last executing test programs: 5.922970424s ago: executing program 1 (id=381): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b04, 0x0) 3.802809984s ago: executing program 3 (id=398): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x1b2082) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000880)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000040)=0x7fffffff, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r6, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000180)={0x28, 0x5, r6, r6, 0x1000, 0x4, 0x3ffe}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010000108fdfffffb000eb1839a4409ce", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000018001a80100002800c00018008000f000500000004002d"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) 3.673835541s ago: executing program 3 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x10e29d924c95358a) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x4697, &(0x7f0000000200)={0x0, 0x5ec4, 0x20, 0x0, 0x11a}, &(0x7f0000000280), &(0x7f0000000400)) r2 = syz_io_uring_setup(0x4ac2, &(0x7f0000000440)={0x0, 0xb3e0, 0x400, 0x1, 0x5f, 0x0, r1}, &(0x7f00000004c0), &(0x7f0000000500)) r3 = syz_io_uring_setup(0x4954, &(0x7f0000000300)={0x0, 0x301e, 0x802, 0x3, 0x1cf, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000b5ffffffffffffff00850000007f0000009500000000005169d7a2d67abd8b00dda386af12fe6224f012d814c95f5af588ea1305ecd290008a65c08f1c302ea631e628d11b5536c2d100000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x55251e4e, 0x121103) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000040)=0xffffffff, 0x4) bind$inet6(r8, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r8, 0x29, 0x6, 0x0, &(0x7f0000000080)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000003940)=0x10) poll(&(0x7f0000000040)=[{r7, 0x1000}], 0x1, 0x6) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x1, 0x0, 0x2, 0x0}) r10 = socket$rds(0x15, 0x5, 0x0) pwritev(r10, &(0x7f0000000800)=[{&(0x7f0000000540)="70605f883604ae33a942a806c56c6bf4048f679690cb318e609e5c03740f469bc0d3547d4aab58295c321f539d0ca4a25e22720f28aecdde866b8b3a6cc14f12ed5cb7286532aae5d51cee511941a631d8fafba1b8c59d7252a09fa84015e9ffcc9d713954759fd5e4264d76f55b41a3d8b6211d3ade509ea952341836d0d270bece802a765dfed4b119a86ba2951d158feb57b9715ed70ea18e833acd26d9e1b77e1eb054959200e07dff2ba5331e27a8211568bdaabd93c9ac65547e", 0xbd}, {&(0x7f0000000600)="12cebfb16b6949bf8631a2fc8007d4ebb5bce06dfe4a42141da8f4a3eaa823e89254302973821c939187d9ed9240efd7e8cc55825d5ee0c2d83805a0543d51237e22338a88fe2cd088e37ca5eb529b4ec8e98f92dd6784bf54f731b27ece089759ee08917ab9322a0f7516350e4e1d0a19242ed46e40e3c4f596aecd3b68e335df", 0x81}, {&(0x7f00000006c0)="af079c5a6c0c4baa4554c03a573b03475c71b8f94be1f1360aac4c115a7bf69ebe1361dede90928f0bce17cf82fc72e0", 0x30}, {&(0x7f0000000700)="3defc2cb37df28f5e83ee2f8ac030c991ef46919eec2eb74c838e973e21e7a7dd99999f9c445a1b7058ec408c27ebddb05913ee8bc3155915cf8ec34eaf660ddaa2c1ca677158e2db523149b5fa9560faa2bdda417b2799a944201a59874658ba23ab3522bc022659604c67385f7979fecdcb40ef450ac40bd28c68b2b62d685b80b3c0f791dbafd10d578fb7325f9ca6fcd09c6a43cd25dc72e5a6c0c651844a9e3daa54ba292fb11413fa026f71e0e79acecdc06ce6a942b0aeb1b71b96f92c5aa09d9deb0ab8f95f619c58dd7ec30205378bf63aafa0f4618ad36989c4686ee192315960ca811309bb6c43a4b0aa4613cf3", 0xf3}], 0x4, 0x9, 0x7566) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r3, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 3.287449833s ago: executing program 2 (id=401): r0 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0xfffffff3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r1, &(0x7f0000000180)={0x4, 0x8, 0x0, 0x9079, 0x5, 0x8, 0x10000, 0x5, 0x4bd}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x9, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r4 = openat$incfs(r2, &(0x7f0000000440)='.log\x00', 0x3f9540, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000004c0)={0x7, 0x0, &(0x7f0000000480)=[r0, r0]}, 0x2) write(r4, &(0x7f0000000500)="e4ab943ac92ccd0f31663ab0fb2ff0aecd630a09b6b8af36f14ae9189e79439cc9e20d5d357e05371982ccc9e8c04353c9802456486c5c76b208eeea91e77bc9b822b10d155c640c2a8c0b661fbfbdd1e2cfbd8a1208c25dabbb7868535ae28e723196c19bc25317e555bb7bec1c9c5a87409e75a987f8f33645cede25", 0x7d) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000580)='ip6erspan0\x00') getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001600)={'broute\x00', 0x0, 0x3, 0x1000, [0x9, 0xf, 0x0, 0xc, 0x2, 0x8], 0x4, &(0x7f00000005c0)=[{}, {}, {}, {}], &(0x7f0000000600)=""/4096}, &(0x7f0000001680)=0x78) getpid() r5 = io_uring_setup(0x3b8e, &(0x7f00000016c0)={0x0, 0x344e, 0x8000, 0x0, 0x48}) io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000001740)={0x1}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001780)='wg1\x00', 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000017c0)={0x1, 'ip6gretap0\x00', {}, 0x4}) pipe2$9p(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$XFS_IOC_FSGETXATTRA(r6, 0x801c582d, &(0x7f0000001840)) getsockname$inet6(r2, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000018c0)=0x1c) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000001900)={0x100000, 0x0, {[0x1, 0x10, 0x0, 0x23a2, 0x9, 0x7, 0x2, 0x6]}}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000001980)=0x2a00) read$msr(r4, &(0x7f00000019c0)=""/136, 0x88) write$cgroup_freezer_state(r2, &(0x7f0000001a80)='FREEZING\x00', 0x9) mount$overlay(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x4010, &(0x7f0000001b40)={[{@userxattr}, {@userxattr}, {@nfs_export_off}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@permit_directio}, {@fsname={'fsname', 0x3d, '.'}}, {@smackfshat={'smackfshat', 0x3d, '\x1a}\xa3)'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6gretap0\x00'}}, {@euid_gt={'euid>', r1}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001c00)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001c80)={r7, 0x1, r4, 0x7, 0x80000}) 3.184462574s ago: executing program 2 (id=402): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}}, 0x400c084) 2.97352781s ago: executing program 2 (id=403): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (fail_nth: 8) 2.751712743s ago: executing program 2 (id=404): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r2, @ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) creat(&(0x7f0000000140)='./file0\x00', 0x20) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x146) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="06e00080000000000000b89c060723f0e595da85ca90ec8f21afcafe0e44009b9bb5456b71bc4e72c0a5293a321119e904ec8bb6241c3d3b55b52e0c1888069c6eab8b26be7b6af4d19355b8f748d4dd3291c8aa852712d9baa7a18690e3d81cfbaddce7dbd1264bda09849344dc7cc645ada382c3c458c31f7ad2d6987fd0ca4cb12e92e43942aea443b6acddd2fdd335596f7841a55fb46ba03926f4a9eaa6040cd7a2806309df351d0264822a095e8a5c8dd949909a2d824af94b03c6dc81993bbc42f16386f463261d5af2caceb821f41913d667eadea03f4120b62d832628f194c9e2c912f81ffbda4872ff4c8fd9"], 0xa, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r2, @ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setuid(r3) (async) creat(&(0x7f0000000140)='./file0\x00', 0x20) (async) getpid() (async) syz_pidfd_open(r4, 0x0) (async) setns(r5, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x146) (async) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="06e00080000000000000b89c060723f0e595da85ca90ec8f21afcafe0e44009b9bb5456b71bc4e72c0a5293a321119e904ec8bb6241c3d3b55b52e0c1888069c6eab8b26be7b6af4d19355b8f748d4dd3291c8aa852712d9baa7a18690e3d81cfbaddce7dbd1264bda09849344dc7cc645ada382c3c458c31f7ad2d6987fd0ca4cb12e92e43942aea443b6acddd2fdd335596f7841a55fb46ba03926f4a9eaa6040cd7a2806309df351d0264822a095e8a5c8dd949909a2d824af94b03c6dc81993bbc42f16386f463261d5af2caceb821f41913d667eadea03f4120b62d832628f194c9e2c912f81ffbda4872ff4c8fd9"], 0xa, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) 2.69535425s ago: executing program 3 (id=405): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0xfffffffffffffffc, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r2, 0x0, 0x900}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2fd60012002890"}, 0x10}, 0x2, 0x0, 0x0, 0x80}, 0x4000855) recvfrom(r1, &(0x7f0000000180)=""/49, 0x31, 0x10020, &(0x7f0000000280)=@in={0x2, 0x4e24, @multicast2}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x9}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001480), &(0x7f00000014c0)=0x4) socket$netlink(0x10, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0) ioctl$KVM_TDX_CAPABILITIES(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x5, 0x0, [{}, {}, {}, {}, {}]}}}) 2.69428645s ago: executing program 1 (id=406): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="08000000010000", 0x7) r1 = syz_open_dev$video(&(0x7f0000000000), 