2102: command 0x0e transfer failed. [ 65.965702][ T5881] dvb-usb: bulk message failed: -22 (1/0) [ 65.965712][ T5881] dw2102: command 0x51 transfer failed. [ 65.965844][ T6209] dvb-usb: bulk message failed: -22 (5/0) [ 65.965860][ T6209] dw2102: i2c transfer failed. [ 66.002725][ T5881] DVB: Unable to find symbol ds3000_attach() [ 66.002817][ T5881] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 66.066086][ T5881] rc_core: IR keymap rc-su3000 not found [ 66.066137][ T5881] Registered IR keymap rc-empty [ 66.066766][ T5881] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 66.068469][ T43] audit: type=1400 audit(1788068295.774:342): avc: denied { write } for pid=6232 comm="syz.0.132" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.068718][ T5881] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input11 [ 66.072807][ T5881] dvb-usb: schedule remote query interval to 150 msecs. [ 66.072825][ T5881] dw2102: su3000_power_ctrl: 0, initialized 1 [ 66.072836][ T5881] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 66.080189][ T5881] usb 7-1: USB disconnect, device number 4 [ 66.127793][ T5881] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 66.140082][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 66.145088][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 66.207535][ T6239] syzkaller0: entered promiscuous mode [ 66.207603][ T6239] syzkaller0: entered allmulticast mode [ 66.546080][ T6241] loop5: detected capacity change from 0 to 7 [ 66.553560][ T6241] Dev loop5: unable to read RDB block 7 [ 66.553608][ T6241] loop5: unable to read partition table [ 66.553728][ T6241] loop5: partition table beyond EOD, truncated [ 66.553764][ T6241] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 66.645572][ T43] audit: type=1400 audit(1788068296.354:343): avc: denied { write } for pid=6244 comm="syz.1.138" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.648275][ T6251] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 66.648310][ T6251] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 66.648424][ T6251] udc dummy_udc.0: failed to start g1: -19 [ 66.649154][ T6251] UDC core: g1: couldn't find an available UDC or it's busy [ 66.766049][ T43] audit: type=1400 audit(1788068296.464:344): avc: denied { read } for pid=6248 comm="syz.2.140" name="ublkb5" dev="devtmpfs" ino=2962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.766158][ T43] audit: type=1400 audit(1788068296.464:345): avc: denied { write } for pid=6252 comm="syz.3.141" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.771992][ T43] audit: type=1400 audit(1788068296.474:346): avc: denied { open } for pid=6248 comm="syz.2.140" path="/dev/ublkb5" dev="devtmpfs" ino=2962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.509580][ T6274] loop5: detected capacity change from 0 to 7 [ 67.512309][ T6274] Dev loop5: unable to read RDB block 7 [ 67.512340][ T6274] loop5: unable to read partition table [ 67.512423][ T6274] loop5: partition table beyond EOD, truncated [ 67.512433][ T6274] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 67.583053][ T6280] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 67.583134][ T6280] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 67.583280][ T6280] udc dummy_udc.0: failed to start g1: -19 [ 67.584199][ T6280] UDC core: g1: couldn't find an available UDC or it's busy [ 67.650660][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 67.651917][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 67.694995][ T6286] syzkaller0: entered promiscuous mode [ 67.695050][ T6286] syzkaller0: entered allmulticast mode [ 68.353693][ T6296] loop5: detected capacity change from 0 to 7 [ 68.371595][ T6296] Dev loop5: unable to read RDB block 7 [ 68.371674][ T6296] loop5: unable to read partition table [ 68.371832][ T6296] loop5: partition table beyond EOD, truncated [ 68.371848][ T6296] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 68.509604][ T6306] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 68.509678][ T6306] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 68.510048][ T6306] udc dummy_udc.0: failed to start g1: -19 [ 68.510485][ T6306] UDC core: g1: couldn't find an available UDC or it's busy [ 69.000183][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 69.002046][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 69.401767][ T6334] loop5: detected capacity change from 0 to 7 [ 69.402766][ T6334] Dev loop5: unable to read RDB block 7 [ 69.402787][ T6334] loop5: unable to read partition table [ 69.402880][ T6334] loop5: partition table beyond EOD, truncated [ 69.402889][ T6334] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 69.443822][ T6336] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 69.443901][ T6336] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 69.444068][ T6336] udc dummy_udc.0: failed to start g1: -19 [ 69.445644][ T6336] UDC core: g1: couldn't find an available UDC or it's busy [ 69.518912][ T6338] syzkaller0: entered promiscuous mode [ 69.518980][ T6338] syzkaller0: entered allmulticast mode [ 70.199878][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 70.199976][ T43] audit: type=1400 audit(1788068299.904:353): avc: denied { write } for pid=6355 comm="syz.2.181" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.742211][ T43] audit: type=1400 audit(1788068300.444:354): avc: denied { write } for pid=6360 comm="syz.2.182" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.743404][ T6362] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 70.743423][ T6362] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 70.743573][ T6362] udc dummy_udc.0: failed to start g1: -19 [ 70.743967][ T6362] UDC core: g1: couldn't find an available UDC or it's busy [ 70.869166][ T6375] Zero length message leads to an empty skb [ 70.975122][ T43] audit: type=1400 audit(1788068300.684:355): avc: denied { write } for pid=6381 comm="syz.2.190" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.217612][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.217719][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.223380][ T1715] cfg80211: failed to load regulatory.db [ 71.443350][ T6392] syzkaller0: entered promiscuous mode [ 71.443434][ T6392] syzkaller0: entered allmulticast mode [ 71.748925][ T43] audit: type=1400 audit(1788068301.454:356): avc: denied { write } for pid=6397 comm="syz.3.195" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.669496][ T43] audit: type=1400 audit(1788068302.374:357): avc: denied { write } for pid=6410 comm="syz.0.199" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.692341][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 72.694263][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 73.342682][ T43] audit: type=1400 audit(1788068303.044:358): avc: denied { write } for pid=6436 comm="syz.3.207" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.420284][ T6439] syzkaller0: entered promiscuous mode [ 73.420358][ T6439] syzkaller0: entered allmulticast mode [ 73.564155][ T43] audit: type=1400 audit(1788068303.264:359): avc: denied { write } for pid=6444 comm="syz.3.211" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.477137][ T1034] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.537482][ T43] audit: type=1400 audit(1788068304.244:360): avc: denied { write } for pid=6460 comm="syz.3.217" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.614821][ T1034] usb 5-1: device descriptor read/64, error -71 [ 74.671349][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 74.678662][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 74.854746][ T1034] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.004754][ T1034] usb 5-1: device descriptor read/64, error -71 [ 75.115772][ T1034] usb usb5-port1: attempt power cycle [ 75.464768][ T1034] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.485395][ T1034] usb 5-1: device descriptor read/8, error -71 [ 75.495477][ T43] audit: type=1400 audit(1788068305.194:361): avc: denied { write } for pid=6492 comm="syz.2.226" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.588392][ T6495] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.227'. [ 75.592679][ T43] audit: type=1400 audit(1788068305.294:362): avc: denied { bind } for pid=6496 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.593669][ T43] audit: type=1400 audit(1788068305.294:363): avc: denied { connect } for pid=6496 comm="syz.2.235" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.594516][ T43] audit: type=1400 audit(1788068305.294:364): avc: denied { write } for pid=6496 comm="syz.2.235" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.643439][ T43] audit: type=1400 audit(1788068305.344:365): avc: denied { write } for pid=6498 comm="syz.3.228" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.648895][ T6499] UDC core: g1: couldn't find an available UDC or it's busy [ 75.651212][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'. [ 75.657991][ T43] audit: type=1400 audit(1788068305.364:366): avc: denied { execute } for pid=6496 comm="syz.2.235" name="file2" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.658121][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 75.658340][ T6500] process 'syz.2.235' launched './file2' with NULL argv: empty string added [ 75.658990][ T43] audit: type=1400 audit(1788068305.364:367): avc: denied { execute_no_trans } for pid=6496 comm="syz.2.235" path="/60/file2" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.724826][ T1034] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 75.745170][ T1034] usb 5-1: device descriptor read/8, error -71 [ 75.784737][ T6502] syzkaller0: entered promiscuous mode [ 75.784788][ T6502] syzkaller0: entered allmulticast mode [ 75.859405][ T1034] usb usb5-port1: unable to enumerate USB device [ 77.037579][ T43] audit: type=1400 audit(1788068306.744:368): avc: denied { write } for pid=6521 comm="syz.1.238" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.038464][ T43] audit: type=1400 audit(1788068306.744:369): avc: denied { write } for pid=6519 comm="syz.3.237" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.040911][ T6522] UDC core: g1: couldn't find an available UDC or it's busy [ 77.102116][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 77.104059][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 77.301825][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.241'. [ 77.648721][ T43] audit: type=1400 audit(1788068307.354:370): avc: denied { write } for pid=6545 comm="syz.3.248" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.708658][ T6549] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 77.708723][ T6549] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 77.708968][ T6549] udc dummy_udc.0: failed to start g1: -19 [ 77.709473][ T6549] UDC core: g1: couldn't find an available UDC or it's busy [ 77.974850][ T5881] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.020887][ T6561] loop5: detected capacity change from 0 to 7 [ 78.022174][ T6561] Dev loop5: unable to read RDB block 7 [ 78.022210][ T6561] loop5: unable to read partition table [ 78.022382][ T6561] loop5: partition table beyond EOD, truncated [ 78.022436][ T6561] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.114642][ T5881] usb 8-1: device descriptor read/64, error -71 [ 78.354682][ T5881] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.484788][ T5881] usb 8-1: device descriptor read/64, error -71 [ 78.605011][ T5881] usb usb8-port1: attempt power cycle [ 78.634721][ T6576] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 78.634802][ T6576] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 78.634962][ T6576] udc dummy_udc.0: failed to start g1: -19 [ 78.639259][ T6576] UDC core: g1: couldn't find an available UDC or it's busy [ 78.882522][ T6586] loop5: detected capacity change from 0 to 7 [ 78.883425][ T6586] Dev loop5: unable to read RDB block 7 [ 78.883457][ T6586] loop5: unable to read partition table [ 78.883609][ T6586] loop5: partition table beyond EOD, truncated [ 78.883642][ T6586] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.955058][ T5881] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 78.976316][ T5881] usb 8-1: device descriptor read/8, error -71 [ 79.225906][ T5881] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.245408][ T5881] usb 8-1: device descriptor read/8, error -71 [ 79.354958][ T5881] usb usb8-port1: unable to enumerate USB device [ 79.550402][ T6601] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 79.550488][ T6601] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 79.550668][ T6601] udc dummy_udc.0: failed to start g1: -19 [ 79.551021][ T6601] UDC core: g1: couldn't find an available UDC or it's busy [ 79.836762][ T6613] loop5: detected capacity change from 0 to 7 [ 79.837551][ T6613] Dev loop5: unable to read RDB block 7 [ 79.837584][ T6613] loop5: unable to read partition table [ 79.837728][ T6613] loop5: partition table beyond EOD, truncated [ 79.837742][ T6613] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 79.887142][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 79.889936][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 80.022475][ C2] Unknown status report in ack skb [ 80.557239][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 80.557961][ T43] audit: type=1400 audit(1788068310.264:377): avc: denied { write } for pid=6625 comm="syz.1.278" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.639399][ T43] audit: type=1400 audit(1788068310.344:378): avc: denied { write } for pid=6627 comm="syz.1.279" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.643069][ T6628] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 80.643100][ T6628] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 80.643193][ T6628] udc dummy_udc.0: failed to start g1: -19 [ 80.644344][ T6628] UDC core: g1: couldn't find an available UDC or it's busy [ 81.579791][ T6654] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 81.579845][ T6654] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 81.579960][ T6654] udc dummy_udc.0: failed to start g1: -19 [ 81.580947][ T6654] UDC core: g1: couldn't find an available UDC or it's busy [ 81.628244][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 81.630497][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 81.924718][ T1715] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 82.074723][ T1715] usb 8-1: device descriptor read/64, error -71 [ 82.316283][ T1715] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 82.398866][ T6673] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 82.398942][ T6673] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 82.399192][ T6673] udc dummy_udc.0: failed to start g1: -19 [ 82.399788][ T6673] UDC core: g1: couldn't find an available UDC or it's busy [ 82.444855][ T1715] usb 8-1: device descriptor read/64, error -71 [ 82.554961][ T1715] usb usb8-port1: attempt power cycle [ 82.904670][ T1715] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 82.927455][ T1715] usb 8-1: device descriptor read/8, error -71 [ 83.164705][ T1715] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 83.185355][ T1715] usb 8-1: device descriptor read/8, error -71 [ 83.295327][ T1715] usb usb8-port1: unable to enumerate USB device [ 83.525382][ T6700] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 83.525473][ T6700] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 83.525964][ T6700] udc dummy_udc.0: failed to start g1: -19 [ 83.528555][ T6700] UDC core: g1: couldn't find an available UDC or it's busy [ 83.739982][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'. [ 83.741513][ T5741] Bluetooth: hci0: Malformed Event: 0x2f [ 83.782779][ T43] audit: type=1326 audit(1788068313.484:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.0.311" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32bcb9e159 code=0x0 [ 83.855623][ C0] Unknown status report in ack skb [ 84.578900][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 84.580883][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 84.696579][ T43] audit: type=1400 audit(1788068314.404:380): avc: denied { write } for pid=6728 comm="syz.1.315" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.770456][ T43] audit: type=1400 audit(1788068314.474:381): avc: denied { write } for pid=6732 comm="syz.1.317" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.773587][ T6733] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 84.773623][ T6733] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 84.773748][ T6733] udc dummy_udc.0: failed to start g1: -19 [ 84.774479][ T6733] UDC core: g1: couldn't find an available UDC or it's busy [ 84.905673][ T6743] configfs-gadget.g1 gadget.32: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 84.983587][ T6743] configfs-gadget.g1 gadget.32: HOST MAC 5a:a4:8c:2b:a6:38 [ 84.983678][ T6743] configfs-gadget.g1 gadget.32: MAC 5e:06:b0:b7:b9:72 [ 84.996923][ T43] audit: type=1400 audit(1788068314.704:382): avc: denied { search } for pid=5443 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.997203][ T43] audit: type=1400 audit(1788068314.704:383): avc: denied { search } for pid=5443 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.997372][ T43] audit: type=1400 audit(1788068314.704:384): avc: denied { search } for pid=5443 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.071515][ T43] audit: type=1400 audit(1788068314.774:385): avc: denied { read } for pid=6747 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.071729][ T43] audit: type=1400 audit(1788068314.774:386): avc: denied { read open } for pid=6747 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.192418][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'. [ 85.194022][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 85.843806][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 85.844066][ T43] audit: type=1400 audit(1788068315.544:400): avc: denied { write } for pid=6772 comm="syz.3.325" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.178029][ T43] audit: type=1400 audit(1788068315.884:401): avc: denied { write } for pid=6778 comm="syz.2.328" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.179960][ T6779] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 86.179981][ T6779] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 86.180052][ T6779] udc dummy_udc.0: failed to start g1: -19 [ 86.181627][ T6779] UDC core: g1: couldn't find an available UDC or it's busy [ 86.185628][ T5955] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 86.234414][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 86.236715][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 86.314729][ T5955] usb 8-1: device descriptor read/64, error -71 [ 86.564785][ T5955] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 86.646915][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.330'. [ 86.648523][ T5741] Bluetooth: hci0: Malformed Event: 0x2f [ 86.705561][ T5955] usb 8-1: device descriptor read/64, error -71 [ 86.793490][ T6791] syzkaller0: entered promiscuous mode [ 86.793598][ T6791] syzkaller0: entered allmulticast mode [ 86.825181][ T5955] usb usb8-port1: attempt power cycle [ 86.838481][ T43] audit: type=1400 audit(1788068316.544:402): avc: denied { write } for pid=6793 comm="syz.0.334" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.990753][ T43] audit: type=1400 audit(1788068316.694:403): avc: denied { write } for pid=6801 