0xff, 0x1016c3) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x0, 0x4, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8001004, 0x9, 0x6, 0x80b}}) 2.511017854s ago: executing program 2 (id=407): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) userfaultfd(0x80001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x40000, 0x0) ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f0000000000)={0x0, 0xc, 0x3, 0x1, @msf={0x3, 0x8, 0x3}, 0x8}) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r0, 0x3, {0x2a12, 0x80010000, 0x0, 0x404, 0x8, 0x0, 0x2, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, &(0x7f0000000180)='o', 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000013c0)={{r4}, r10, 0x10, @inherit={0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000100000000000000000000800000000008000000000000008b1238960ad700a20100010000000000ffffff7f0000000008000000000000000000000000000000ffffff7f00000000"]}, @name="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"}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 2.39949396s ago: executing program 1 (id=408): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x19, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001a480)={r1, 0x0, 0x90, 0x60, &(0x7f0000019300)="af7bedee3d34d9ae3856fb2c1d7cf8d29f465120a4f9fb0e21156100884375fb514533845f3c71354f9801cc4aa3153990fd86f529f0e0f01bf0e9d0ebb0e29361e7431e00b303659420305e07c20de99f70bef2c73a5f55f0f568aad4afd221d2013cbd41a33b60ea7757684c6aa5980190f9910f7aeb31c2d41f8847d55cd7fc5c5771d479f4053ad259c63f7a1c8a", &(0x7f00000193c0)=""/96, 0x3570, 0x0, 0x30, 0x1000, &(0x7f0000019440)="f7cc048f9609fd87e4a107935bbefb1ddf4e77c0c1db00e4ff3cb28a10c7274835b83ac7d3e261040c8500c69cf535c7", &(0x7f0000019480)="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", 0x2}, 0x50) r2 = socket(0x1a, 0x5, 0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000140)=0x80, 0x4) mlock(&(0x7f0000117000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) sendmsg$can_raw(r4, &(0x7f00000192c0)={&(0x7f0000000180)={0x1d, r0}, 0x10, &(0x7f0000019280)={&(0x7f0000019200)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "08cd8a15ff29b2a54aad553d07572a62457775ab2f897d975c9bc7fa2bc444440e87710827614e65ce2e908a96a88f4e48410de02c9d12546d792bd046488951"}, 0x48}, 0x1, 0x0, 0x0, 0x4850}, 0x80) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.991318966s ago: executing program 1 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd9f, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x1, 0xffff, 0x20a, 0x1ff, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000140)={0x2, r3, 0x3, 0xffffffff, 0x4, 0x800018, 0x2, 0x4, 0x3ffd}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) (rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (async) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0xfef3, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES16=0x0, @ANYRES64=r4], 0x0) (rerun: 64) 1.726377102s ago: executing program 3 (id=410): ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000300)=0x339) (async) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000300)=0x339) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0xc}, {0x0, 0xe}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6f, 0x10}}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8804}, 0x4008040) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0xc}, {0x0, 0xe}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6f, 0x10}}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8804}, 0x4008040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB]) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000280)={0xfffffffa, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f00000000c0)=""/203, 0xcb}], &(0x7f0000000240)=[0x2, 0x2, 0x0, 0x4, 0x5], 0x2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f00000004c0)={0x8, 0x24b}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r7, 0x0, 0x3, 0x4000}}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0x64, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x86c}, {0x8, 0xb, 0x7c91}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0x64, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x86c}, {0x8, 0xb, 0x7c91}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1.626661048s ago: executing program 1 (id=411): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}}, 0x400c084) 1.626461112s ago: executing program 0 (id=412): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (fail_nth: 9) 1.483892261s ago: executing program 3 (id=413): r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {'\x00\x00\x00\x00\a\x00'}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) (async) r5 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000180)=0xa6) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0x0, 0x6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x2, 0x0, 0x0, 0x8, 0x0, 0x7fffffff, 0x0, 0x543}, {0x4, 0x7ffffffff7fffffe}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x16}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r8, 0xc0085504, &(0x7f0000000000)=0x13) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, r9}}, 0x18) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) (async) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f0000000040)={'gre0\x00', 0x7f, 0xfff}) (async) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f0000000040)={'gre0\x00', 0x7f, 0xfff}) 875.341113ms ago: executing program 0 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 725.930979ms ago: executing program 1 (id=415): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b04, 0x0) 575.54358ms ago: executing program 0 (id=416): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x7, {0xf8001004, 0x40000009, 0x6, 0x80b}}) 426.150665ms ago: executing program 0 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x23c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x214, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x200, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1f0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x1d4, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "d39026e0fbf0a4bac5dc84780e1eb64ce786c1a6b547deca27ebe47f779be66978aad70c8505e95c07de4eac23251e1721ec233a83f98b64324850e8d0ec7b84df8012d65526e20b1661debcf4dba7b5ff9e6b3f72ca8bafe3dc6057ad8710122c06bc8f34a706eefd51ddeabf3430"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "940886043bf5cfb97465a374d3faf83986c9f5643a8a09708c2f09825b449ea8b1e3587f036a718d15e6c69a0602ebde4646359b06cf2f4722e1262f5f94cc11a62a94f7664eeea753198e33c55a98f9f094957a11e66a9f64ce345cda69fbed887a1bcd4a633d4db470d4c72791cfff1fb2e0092761984f8273d326b8ec6943c17ca19dcf7daacfa6090150efe3bc26297fc4450f6a499ff1d2483d75523656b1293d77b93eeb392950bd1fadcbabbbe8831e196dbb0f0ecd8aff0581658fd88ce26eae941b77dc2ec0c0f07e"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2b0}}, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ee0b", 0xffeb}], 0x1, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1d}}}}], 0x20}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000aaea10f5e2000000000000000000850000001e0000009500000000000000f45fb9247c810fa9c02ebcd3f522f340af65acd7d3cb77cdcffe0f9325dd674f7a7755144e36ba4dddcbb9e2d615e1f3bd604f6b6571564de46ec07e17159eecba4e41932d86300dbbfac800dda5a79090722b11e0016db5a956c1d17015a5d3767b0f89319b0b418b2091c2071da73746fa6e365fc81df36fbc19077fcf6fad72589b6528660462b1f1a2aa54873daf2a4b23c5919b580ff61f62364419f29328f6"], &(0x7f0000000080)='GPL\x00'}, 0x94) 253.369111ms ago: executing program 0 (id=418): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) io_setup(0xdd0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 235.022267ms ago: executing program 2 (id=419): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b18, &(0x7f0000000040)) 1.251825ms ago: executing program 3 (id=420): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010008707fefffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a4303000000f4ff080029003dd10000140003006261746164765f736c6176655f300000e4931e9a1e8b44834d64ea1e992272cde5969ab4128f150691edf52c089964d08c6316fd844926853c0c41cd582a845cd951f27419513e55a3c5ec"], 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendfile(r0, r4, 0x0, 0xaa6) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f0000000380)={0x0, 0xfb, 0x1015, 0x2, 0x5, "daf4eb19c52e27716e0784eb50cf2d2a", "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"}, 0x1015, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x5d1, @none, 0x6, 0x2}, 0xe) 0s ago: executing program 0 (id=421): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x3, 0x35, "01000000000000004b3d7a2c00", 0x4000001, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x17, 0x0, 0xa9}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x6, 0x5, 0x6e19, 0x4, 0xdc, 0x2, 0x8}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x9}, &(0x7f0000000200)=0x8) kernel console output (not intermixed with test programs): erface batadv_slave_1 (retrying later): interface not active [ 127.338232][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.379509][ T5951] hsr_slave_0: entered promiscuous mode [ 127.396260][ T5951] hsr_slave_1: entered promiscuous mode [ 127.405306][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 127.408022][ T5951] Cannot create hsr debugfs directory [ 127.464909][ T5949] team0: Port device team_slave_0 added [ 127.508587][ T5949] team0: Port device team_slave_1 added [ 127.610292][ T5960] hsr_slave_0: entered promiscuous mode [ 127.616447][ T5960] hsr_slave_1: entered promiscuous mode [ 127.622177][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 127.625454][ T5960] Cannot create hsr debugfs directory [ 127.729879][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.734153][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.751292][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.798525][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.802077][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.820567][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.022936][ T5949] hsr_slave_0: entered promiscuous mode [ 128.030512][ T5949] hsr_slave_1: entered promiscuous mode [ 128.053410][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 128.056267][ T5949] Cannot create hsr debugfs directory [ 128.438694][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 128.450796][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.520837][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.569828][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 128.816910][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.907552][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.948514][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.971290][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.059303][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.082562][ T5960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.110330][ T5961] Bluetooth: hci0: command tx timeout [ 129.115163][ T5961] Bluetooth: hci2: command tx timeout [ 129.124744][ T5961] Bluetooth: hci1: command tx timeout [ 129.157763][ T5960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.176104][ T5960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.229367][ T5960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.282951][ T5961] Bluetooth: hci3: command tx timeout [ 129.314782][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.344695][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.348514][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.362184][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.365477][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.556561][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.587648][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.640926][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.690525][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.733732][ T40] audit: type=1400 audit(1770744366.625:91): avc: denied { sys_module } for pid=5950 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.824973][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.860133][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.914446][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.923269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.964183][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.968484][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.985672][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.016629][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.058398][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.062195][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.093506][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.097132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.130770][ T5951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.145304][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.204911][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.273064][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.470543][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.488239][ T5950] veth0_vlan: entered promiscuous mode [ 130.505680][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.517081][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.582434][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.604147][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.630298][ T5950] veth1_vlan: entered promiscuous mode [ 130.697277][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.756165][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.808008][ T5950] veth0_macvtap: entered promiscuous mode [ 130.850776][ T5950] veth1_macvtap: entered promiscuous mode [ 130.976645][ T5951] veth0_vlan: entered promiscuous mode [ 131.005527][ T5951] veth1_vlan: entered promiscuous mode [ 131.051323][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.096020][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.122052][ T5960] veth0_vlan: entered promiscuous mode [ 131.152351][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.176029][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.189045][ T5961] Bluetooth: hci0: command tx timeout [ 131.193031][ T5964] Bluetooth: hci2: command tx timeout [ 131.197661][ T5957] Bluetooth: hci1: command tx timeout [ 131.216110][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.221167][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.235330][ T5960] veth1_vlan: entered promiscuous mode [ 131.260850][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.333897][ T5951] veth0_macvtap: entered promiscuous mode [ 131.356058][ T5957] Bluetooth: hci3: command tx timeout [ 131.396614][ T5951] veth1_macvtap: entered promiscuous mode [ 131.426729][ T5960] veth0_macvtap: entered promiscuous mode [ 131.440685][ T5960] veth1_macvtap: entered promiscuous mode [ 131.488841][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.575644][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.595539][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.632265][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.636919][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.645993][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.721483][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.753109][ T5949] veth0_vlan: entered promiscuous mode [ 131.763698][ T5949] veth1_vlan: entered promiscuous mode [ 131.784358][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.810962][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.818245][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.821025][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.900526][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.904265][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.907803][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.911947][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.927918][ T40] audit: type=1400 audit(1770744368.815:92): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.936671][ T40] audit: type=1400 audit(1770744368.815:93): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.nQPoAD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 131.959240][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.967117][ T40] audit: type=1400 audit(1770744368.815:94): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 132.000687][ T40] audit: type=1400 audit(1770744368.835:95): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.nQPoAD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 132.044039][ T40] audit: type=1400 audit(1770744368.835:96): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.nQPoAD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 132.061793][ T40] audit: type=1400 audit(1770744368.865:97): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.076554][ T40] audit: type=1400 audit(1770744368.885:98): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 132.110538][ T40] audit: type=1400 audit(1770744368.885:99): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="gadgetfs" ino=7991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 132.122627][ T5949] veth0_macvtap: entered promiscuous mode [ 132.143155][ T40] audit: type=1400 audit(1770744368.885:100): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 132.170101][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 132.187917][ T5949] veth1_macvtap: entered promiscuous mode [ 