comm="syz.0.337" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.992521][ T6802] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 86.992546][ T6802] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 86.992626][ T6802] udc dummy_udc.0: failed to start g1: -19 [ 86.993779][ T6802] UDC core: g1: couldn't find an available UDC or it's busy [ 87.174669][ T5955] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 87.195367][ T5955] usb 8-1: device descriptor read/8, error -71 [ 87.434724][ T5955] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 87.465865][ T5955] usb 8-1: device descriptor read/8, error -71 [ 87.584875][ T5955] usb usb8-port1: unable to enumerate USB device [ 87.681063][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'. [ 87.683066][ T5741] Bluetooth: hci0: Malformed Event: 0x2f [ 87.781886][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 87.783898][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 87.827759][ T6817] configfs-gadget.g1 gadget.32: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 87.974517][ T43] audit: type=1326 audit(1788068317.674:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.343" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32bcb9e159 code=0x0 [ 88.327193][ T6825] syzkaller0: entered promiscuous mode [ 88.327240][ T6825] syzkaller0: entered allmulticast mode [ 88.453178][ T43] audit: type=1400 audit(1788068318.154:405): avc: denied { write } for pid=6826 comm="syz.2.345" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.529865][ T43] audit: type=1400 audit(1788068318.234:406): avc: denied { write } for pid=6828 comm="syz.2.346" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.596084][ T6831] loop5: detected capacity change from 0 to 7 [ 88.596957][ T6831] Dev loop5: unable to read RDB block 7 [ 88.596977][ T6831] loop5: unable to read partition table [ 88.597103][ T6831] loop5: partition table beyond EOD, truncated [ 88.597122][ T6831] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.704850][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 88.707436][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 89.520309][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 89.521665][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 89.561100][ T6853] syzkaller0: entered promiscuous mode [ 89.561166][ T6853] syzkaller0: entered allmulticast mode [ 89.648700][ T43] audit: type=1400 audit(1788068319.354:407): avc: denied { write } for pid=6854 comm="syz.1.354" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.685901][ T43] audit: type=1400 audit(1788068319.394:408): avc: denied { write } for pid=6856 comm="syz.2.355" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.688357][ T6857] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 89.688389][ T6857] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 89.688524][ T6857] udc dummy_udc.0: failed to start g1: -19 [ 89.689032][ T6857] UDC core: g1: couldn't find an available UDC or it's busy [ 89.751036][ T6861] loop5: detected capacity change from 0 to 7 [ 89.756075][ T6861] Dev loop5: unable to read RDB block 7 [ 89.756125][ T6861] loop5: unable to read partition table [ 89.756243][ T6861] loop5: partition table beyond EOD, truncated [ 89.756263][ T6861] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.816232][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.358'. [ 89.817989][ T5741] Bluetooth: hci0: Malformed Event: 0x2f [ 89.926838][ T6874] configfs-gadget.g1 gadget.32: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 90.044721][ T850] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.174796][ T850] usb 7-1: device descriptor read/64, error -71 [ 90.414887][ T850] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 90.544762][ T850] usb 7-1: device descriptor read/64, error -71 [ 90.655035][ T850] usb usb7-port1: attempt power cycle [ 90.738085][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 90.851412][ T43] audit: type=1400 audit(1788068320.554:409): avc: denied { write } for pid=6890 comm="syz.3.366" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.919160][ T43] audit: type=1400 audit(1788068320.624:410): avc: denied { write } for pid=6893 comm="syz.3.367" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.994837][ T850] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 91.000634][ T6898] loop5: detected capacity change from 0 to 7 [ 91.001402][ T6898] Dev loop5: unable to read RDB block 7 [ 91.001517][ T6898] loop5: unable to read partition table [ 91.001654][ T6898] loop5: partition table beyond EOD, truncated [ 91.001668][ T6898] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.016539][ T850] usb 7-1: device descriptor read/8, error -71 [ 91.086709][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'. [ 91.265477][ T850] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 91.285502][ T850] usb 7-1: device descriptor read/8, error -71 [ 91.395238][ T850] usb usb7-port1: unable to enumerate USB device [ 91.871019][ T43] audit: type=1400 audit(1788068321.574:411): avc: denied { write } for pid=6922 comm="syz.1.375" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.874159][ T6923] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 91.874198][ T6923] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 91.874345][ T6923] udc dummy_udc.0: failed to start g1: -19 [ 91.876531][ T6923] UDC core: g1: couldn't find an available UDC or it's busy [ 91.948643][ T43] audit: type=1400 audit(1788068321.654:412): avc: denied { write } for pid=6924 comm="syz.3.376" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.018870][ T43] audit: type=1326 audit(1788068321.724:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.3.378" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37b999e159 code=0x0 [ 92.058573][ T6935] loop5: detected capacity change from 0 to 7 [ 92.059225][ T6935] Dev loop5: unable to read RDB block 7 [ 92.059246][ T6935] loop5: unable to read partition table [ 92.059336][ T6935] loop5: partition table beyond EOD, truncated [ 92.059346][ T6935] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 92.102485][ T5741] Bluetooth: Unexpected continuation frame (len 18) [ 92.102607][ C1] Unknown status report in ack skb [ 92.116327][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 92.258326][ T43] audit: type=1400 audit(1788068321.964:414): avc: denied { write } for pid=6950 comm="syz.1.385" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.261632][ T6951] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 