132.319734][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.337633][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.348438][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.386717][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.501397][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.510754][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.615025][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.654305][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.661347][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.673128][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.743676][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.747005][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.747100][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.751641][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.834613][ T531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.837746][ T531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.956058][ T531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.969055][ T6043] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1'. [ 132.973914][ T531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.982357][ T6042] fuse: Unknown parameter '0000000000000000000000500000000000000000003' [ 132.995462][ T6044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 133.268945][ T5957] Bluetooth: hci0: command tx timeout [ 133.284679][ T5957] Bluetooth: hci1: command tx timeout [ 133.287013][ T5957] Bluetooth: hci2: command tx timeout [ 133.365387][ T6037] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 133.439910][ T5957] Bluetooth: hci3: command tx timeout [ 133.499143][ T73] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.565596][ T6037] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 133.569826][ T6037] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 133.573783][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 133.580182][ T6037] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 133.585179][ T6037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 133.590203][ T6037] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 133.640591][ T6037] usb 5-1: string descriptor 0 read error: -22 [ 133.645070][ T6037] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 133.669766][ T73] usb 6-1: Using ep0 maxpacket: 8 [ 133.674409][ T73] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.674974][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.685552][ T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.685581][ T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.685601][ T73] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.685641][ T73] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.685661][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.702199][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 133.743035][ T6037] usb 5-1: config 0 descriptor?? [ 133.759285][ T6059] netlink: 'syz.3.8': attribute type 21 has an invalid length. [ 133.765168][ T6043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.766409][ T6037] hub 5-1:0.0: bad descriptor, ignoring hub [ 133.766446][ T6037] hub 5-1:0.0: probe with driver hub failed with error -5 [ 133.775487][ T6037] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 133.780308][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 134.028994][ T73] usb 6-1: GET_CAPABILITIES returned 0 [ 134.037357][ T73] usbtmc 6-1:16.0: can't read capabilities [ 134.184424][ T46] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.187795][ T46] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.216419][ T46] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.246733][ T1029] usb 6-1: USB disconnect, device number 2 [ 134.313834][ T6033] usb 5-1: USB disconnect, device number 2 [ 134.929010][ T46] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.353064][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 135.353085][ T40] audit: type=1400 audit(1770744372.215:143): avc: denied { read } for pid=6113 comm="syz.1.11" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 135.387678][ T40] audit: type=1400 audit(1770744372.215:144): avc: denied { open } for pid=6113 comm="syz.1.11" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 135.403632][ T40] audit: type=1400 audit(1770744372.215:145): avc: denied { ioctl } for pid=6113 comm="syz.1.11" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 135.491093][ T40] audit: type=1400 audit(1770744372.365:146): avc: denied { ioctl } for pid=6119 comm="syz.1.13" path="socket:[9102]" dev="sockfs" ino=9102 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.530356][ T40] audit: type=1400 audit(1770744372.385:147): avc: denied { read write } for pid=6119 comm="syz.1.13" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.582485][ T40] audit: type=1400 audit(1770744372.385:148): avc: denied { open } for pid=6119 comm="syz.1.13" path="/dev/uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.618190][ T6120] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.630354][ T40] audit: type=1400 audit(1770744372.385:149): avc: denied { ioctl } for pid=6119 comm="syz.1.13" path="/dev/uinput" dev="devtmpfs" ino=942 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.658457][ T40] audit: type=1400 audit(1770744372.435:150): avc: denied { ioctl } for pid=6121 comm="syz.3.14" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9601 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.685633][ T40] audit: type=1400 audit(1770744372.495:151): avc: denied { bind } for pid=6126 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.712633][ T40] audit: type=1400 audit(1770744372.505:152): avc: denied { getopt } for pid=6126 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.029456][ T6137] Zero length message leads to an empty skb [ 136.137362][ T6120] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.443575][ T6120] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.628117][ T6120] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.661864][ T6161] netlink: 184 bytes leftover after parsing attributes in process `syz.2.26'. [ 136.848480][ T1256] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.904362][ T1256] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.981572][ T6089] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.986910][ T6089] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.052652][ T1029] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 137.233734][ T6176] fuse: Bad value for 'fd' [ 137.300548][ T6179] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 137.321811][ T6179] TCP: TCP_TX_DELAY enabled [ 137.353744][ T1029] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 137.356896][ T1029] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 137.363176][ T1029] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 137.385860][ T1029] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 137.390773][ T1029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 137.395640][ T1029] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 137.419383][ T1029] usb 7-1: string descriptor 0 read error: -22 [ 137.433892][ T1029] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 137.458438][ T1029] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.480379][ T1029] usb 7-1: config 0 descriptor?? [ 137.486013][ T6161] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.501427][ T1029] hub 7-1:0.0: bad descriptor, ignoring hub [ 137.507386][ T1029] hub 7-1:0.0: probe with driver hub failed with error -5 [ 137.549379][ T1029] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 137.579089][ C3] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 137.948103][ C3] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 138.000035][ T6033] usb 7-1: USB disconnect, device number 2 [ 138.191676][ T6200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.306748][ T6205] ipt_REJECT: ECHOREPLY no longer supported. [ 138.579214][ T6217] ======================================================= [ 138.579214][ T6217] WARNING: The mand mount option has been deprecated and [ 138.579214][ T6217] and is ignored by this kernel. Remove the mand [ 138.579214][ T6217] option from the mount to silence this warning. [ 138.579214][ T6217] ======================================================= [ 138.773545][ T6222] FAULT_INJECTION: forcing a failure. [ 138.773545][ T6222] name failslab, interval 1, probability 0, space 0, times 1 [ 138.780234][ T6222] CPU: 0 UID: 0 PID: 6222 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 138.780260][ T6222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.780270][ T6222] Call Trace: [ 138.780276][ T6222] [ 138.780282][ T6222] dump_stack_lvl+0x100/0x190 [ 138.780312][ T6222] should_fail_ex.cold+0x5/0xa [ 138.780333][ T6222] should_failslab+0xc2/0x120 [ 138.780356][ T6222] ? tomoyo_realpath_from_path+0xb6/0x690 [ 138.780381][ T6222] __kmalloc_noprof+0xf6/0x9c0 [ 138.780405][ T6222] ? tomoyo_realpath_from_path+0xb6/0x690 [ 138.780428][ T6222] tomoyo_realpath_from_path+0xb6/0x690 [ 138.780458][ T6222] tomoyo_path_number_perm+0x23c/0x580 [ 138.780479][ T6222] ? tomoyo_path_number_perm+0x22e/0x580 [ 138.780502][ T6222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.780545][ T6222] ? find_held_lock+0x2b/0x80 [ 138.780566][ T6222] ? hook_file_ioctl_common+0x146/0x410 [ 138.780582][ T6222] ? __fget_files+0x215/0x3d0 [ 138.780605][ T6222] ? __fget_files+0x21f/0x3d0 [ 138.780628][ T6222] security_file_ioctl+0xd3/0x230 [ 138.780652][ T6222] __x64_sys_ioctl+0xb7/0x210 [ 138.780671][ T6222] do_syscall_64+0xc9/0xf80 [ 138.780689][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.780705][ T6222] RIP: 0033:0x7fca5f79bf79 [ 138.780719][ T6222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.780742][ T6222] RSP: 002b:00007fca606cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.780759][ T6222] RAX: ffffffffffffffda RBX: 00007fca5fa15fa0 RCX: 00007fca5f79bf79 [ 138.780769][ T6222] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 138.780779][ T6222] RBP: 00007fca606cf090 R08: 0000000000000000 R09: 0000000000000000 [ 138.780789][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.780798][ T6222] R13: 00007fca5fa16038 R14: 00007fca5fa15fa0 R15: 00007ffe5e3aee28 [ 138.780822][ T6222] [ 138.780829][ T6222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.781837][ T6223] cgroup2: Unknown parameter 'mts' [ 139.021508][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 139.040417][ T6233] netlink: 'syz.2.50': attribute type 21 has an invalid length. [ 139.184176][ T39] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 139.241674][ T6240] dummy0: entered allmulticast mode [ 139.246540][ T6240] nfs: Unknown parameter '' [ 139.382295][ T39] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.386060][ T39] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.410135][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.414770][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.541711][ T6251] FAULT_INJECTION: forcing a failure. [ 139.541711][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 139.554925][ T6251] CPU: 3 UID: 0 PID: 6251 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT(full) [ 139.554949][ T6251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.554959][ T6251] Call Trace: [ 139.554964][ T6251] [ 139.554971][ T6251] dump_stack_lvl+0x100/0x190 [ 139.555000][ T6251] should_fail_ex.cold+0x5/0xa [ 139.555020][ T6251] should_failslab+0xc2/0x120 [ 139.555049][ T6251] ? tomoyo_encode2+0xfb/0x3c0 [ 139.555071][ T6251] __kmalloc_noprof+0xf6/0x9c0 [ 139.555094][ T6251] ? tomoyo_encode2+0xfb/0x3c0 [ 139.555116][ T6251] tomoyo_encode2+0xfb/0x3c0 [ 139.555143][ T6251] tomoyo_encode+0x29/0x50 [ 139.555166][ T6251] tomoyo_realpath_from_path+0x18c/0x690 [ 139.555195][ T6251] tomoyo_path_number_perm+0x23c/0x580 [ 139.555215][ T6251] ? tomoyo_path_number_perm+0x22e/0x580 [ 139.555237][ T6251] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.555279][ T6251] ? find_held_lock+0x2b/0x80 [ 139.555302][ T6251] ? hook_file_ioctl_common+0x146/0x410 [ 139.555317][ T6251] ? __fget_files+0x215/0x3d0 [ 139.555342][ T6251] ? __fget_files+0x21f/0x3d0 [ 139.555365][ T6251] security_file_ioctl+0xd3/0x230 [ 139.555391][ T6251] __x64_sys_ioctl+0xb7/0x210 [ 139.555410][ T6251] do_syscall_64+0xc9/0xf80 [ 139.555428][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.555445][ T6251] RIP: 0033:0x7f502499bf79 [ 139.555459][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.555473][ T6251] RSP: 002b:00007f50257cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.555489][ T6251] RAX: ffffffffffffffda RBX: 00007f5024c15fa0 RCX: 00007f502499bf79 [ 139.555500][ T6251] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 139.555509][ T6251] RBP: 00007f50257cd090 R08: 0000000000000000 R09: 0000000000000000 [ 139.555517][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.555526][ T6251] R13: 00007f5024c16038 R14: 00007f5024c15fa0 R15: 00007ffe4f2ec1a8 [ 139.555548][ T6251] [ 139.555565][ T6251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.629717][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.748974][ T39] usb 5-1: usb_control_msg returned -71 [ 139.812706][ T6253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.824691][ T39] usbtmc 5-1:16.0: can't read capabilities [ 139.848055][ T39] usb 5-1: USB disconnect, device number 3 [ 139.938998][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 139.944933][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.949675][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.976222][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.991598][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.033585][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.066598][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.322366][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 140.343815][ T9] usbtmc 6-1:16.0: can't read capabilities [ 140.393534][ T6263] trusted_key: encrypted_key: insufficient parameters specified [ 140.399911][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 140.399931][ T40] audit: type=1400 audit(1770744377.265:190): avc: denied { create } for pid=6262 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.489288][ T40] audit: type=1400 audit(1770744377.265:191): avc: denied { ioctl } for pid=6262 comm="syz.2.62" path="socket:[11327]" dev="sockfs" ino=11327 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.534016][ T6037] usb 6-1: USB disconnect, device number 3 [ 140.600792][ T40] audit: type=1400 audit(1770744377.375:192): avc: denied { listen } for pid=6264 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.944201][ T6052] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.041997][ T40] audit: type=1400 audit(1770744377.925:193): avc: denied { unlink } for pid=6278 comm="syz.3.71" name="#1" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.050868][ T40] audit: type=1400 audit(1770744377.925:194): avc: denied { mount } for pid=6278 comm="syz.3.71" name="/" dev="overlay" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 141.165901][ T6052] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 141.183388][ T6052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.209008][ T40] audit: type=1400 audit(1770744378.085:195): avc: denied { ioctl } for pid=6283 comm="syz.1.72" path="socket:[10491]" dev="sockfs" ino=10491 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.226524][ T6052] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 141.228940][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 141.242618][ T40] audit: type=1400 audit(1770744378.085:196): avc: denied { setopt } for pid=6283 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.326802][ T6052] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 141.353644][ T6052] usb 5-1: Manufacturer: syz [ 141.377431][ T6052] usb 5-1: config 0 descriptor?? [ 141.439896][ T40] audit: type=1400 audit(1770744378.305:197): avc: denied { create } for pid=6286 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.459641][ T6287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.73'. [ 141.470045][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.482456][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.491769][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.497725][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.515532][ T6052] rc_core: IR keymap rc-hauppauge not found [ 141.524225][ T40] audit: type=1400 audit(1770744378.345:198): avc: denied { bind } for pid=6286 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.539133][ T6052] Registered IR keymap rc-empty [ 141.565693][ T6052] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 141.572505][ T40] audit: type=1400 audit(1770744378.345:199): avc: denied { setopt } for pid=6286 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.602281][ T6052] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 141.644036][ T6052] usb 5-1: USB disconnect, device number 4 [ 141.740583][ T9] usb 7-1: usb_control_msg returned -71 [ 141.743864][ T9] usbtmc 7-1:16.0: can't read capabilities [ 141.776737][ T9] usb 7-1: USB disconnect, device number 3 [ 141.983678][ T6305] SELinux: syz.3.79 (6305) set checkreqprot to 1. This is no longer supported. [ 142.352418][ T6033] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 142.547962][ T6033] usb 8-1: Using ep0 maxpacket: 8 [ 142.569614][ T6033] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.574899][ T6033] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.590936][ T6033] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.613061][ T6033] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.618539][ T6033] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.636233][ T6033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.833855][ T6322] netlink: 696 bytes leftover after parsing attributes in process `syz.2.84'. [ 142.884388][ T6330] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 142.895503][ T6033] usb 8-1: GET_CAPABILITIES returned 0 [ 142.902906][ T6033] usbtmc 8-1:16.0: can't read capabilities [ 142.924699][ T6332] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 142.930470][ T6332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.88'. [ 142.979052][ T6335] process 'syz.1.88' launched './file0' with NULL argv: empty string added [ 143.116313][ T6033] usb 8-1: USB disconnect, device number 2 [ 143.154957][ T6339] fuse: Bad value for 'fd' [ 143.671721][ T6329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.690172][ T6329] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.714902][ T6329] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.738838][ T6329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.741877][ T6329] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.748257][ T6329] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.762177][ T6329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.765659][ T6329] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.810384][ T6329] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.868993][ T6329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.874734][ T6329] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.898156][ T6329] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.993405][ T6355] netlink: 'syz.2.94': attribute type 61 has an invalid length. [ 144.224754][ T73] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 144.240318][ T834] IPVS: starting estimator thread 0... [ 144.348895][ T6363] IPVS: using max 31 ests per chain, 74400 per kthread [ 144.400451][ T73] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.414975][ T73] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.468687][ T73] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.572899][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.580295][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 144.756381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.839247][ T73] usb 6-1: usb_control_msg returned -71 [ 144.841480][ T73] usbtmc 6-1:16.0: can't read capabilities [ 144.850701][ T73] usb 6-1: USB disconnect, device number 4 [ 144.981522][ T6374] SELinux: failed to load policy [ 145.039432][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.590117][ T5619] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 145.608968][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 145.608983][ T40] audit: type=1400 audit(1770744382.495:235): avc: denied { sqpoll } for pid=6388 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 145.623792][ T40] audit: type=1400 audit(1770744382.495:236): avc: denied { create } for pid=6388 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.662229][ T6391] netlink: 76 bytes leftover after parsing attributes in process `syz.3.103'. [ 145.670874][ T40] audit: type=1400 audit(1770744382.555:237): avc: denied { write } for pid=6388 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.697412][ T40] audit: type=1400 audit(1770744382.555:238): avc: denied { nlmsg_write } for pid=6388 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.761146][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.784747][ T5619] usb 7-1: Using ep0 maxpacket: 8 [ 145.817884][ T5619] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.845072][ T5619] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.864053][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.920018][ T5619] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.933437][ T5619] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.939111][ T5619] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.944092][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.963404][ T5619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.158884][ T834] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 146.243123][ T5619] usb 7-1: GET_CAPABILITIES returned 0 [ 146.249193][ T5619] usbtmc 7-1:16.0: can't read capabilities [ 146.342011][ T834] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.356245][ T834] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.365780][ T834] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.407991][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.450020][ T5619] usb 7-1: USB disconnect, device number 4 [ 146.736847][ T834] usb 8-1: usb_control_msg returned -71 [ 146.740557][ T6033] IPVS: starting estimator thread 0... [ 146.760448][ T834] usbtmc 8-1:16.0: can't read capabilities [ 146.775179][ T834] usb 8-1: USB disconnect, device number 3 [ 146.864930][ T6406] syzkaller0: entered promiscuous mode [ 146.867479][ T6406] syzkaller0: entered allmulticast mode [ 146.908494][ T40] audit: type=1400 audit(1770744383.795:239): avc: denied { write } for pid=6401 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.950580][ T6405] IPVS: using max 30 ests per chain, 72000 per kthread [ 147.055067][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.108'. [ 147.078867][ T6410] openvswitch: netlink: Flow key attr not present in new flow. [ 147.116932][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.159819][ T6414] bond1: Unable to set down delay as MII monitoring is disabled [ 147.170820][ T6414] bond1 (unregistering): Released all slaves [ 147.568827][ T5619] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 147.743157][ T5619] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.748920][ T5619] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.768679][ T5619] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.780340][ T5619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.840561][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.909793][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.988890][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.009192][ T40] audit: type=1400 audit(1770744384.885:240): avc: denied { create } for pid=6437 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.034601][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 148.077281][ T5619] usb 5-1: usb_control_msg returned -32 [ 148.080835][ T5619] usbtmc 5-1:16.0: can't read capabilities [ 148.087652][ T40] audit: type=1400 audit(1770744384.915:241): avc: denied { connect } for pid=6437 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.130484][ T5619] usb 5-1: USB disconnect, device number 5 [ 148.152988][ T40] audit: type=1400 audit(1770744384.945:242): avc: denied { read } for pid=6437 comm="syz.1.117" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.163578][ T6438] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 148.181993][ T40] audit: type=1400 audit(1770744384.945:243): avc: denied { open } for pid=6437 comm="syz.1.117" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.201015][ T40] audit: type=1400 audit(1770744384.945:244): avc: denied { ioctl } for pid=6437 comm="syz.1.117" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.517693][ T6441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6441 comm=syz.1.119 [ 148.602936][ T6445] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 148.812172][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.123'. [ 149.208843][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.338843][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'. [ 149.342841][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'. [ 149.525022][ T6494] syzkaller0: entered promiscuous mode [ 149.528373][ T6494] syzkaller0: entered allmulticast mode [ 149.666717][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.671571][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.909557][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.999762][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.093075][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.404207][ T6512] ALSA: seq fatal error: cannot create timer (-19) [ 150.447058][ T6510] xt_hashlimit: invalid interval [ 150.473512][ T6510] kAFS: unable to lookup cell '(,cL' [ 150.592962][ T6510] SELinux: policydb magic number 0x72756f73 does not match expected magic number 0xf97cff8c [ 150.602737][ T6510] SELinux: failed to load policy [ 150.609211][ T6510] kAFS: unable to lookup cell '\,' [ 150.613211][ T6517] FAULT_INJECTION: forcing a failure. [ 150.613211][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 150.640857][ T6517] CPU: 2 UID: 0 PID: 6517 