92.261674][ T6951] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 92.262845][ T6951] udc dummy_udc.0: failed to start g1: -19 [ 92.268722][ T6951] UDC core: g1: couldn't find an available UDC or it's busy [ 92.328717][ T43] audit: type=1400 audit(1788068322.034:415): avc: denied { write } for pid=6954 comm="syz.0.386" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.491025][ T6964] loop5: detected capacity change from 0 to 7 [ 92.494181][ T6964] Dev loop5: unable to read RDB block 7 [ 92.494800][ T6964] loop5: unable to read partition table [ 92.494946][ T6964] loop5: partition table beyond EOD, truncated [ 92.494991][ T6964] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 92.905579][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 92.907089][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 92.949535][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 92.951189][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 93.183285][ T43] audit: type=1400 audit(1788068322.884:416): avc: denied { write } for pid=6985 comm="syz.2.396" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.197631][ T6986] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 93.197694][ T6986] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 93.197875][ T6986] udc dummy_udc.0: failed to start g1: -19 [ 93.200048][ T6986] UDC core: g1: couldn't find an available UDC or it's busy [ 93.209488][ T43] audit: type=1400 audit(1788068322.924:417): avc: denied { write } for pid=6987 comm="syz.1.397" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.416825][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'. [ 93.418317][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 93.420316][ T6998] loop5: detected capacity change from 0 to 7 [ 93.421792][ T6998] Dev loop5: unable to read RDB block 7 [ 93.421824][ T6998] loop5: unable to read partition table [ 93.421979][ T6998] loop5: partition table beyond EOD, truncated [ 93.422011][ T6998] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.514849][ T5955] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 93.646531][ T5955] usb 6-1: device descriptor read/64, error -71 [ 93.904673][ T5955] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 94.034716][ T5955] usb 6-1: device descriptor read/64, error -71 [ 94.145202][ T5955] usb usb6-port1: attempt power cycle [ 94.484849][ T5955] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.515143][ T5955] usb 6-1: device descriptor read/8, error -71 [ 94.515558][ T7026] loop5: detected capacity change from 0 to 7 [ 94.517666][ T7026] Dev loop5: unable to read RDB block 7 [ 94.517692][ T7026] loop5: unable to read partition table [ 94.517795][ T7026] loop5: partition table beyond EOD, truncated [ 94.517806][ T7026] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.650033][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'. [ 94.652050][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 94.774727][ T5955] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 94.799600][ T5955] usb 6-1: device descriptor read/8, error -71 [ 94.891716][ T7054] loop5: detected capacity change from 0 to 7 [ 94.894417][ T7054] Dev loop5: unable to read RDB block 7 [ 94.894528][ T7054] loop5: unable to read partition table [ 94.894896][ T7054] loop5: partition table beyond EOD, truncated [ 94.896018][ T7054] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.905001][ T5955] usb usb6-port1: unable to enumerate USB device [ 95.186542][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.423'. [ 95.188427][ T5741] Bluetooth: hci1: Malformed Event: 0x2f [ 95.379836][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 95.517845][ T7082] loop5: detected capacity change from 0 to 7 [ 95.519028][ T7082] Dev loop5: unable to read RDB block 7 [ 95.519116][ T7082] loop5: unable to read partition table [ 95.519261][ T7082] loop5: partition table beyond EOD, truncated [ 95.519308][ T7082] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.570800][ T43] audit: type=1326 audit(1788068325.274:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.3.430" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37b999e159 code=0x0 [ 95.641640][ C1] Unknown status report in ack skb [ 95.820945][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.432'. [ 96.047209][ T7110] loop5: detected capacity change from 0 to 7 [ 96.048501][ T7110] Dev loop5: unable to read RDB block 7 [ 96.048522][ T7110] loop5: unable to read partition table [ 96.048608][ T7110] loop5: partition table beyond EOD, truncated [ 96.048617][ T7110] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.382531][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'. [ 96.383784][ T5741] Bluetooth: hci0: Malformed Event: 0x2f [ 97.099838][ T43] audit: type=1400 audit(1788068326.804:419): avc: denied { write } for pid=7139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.144898][ T43] audit: type=1400 audit(1788068326.854:420): avc: denied { write } for pid=7148 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.152180][ T7151] loop5: detected capacity change from 0 to 7 [ 97.168763][ T7151] Dev loop5: unable to read RDB block 7 [ 97.168862][ T7151] loop5: unable to read partition table [ 97.169097][ T7151] loop5: partition table beyond EOD, truncated [ 97.169183][ T7151] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.268095][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.452'. [ 97.272669][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 97.467357][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 97.624721][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 97.629127][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.632656][ T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 97.637703][ T30] usb 5-1: no configurations [ 97.637722][ T30] usb 5-1: can't read configurations, error -22 [ 97.764746][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.924724][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 97.926886][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.926925][ T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 97.926955][ T30] usb 5-1: no configurations [ 97.926965][ T30] usb 5-1: can't read configurations, error -22 [ 97.927403][ T30] usb usb5-port1: attempt power cycle [ 98.233413][ T7179] loop5: detected capacity change from 0 to 7 [ 98.234240][ T7179] Dev loop5: unable to read RDB block 7 [ 98.234263][ T7179] loop5: unable to read partition table [ 98.234348][ T7179] loop5: partition table beyond EOD, truncated [ 98.234358][ T7179] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 98.264997][ T30] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 98.286675][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 98.289365][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.289484][ T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 98.289518][ T30] usb 5-1: no configurations [ 98.289531][ T30] usb 5-1: can't read configurations, error -22 [ 98.425408][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 98.447220][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 98.450999][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.451107][ T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 98.451139][ T30] usb 5-1: no configurations [ 98.451149][ T30] usb 5-1: can't read configurations, error -22 [ 98.451587][ T30] usb usb5-port1: unable to enumerate USB device [ 98.588157][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'. [ 98.621983][ T43] audit: type=1400 audit(1788068328.324:421): avc: denied { write } for pid=7198 comm="syz.3.465" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.628908][ T7199] UDC core: g1: couldn't find an available UDC or it's busy [ 98.713004][ T43] audit: type=1400 audit(1788068328.414:422): avc: denied { write } for pid=7203 comm="syz.2.466" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.787894][ T7210] loop5: detected capacity change from 0 to 7 [ 98.789475][ T7210] Dev loop5: unable to read RDB block 7 [ 98.789508][ T7210] loop5: unable to read partition table [ 98.789667][ T7210] loop5: partition table beyond EOD, truncated [ 98.789683][ T7210] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.440483][ T43] audit: type=1326 audit(1788068329.144:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.1.473" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99e479e159 code=0x0 [ 99.516321][ C2] Unknown status report in ack skb [ 99.605939][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.474'. [ 99.682415][ T43] audit: type=1400 audit(1788068329.384:424): avc: denied { write } for pid=7237 comm="syz.3.476" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.685343][ T7238] UDC core: g1: couldn't find an available UDC or it's busy [ 99.729681][ T7242] loop5: detected capacity change from 0 to 7 [ 99.730107][ T7242] Dev loop5: unable to read RDB block 7 [ 99.730126][ T7242] loop5: unable to read partition table [ 99.730207][ T7242] loop5: partition table beyond EOD, truncated [ 99.730215][ T7242] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.731173][ T43] audit: type=1400 audit(1788068329.434:425): avc: denied { write } for pid=7239 comm="syz.2.477" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.704284][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'. [ 100.827080][ T43] audit: type=1400 audit(1788068330.534:426): avc: denied { read } for pid=7269 comm="syz.2.486" name="trace_pipe_raw" dev="tracefs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.124473][ T43] audit: type=1400 audit(1788068330.824:427): avc: denied { write } for pid=7274 comm="syz.0.487" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.127377][ T7275] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 101.127400][ T7275] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 101.127475][ T7275] udc dummy_udc.0: failed to start g1: -19 [ 101.127907][ T7275] UDC core: g1: couldn't find an available UDC or it's busy [ 101.179317][ T7277] loop5: detected capacity change from 0 to 7 [ 101.180668][ T7277] Dev loop5: unable to read RDB block 7 [ 101.180710][ T7277] loop5: unable to read partition table [ 101.180847][ T7277] loop5: partition table beyond EOD, truncated [ 101.180860][ T7277] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.223532][ T43] audit: type=1400 audit(1788068330.924:428): avc: denied { write } for pid=7278 comm="syz.0.489" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.899024][ T7291] Bluetooth: MGMT ver 1.23 [ 101.911667][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.493'. [ 102.295013][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.494'. [ 102.503314][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 102.503382][ T43] audit: type=1400 audit(1788068332.204:431): avc: denied { write } for pid=7301 comm="syz.1.496" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.507075][ T7302] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 102.507098][ T7302] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 102.507174][ T7302] udc dummy_udc.0: failed to start g1: -19 [ 102.507568][ T7302] UDC core: g1: couldn't find an available UDC or it's busy [ 102.600265][ T7291] syz.2.493 (7291) used greatest stack depth: 19288 bytes left [ 102.600618][ T43] audit: type=1400 audit(1788068332.304:432): avc: denied { write } for pid=7306 comm="syz.1.498" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.663244][ T7314] loop5: detected capacity change from 0 to 7 [ 102.664218][ T7314] Dev loop5: unable to read RDB block 7 [ 102.664242][ T7314] loop5: unable to read partition table [ 102.664323][ T7314] loop5: partition table beyond EOD, truncated [ 102.664331][ T7314] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.778228][ T7325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 102.782874][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 102.873361][ T43] audit: type=1326 audit(1788068332.574:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.2.504" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bb239e159 code=0x0 [ 102.953324][ C0] Unknown status report in ack skb [ 103.586247][ T43] audit: type=1400 audit(1788068333.294:434): avc: denied { write } for pid=7334 comm="syz.1.506" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.588358][ T7335] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 103.588392][ T7335] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 103.588526][ T7335] udc dummy_udc.0: failed to start g1: -19 [ 103.591182][ T7335] UDC core: g1: couldn't find an available UDC or it's busy [ 103.667862][ T43] audit: type=1400 audit(1788068333.374:435): avc: denied { write } for pid=7338 comm="syz.1.508" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.851963][ T7352] loop5: detected capacity change from 0 to 7 [ 103.852978][ T7352] Dev loop5: unable to read RDB block 7 [ 103.853000][ T7352] loop5: unable to read partition table [ 103.853091][ T7352] loop5: partition table beyond EOD, truncated [ 103.857000][ T7352] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.894497][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.512'. [ 103.896028][ T5741] Bluetooth: hci1: Malformed Event: 0x2f [ 104.117722][ T43] audit: type=1400 audit(1788068333.824:436): avc: denied { write } for pid=7363 comm="syz.0.516" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.119379][ T7364] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 104.119401][ T7364] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 104.119475][ T7364] udc dummy_udc.0: failed to start g1: -19 [ 104.121084][ T7364] UDC core: g1: couldn't find an available UDC or it's busy [ 104.223448][ T43] audit: type=1400 audit(1788068333.924:437): avc: denied { write } for pid=7365 comm="syz.0.517" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.757986][ T43] audit: type=1400 audit(1788068334.464:438): avc: denied { read write } for pid=7373 comm="syz.1.519" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.759528][ T43] audit: type=1400 audit(1788068334.464:439): avc: denied { open } for pid=7373 comm="syz.1.519" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.052268][ T7384] syzkaller0: entered promiscuous mode [ 105.056443][ T7384] syzkaller0: entered allmulticast mode [ 105.276148][ T7387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 105.969076][ T43] audit: type=1400 audit(1788068335.674:440): avc: denied { write } for pid=7392 comm="syz.2.525" name="c.1" dev="configfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.976594][ T7394] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 105.976616][ T7394] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 105.976686][ T7394] udc dummy_udc.0: failed to start g1: -19 [ 105.978376][ T7394] UDC core: g1: couldn't find an available UDC or it's busy [ 106.788698][ C1] Unknown status report in ack skb [ 107.194225][ T7427] configfs-gadget.g1 gadget.0: FS Capture: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 107.194317][ T7427] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 107.194530][ T7427] udc dummy_udc.0: failed to start g1: -19 [ 107.195897][ T7427] UDC core: g1: couldn't find an available UDC or it's busy [ 107.212894][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'. [ 107.213914][ T5741] Bluetooth: hci2: Malformed Event: 0x2f [ 107.266179][ T7430] syzkaller0: entered promiscuous mode [ 107.266221][ T7430] syzkaller0: entered allmulticast mode [ 108.598640][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 108.598722][ T43] audit: type=1400 audit(1788068338.304:446): avc: denied { append } for pid=7445 comm="syz.3.541" name="fb0" dev="devtmpfs" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.602971][ T43] audit: type=1400 audit(1788068338.304:447): avc: denied { map } for pid=7445 comm="syz.3.541" path="/dev/fb0" dev="devtmpfs" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.603181][ T43] audit: type=1400 audit(1788068338.304:448): avc: denied { write execute } for pid=7445 comm="syz.3.541" path="/dev/fb0" dev="devtmpfs" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.666276][ T7448] Console: switching to colour dummy device 80x25 [ 108.905187][ T5841] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 109.054736][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 109.057497][ T5841] usb 6-1: unable to get BOS descriptor or descriptor too short [ 109.057538][ T5841] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 109.057569][ T5841] usb 6-1: no configurations [ 109.057579][ T5841] usb 6-1: can't read configurations, error -22 [ 109.184649][ T5841] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 109.354836][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 109.356575][ T5841] usb 6-1: unable to get BOS descriptor or descriptor too short [ 109.356603][ T5841] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 109.356622][ T5841] usb 6-1: no configurations [ 109.356628][ T5841] usb 6-1: can't read configurations, error -22 [ 109.356771][ T5841] usb usb6-port1: attempt power cycle [ 109.431093][ T7445] ------------[ cut here ]------------ [ 109.431149][ T7445] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 109.431196][ T7445] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bc0, CPU#2: syz.3.541/7445 [ 109.438748][ T7445] Modules linked in: [ 109.440346][ T7445] CPU: 2 UID: 0 PID: 7445 Comm: syz.3.541 Not tainted syzkaller #0 PREEMPT(full) [ 109.443440][ T7445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.446611][ T7445] RIP: 0010:__mutex_lock+0x94b/0x1bc0 [ 109.448325][ T7445] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b4 10 00 00 44 8b 05 58 33 74 05 45 85 c0 75 13 48 8d 3d 0c 3e 77 05 48 c7 c6 e0 f3 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 109.454615][ T7445] RSP: 0018:ffffc9000db0f910 EFLAGS: 00010246 [ 109.456868][ T7445] RAX: 0000000000000003 RBX: ffff8880554351c0 RCX: 1ffffffff228a500 [ 109.459512][ T7445] RDX: 0000000000000000 RSI: ffffffff8beff3e0 RDI: ffffffff914832c0 [ 109.462069][ T7445] RBP: ffffc9000db0fa80 R08: 0000000000000000 R09: 0000000000000000 [ 109.464641][ T7445] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 109.467170][ T7445] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888055bf4360 [ 109.469678][ T7445] FS: 000055556f7bf500(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 109.472505][ T7445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.475116][ T7445] CR2: 000000110c47c833 CR3: 000000005415b000 CR4: 0000000000352ef0 [ 109.478343][ T7445] Call Trace: [ 109.479636][ T7445] [ 109.480610][ T7445] ? virtio_gpu_free_object+0xec/0x280 [ 109.482402][ T7445] ? drm_gem_fb_destroy+0x1a1/0x210 [ 109.484103][ T7445] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 109.485970][ T7445] ? __pfx___mutex_lock+0x10/0x10 [ 109.487592][ T7445] ? drm_mode_object_put+0x41/0x50 [ 109.489252][ T7445] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 109.490979][ T7445] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 109.492837][ T7445] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 109.495020][ T7445] ? virtio_gpu_free_object+0xec/0x280 [ 109.496838][ T7445] virtio_gpu_free_object+0xec/0x280 [ 109.498925][ T7445] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 109.501129][ T7445] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 109.503662][ T7445] drm_gem_object_free+0x60/0xa0 [ 109.505326][ T7445] drm_client_buffer_delete+0x1d8/0x270 [ 109.507310][ T7445] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 109.509178][ T7445] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 109.511123][ T7445] put_fb_info+0xb8/0xf0 [ 109.512474][ T7445] fb_release+0x13e/0x190 [ 109.513911][ T7445] ? __pfx_fb_release+0x10/0x10 [ 109.515547][ T7445] __fput+0x3ff/0xb50 [ 109.516859][ T7445] task_work_run+0x150/0x240 [ 109.518419][ T7445] ? __pfx_task_work_run+0x10/0x10 [ 109.520112][ T7445] get_signal+0x1bd/0x21e0 [ 109.521576][ T7445] ? __pfx_get_signal+0x10/0x10 [ 109.523217][ T7445] ? do_raw_spin_lock+0x128/0x260 [ 109.525170][ T7445] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.526961][ T7445] arch_do_signal_or_restart+0x91/0x7e0 [ 109.528976][ T7445] ? find_held_lock+0x2b/0x80 [ 109.530664][ T7445] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 109.532807][ T7445] ? __x64_sys_close_range+0x3ce/0x5d0 [ 109.534732][ T7445] ? __x64_sys_close_range+0x30f/0x5d0 [ 109.536584][ T7445] exit_to_user_mode_loop+0x139/0x700 [ 109.538352][ T7445] ? rcu_is_watching+0x13/0xc0 [ 109.540015][ T7445] do_syscall_64+0x661/0x790 [ 109.541681][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.543911][ T7445] RIP: 0033:0x7f37b999e159 [ 109.545734][ T7445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.552178][ T7445] RSP: 002b:00007ffc9d8d2758 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 109.554975][ T7445] RAX: 0000000000000000 RBX: 00007f37b9c27da0 RCX: 00007f37b999e159 [ 109.557784][ T7445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 109.560379][ T7445] RBP: 00007f37b9c27da0 R08: 0000000000000006 R09: 0000000000000000 [ 109.563020][ T7445] R10: 00007f37b9c27cb0 R11: 0000000000000246 R12: 000000000001aaf7 [ 109.566150][ T7445] R13: 00007f37b9c2618c R14: 000000000001a9e9 R15: 00007f37b9c26180 [ 109.569096][ T7445] [ 109.570170][ T7445] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.572478][ T7445] CPU: 2 UID: 0 PID: 7445 Comm: syz.3.541 Not tainted syzkaller #0 PREEMPT(full) [ 109.575358][ T7445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.578775][ T7445] Call Trace: [ 109.580055][ T7445] [ 109.581365][ T7445] dump_stack_lvl+0x100/0x190 [ 109.583223][ T7445] vpanic+0x553/0x970 [ 109.584620][ T7445] ? __pfx_vpanic+0x10/0x10 [ 109.586205][ T7445] panic+0xd1/0xe0 [ 109.587480][ T7445] ? __pfx_panic+0x10/0x10 [ 109.589063][ T7445] check_panic_on_warn.cold+0x19/0x34 [ 109.590787][ T7445] ? __mutex_lock+0x944/0x1bc0 [ 109.592349][ T7445] __warn.cold+0x191/0x318 [ 109.593831][ T7445] __report_bug+0x30f/0x440 [ 109.595324][ T7445] ? __mutex_lock+0x944/0x1bc0 [ 109.596983][ T7445] ? __pfx___report_bug+0x10/0x10 [ 109.598718][ T7445] ? fb_release+0x13e/0x190 [ 109.600482][ T7445] ? __fput+0x3ff/0xb50 [ 109.602064][ T7445] ? task_work_run+0x150/0x240 [ 109.603688][ T7445] report_bug_entry+0xe2/0x290 [ 109.605243][ T7445] ? __mutex_lock+0x94b/0x1bc0 [ 109.606732][ T7445] handle_bug+0x1cd/0x2a0 [ 109.608039][ T7445] exc_invalid_op+0x17/0x50 [ 109.609378][ T7445] asm_exc_invalid_op+0x1a/0x20 [ 109.610924][ T7445] RIP: 0010:__mutex_lock+0x94b/0x1bc0 [ 109.612748][ T7445] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b4 10 00 00 44 8b 05 58 33 74 05 45 85 c0 75 13 48 8d 3d 0c 3e 77 05 48 c7 c6 e0 f3 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 109.619702][ T7445] RSP: 0018:ffffc9000db0f910 EFLAGS: 00010246 [ 109.621623][ T7445] RAX: 0000000000000003 RBX: ffff8880554351c0 RCX: 1ffffffff228a500 [ 109.624093][ T7445] RDX: 0000000000000000 RSI: ffffffff8beff3e0 RDI: ffffffff914832c0 [ 109.626557][ T7445] RBP: ffffc9000db0fa80 R08: 0000000000000000 R09: 0000000000000000 [ 109.629540][ T7445] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 109.632665][ T7445] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888055bf4360 [ 109.635088][ T7445] ? virtio_gpu_free_object+0xec/0x280 [ 109.637524][ T7445] ? drm_gem_fb_destroy+0x1a1/0x210 [ 109.639707][ T7445] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 109.642121][ T7445] ? __pfx___mutex_lock+0x10/0x10 [ 109.644147][ T7445] ? drm_mode_object_put+0x41/0x50 [ 109.646197][ T7445] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 109.648336][ T7445] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 109.650815][ T7445] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 109.653886][ T7445] ? virtio_gpu_free_object+0xec/0x280 [ 109.656300][ T7445] virtio_gpu_free_object+0xec/0x280 [ 109.658358][ T7445] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 109.660646][ T7445] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 109.663046][ T7445] drm_gem_object_free+0x60/0xa0 [ 109.664988][ T7445] drm_client_buffer_delete+0x1d8/0x270 [ 109.667157][ T7445] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 109.669386][ T7445] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 109.671933][ T7445] put_fb_info+0xb8/0xf0 [ 109.673773][ T7445] fb_release+0x13e/0x190 [ 109.675727][ T7445] ? __pfx_fb_release+0x10/0x10 [ 109.677914][ T7445] __fput+0x3ff/0xb50 [ 109.679670][ T7445] task_work_run+0x150/0x240 [ 109.681599][ T7445] ? __pfx_task_work_run+0x10/0x10 [ 109.683577][ T7445] get_signal+0x1bd/0x21e0 [ 109.685345][ T7445] ? __pfx_get_signal+0x10/0x10 [ 109.687012][ T7445] ? do_raw_spin_lock+0x128/0x260 [ 109.688560][ T7445] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.690233][ T7445] arch_do_signal_or_restart+0x91/0x7e0 [ 109.691979][ T7445] ? find_held_lock+0x2b/0x80 [ 109.693578][ T7445] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 109.695790][ T7445] ? __x64_sys_close_range+0x3ce/0x5d0 [ 109.697796][ T7445] ? __x64_sys_close_range+0x30f/0x5d0 [ 109.699735][ T7445] exit_to_user_mode_loop+0x139/0x700 [ 109.701569][ T7445] ? rcu_is_watching+0x13/0xc0 [ 109.703207][ T7445] do_syscall_64+0x661/0x790 [ 109.704647][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.706501][ T7445] RIP: 0033:0x7f37b999e159 [ 109.707910][ T7445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.714085][ T7445] RSP: 002b:00007ffc9d8d2758 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 109.717626][ T7445] RAX: 0000000000000000 RBX: 00007f37b9c27da0 RCX: 00007f37b999e159 [ 109.720307][ T7445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 109.723483][ T7445] RBP: 00007f37b9c27da0 R08: 0000000000000006 R09: 0000000000000000 [ 109.726134][ T7445] R10: 00007f37b9c27cb0 R11: 0000000000000246 R12: 000000000001aaf7 [ 109.729165][ T7445] R13: 00007f37b9c2618c R14: 000000000001a9e9 R15: 00007f37b9c26180 [ 109.732516][ T7445] [ 109.734707][ T7445] Kernel Offset: disabled [ 109.736642][ T7445] Rebooting in 86400 seconds..