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT(full) [ 150.640879][ T6517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.640888][ T6517] Call Trace: [ 150.640894][ T6517] [ 150.640901][ T6517] dump_stack_lvl+0x100/0x190 [ 150.640930][ T6517] should_fail_ex.cold+0x5/0xa [ 150.640950][ T6517] should_failslab+0xc2/0x120 [ 150.640972][ T6517] ? tomoyo_realpath_from_path+0xb6/0x690 [ 150.640996][ T6517] __kmalloc_noprof+0xf6/0x9c0 [ 150.641021][ T6517] ? tomoyo_realpath_from_path+0xb6/0x690 [ 150.641046][ T6517] tomoyo_realpath_from_path+0xb6/0x690 [ 150.641075][ T6517] tomoyo_path_number_perm+0x23c/0x580 [ 150.641097][ T6517] ? tomoyo_path_number_perm+0x22e/0x580 [ 150.641121][ T6517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.641164][ T6517] ? find_held_lock+0x2b/0x80 [ 150.641189][ T6517] ? hook_file_ioctl_common+0x146/0x410 [ 150.641206][ T6517] ? __fget_files+0x215/0x3d0 [ 150.641230][ T6517] ? __fget_files+0x21f/0x3d0 [ 150.641255][ T6517] security_file_ioctl+0xd3/0x230 [ 150.641281][ T6517] __x64_sys_ioctl+0xb7/0x210 [ 150.641302][ T6517] do_syscall_64+0xc9/0xf80 [ 150.641321][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.641339][ T6517] RIP: 0033:0x7fe865b9bf79 [ 150.641354][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.641369][ T6517] RSP: 002b:00007fe8669dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.641386][ T6517] RAX: ffffffffffffffda RBX: 00007fe865e15fa0 RCX: 00007fe865b9bf79 [ 150.641397][ T6517] RDX: 0000200000000040 RSI: 000000004014563c RDI: 0000000000000003 [ 150.641407][ T6517] RBP: 00007fe8669dd090 R08: 0000000000000000 R09: 0000000000000000 [ 150.641417][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.641426][ T6517] R13: 00007fe865e16038 R14: 00007fe865e15fa0 R15: 00007ffe624df4a8 [ 150.641449][ T6517] [ 150.641457][ T6517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.967484][ T6526] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 150.994820][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 150.994836][ T40] audit: type=1400 audit(1770744387.875:264): avc: denied { create } for pid=6519 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.032550][ T40] audit: type=1400 audit(1770744387.915:265): avc: denied { write } for pid=6519 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.041351][ T6531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6531 comm=syz.3.141 [ 151.054461][ T6526] romfs: unable to set blocksize [ 151.054461][ T6526] [ 151.055436][ T40] audit: type=1400 audit(1770744387.935:266): avc: denied { read } for pid=6525 comm="syz.3.141" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.067925][ T40] audit: type=1400 audit(1770744387.935:267): avc: denied { open } for pid=6525 comm="syz.3.141" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.077651][ T40] audit: type=1400 audit(1770744387.945:268): avc: denied { read write } for pid=6525 comm="syz.3.141" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 151.099337][ T40] audit: type=1400 audit(1770744387.945:269): avc: denied { open } for pid=6525 comm="syz.3.141" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 151.140791][ T40] audit: type=1400 audit(1770744388.025:270): avc: denied { ioctl } for pid=6525 comm="syz.3.141" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.438569][ T40] audit: type=1400 audit(1770744388.315:271): avc: denied { mounton } for pid=6543 comm="syz.3.144" path="/41/file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.758895][ T5619] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 151.970596][ T5619] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 151.975205][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.053522][ T5619] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 152.062511][ T5619] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 152.071057][ T5619] usb 6-1: Manufacturer: syz [ 152.080842][ T6561] FAULT_INJECTION: forcing a failure. [ 152.080842][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 152.093507][ T5619] usb 6-1: config 0 descriptor?? [ 152.119115][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.0.149 Not tainted syzkaller #0 PREEMPT(full) [ 152.119142][ T6561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.119173][ T6561] Call Trace: [ 152.119204][ T6561] [ 152.119213][ T6561] dump_stack_lvl+0x100/0x190 [ 152.119244][ T6561] should_fail_ex.cold+0x5/0xa [ 152.119265][ T6561] should_failslab+0xc2/0x120 [ 152.119289][ T6561] ? tomoyo_encode2+0xfb/0x3c0 [ 152.119314][ T6561] __kmalloc_noprof+0xf6/0x9c0 [ 152.119340][ T6561] ? tomoyo_encode2+0xfb/0x3c0 [ 152.119365][ T6561] tomoyo_encode2+0xfb/0x3c0 [ 152.119396][ T6561] tomoyo_encode+0x29/0x50 [ 152.119421][ T6561] tomoyo_realpath_from_path+0x18c/0x690 [ 152.119455][ T6561] tomoyo_path_number_perm+0x23c/0x580 [ 152.119478][ T6561] ? tomoyo_path_number_perm+0x22e/0x580 [ 152.119504][ T6561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.119555][ T6561] ? find_held_lock+0x2b/0x80 [ 152.119581][ T6561] ? hook_file_ioctl_common+0x146/0x410 [ 152.119635][ T6561] ? __fget_files+0x215/0x3d0 [ 152.119664][ T6561] ? __fget_files+0x21f/0x3d0 [ 152.119690][ T6561] security_file_ioctl+0xd3/0x230 [ 152.119718][ T6561] __x64_sys_ioctl+0xb7/0x210 [ 152.119741][ T6561] do_syscall_64+0xc9/0xf80 [ 152.119762][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.119781][ T6561] RIP: 0033:0x7fca5f79bf79 [ 152.119796][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.119813][ T6561] RSP: 002b:00007fca606cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.119839][ T6561] RAX: ffffffffffffffda RBX: 00007fca5fa15fa0 RCX: 00007fca5f79bf79 [ 152.119850][ T6561] RDX: 0000200000000040 RSI: 000000004014563c RDI: 0000000000000003 [ 152.119861][ T6561] RBP: 00007fca606cf090 R08: 0000000000000000 R09: 0000000000000000 [ 152.119872][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.119883][ T6561] R13: 00007fca5fa16038 R14: 00007fca5fa15fa0 R15: 00007ffe5e3aee28 [ 152.119909][ T6561] [ 152.289040][ T6561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.319312][ T5619] rc_core: IR keymap rc-hauppauge not found [ 152.387299][ T5619] Registered IR keymap rc-empty [ 152.402614][ T5619] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 152.430068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 152.443739][ T5619] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 152.644710][ T40] audit: type=1400 audit(1770744389.525:272): avc: denied { getopt } for pid=6573 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.727440][ T40] audit: type=1400 audit(1770744389.595:273): avc: denied { mounton } for pid=6573 comm="syz.3.151" path="/proc/136/task" dev="proc" ino=12671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 152.749028][ T6577] netlink: 164 bytes leftover after parsing attributes in process `syz.2.153'. [ 152.885543][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 152.894561][ T6582] FAT-fs (loop0): unable to read boot sector [ 152.913449][ T6581] delete_channel: no stack [ 153.219808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.249439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.255321][ T6590] fuse: Bad value for 'fd' [ 153.521142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 153.750255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 154.181843][ T6620] fuse: Bad value for 'fd' [ 154.225642][ T6070] usb 6-1: USB disconnect, device number 5 [ 154.397305][ T6633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.168'. [ 154.443436][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 154.796411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.948472][ T6651] FAULT_INJECTION: forcing a failure. [ 154.948472][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 154.983398][ T6651] CPU: 2 UID: 0 PID: 6651 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 154.983426][ T6651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.983437][ T6651] Call Trace: [ 154.983443][ T6651] [ 154.983451][ T6651] dump_stack_lvl+0x100/0x190 [ 154.983484][ T6651] should_fail_ex.cold+0x5/0xa [ 154.983507][ T6651] should_failslab+0xc2/0x120 [ 154.983532][ T6651] ? tomoyo_realpath_from_path+0xb6/0x690 [ 154.996116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.983561][ T6651] __kmalloc_noprof+0xf6/0x9c0 [ 154.999701][ T6651] ? tomoyo_realpath_from_path+0xb6/0x690 [ 154.999726][ T6651] tomoyo_realpath_from_path+0xb6/0x690 [ 154.999756][ T6651] tomoyo_path_number_perm+0x23c/0x580 [ 154.999777][ T6651] ? tomoyo_path_number_perm+0x22e/0x580 [ 154.999799][ T6651] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.999842][ T6651] ? find_held_lock+0x2b/0x80 [ 154.999865][ T6651] ? hook_file_ioctl_common+0x146/0x410 [ 154.999881][ T6651] ? __fget_files+0x215/0x3d0 [ 154.999905][ T6651] ? __fget_files+0x21f/0x3d0 [ 154.999929][ T6651] security_file_ioctl+0xd3/0x230 [ 154.999954][ T6651] __x64_sys_ioctl+0xb7/0x210 [ 154.999972][ T6651] do_syscall_64+0xc9/0xf80 [ 154.999991][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.000008][ T6651] RIP: 0033:0x7f58e799bf79 [ 155.000023][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.000037][ T6651] RSP: 002b:00007f58e88b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.000053][ T6651] RAX: ffffffffffffffda RBX: 00007f58e7c15fa0 RCX: 00007f58e799bf79 [ 155.000063][ T6651] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 155.000072][ T6651] RBP: 00007f58e88b7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.000081][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.000091][ T6651] R13: 00007f58e7c16038 R14: 00007f58e7c15fa0 R15: 00007fff01206da8 [ 155.000113][ T6651] [ 155.004076][ T6651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.091971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.139121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 155.729637][ T1029] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 155.913926][ T1029] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 155.946313][ T1029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.050540][ T1029] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 156.094658][ T1029] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 156.111912][ T1029] usb 6-1: Manufacturer: syz [ 156.116588][ T1029] usb 6-1: config 0 descriptor?? [ 156.232927][ T1029] rc_core: IR keymap rc-hauppauge not found [ 156.235285][ T1029] Registered IR keymap rc-empty [ 156.311663][ T1029] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 156.344333][ T1029] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input11 [ 156.367954][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 156.367974][ T40] audit: type=1400 audit(1770744393.215:288): avc: denied { append } for pid=6674 comm="syz.0.182" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.079387][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.140948][ T40] audit: type=1400 audit(1770744394.005:289): avc: denied { read } for pid=6684 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.160616][ T6685] trusted_key: syz.3.186 sent an empty control message without MSG_MORE. [ 157.270172][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 157.275103][ T39] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.281187][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 157.353810][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 157.483740][ T40] audit: type=1400 audit(1770744394.365:290): avc: denied { block_suspend } for pid=6687 comm="syz.3.187" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.531727][ T39] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 157.539282][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.549863][ T39] usb 5-1: Product: syz [ 157.571094][ T39] usb 5-1: Manufacturer: syz [ 157.574011][ T39] usb 5-1: SerialNumber: syz [ 157.599609][ T39] usb 5-1: config 0 descriptor?? [ 157.712554][ T39] rc_core: IR keymap rc-streamzap not found [ 157.715370][ T39] Registered IR keymap rc-empty [ 157.720068][ T39] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc1 [ 157.749776][ T39] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc1/input12 [ 158.172933][ T6052] usb 6-1: USB disconnect, device number 6 [ 158.535478][ T40] audit: type=1400 audit(1770744395.425:291): avc: denied { ioctl } for pid=6706 comm="syz.3.191" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.613139][ T6708] sp0: Synchronizing with TNC [ 158.713236][ T6706] [U] [ 158.726941][ T6052] usb 5-1: USB disconnect, device number 6 [ 158.869953][ T40] audit: type=1400 audit(1770744395.755:292): avc: denied { create } for pid=6710 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.976052][ T40] audit: type=1400 audit(1770744395.855:293): avc: denied { bind } for pid=6710 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.015457][ T6712] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 159.021686][ T40] audit: type=1400 audit(1770744395.895:294): avc: denied { write } for pid=6710 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.054513][ T6712] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 159.068316][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.192'. [ 159.114801][ T6714] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 159.116932][ T40] audit: type=1400 audit(1770744395.995:295): avc: denied { write } for pid=6713 comm="syz.3.193" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.151425][ T6714] CIFS mount error: No usable UNC path provided in device string! [ 159.151425][ T6714] [ 159.209015][ T6714] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.239958][ T6714] : renamed from lo (while UP) [ 159.387935][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 159.841625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.887176][ T40] audit: type=1400 audit(1770744396.765:296): avc: denied { create } for pid=6730 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.921767][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.200'. [ 160.079108][ T6740] hfsplus: unable to find HFS+ superblock [ 160.196373][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.200'. [ 160.343322][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 160.355699][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 160.411756][ T6747] netlink: 'syz.0.204': attribute type 21 has an invalid length. [ 160.417198][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 160.432144][ T6746] netlink: 'syz.0.204': attribute type 21 has an invalid length. [ 160.448540][ T6464] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.457636][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 160.462634][ T6464] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.465740][ T6747] netlink: 'syz.0.204': attribute type 21 has an invalid length. [ 160.467215][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 160.480214][ T6464] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.484196][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 160.504194][ T6746] netlink: 'syz.0.204': attribute type 21 has an invalid length. [ 160.515652][ T6464] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.575040][ T40] audit: type=1400 audit(1770744397.435:297): avc: denied { setopt } for pid=6755 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.614869][ T5954] udevd[5954]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 160.641489][ T6758] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 160.649779][ T6758] netlink: 'syz.1.207': attribute type 4 has an invalid length. [ 160.748698][ T5954] udevd[5954]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.320510][ T6786] 8021q: VLANs not supported on ip6_vti0 [ 161.586963][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 161.586980][ T40] audit: type=1400 audit(1770744398.465:304): avc: denied { write } for pid=6781 comm="syz.0.215" path="socket:[11098]" dev="sockfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.592121][ T6786] loop5: detected capacity change from 0 to 7 [ 161.639897][ C2] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 161.646272][ C2] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 161.748244][ T73] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 161.863735][ T6799] FAULT_INJECTION: forcing a failure. [ 161.863735][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.892928][ T6799] CPU: 2 UID: 0 PID: 6799 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(full) [ 161.893114][ T6799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.893126][ T6799] Call Trace: [ 161.893131][ T6799] [ 161.893138][ T6799] dump_stack_lvl+0x100/0x190 [ 161.893166][ T6799] should_fail_ex.cold+0x5/0xa [ 161.893186][ T6799] _copy_from_user+0x2e/0xd0 [ 161.893204][ T6799] kstrtouint_from_user+0xd6/0x1d0 [ 161.893225][ T6799] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 161.893272][ T6799] ? __lock_acquire+0x4a5/0x2630 [ 161.893298][ T6799] ? lock_acquire+0x17c/0x330 [ 161.893319][ T6799] proc_fail_nth_write+0x83/0x220 [ 161.893343][ T6799] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.893375][ T6799] vfs_write+0x2aa/0x1070 [ 161.893396][ T6799] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.893424][ T6799] ? __pfx_vfs_write+0x10/0x10 [ 161.893441][ T6799] ? find_held_lock+0x2b/0x80 [ 161.893467][ T6799] ? __fget_files+0x215/0x3d0 [ 161.893494][ T6799] ? __fget_files+0x21f/0x3d0 [ 161.893523][ T6799] ksys_write+0x12a/0x250 [ 161.893542][ T6799] ? __pfx_ksys_write+0x10/0x10 [ 161.893560][ T6799] ? v4l2_ioctl+0x1c5/0x250 [ 161.893576][ T6799] ? fput+0x79/0x100 [ 161.893603][ T6799] do_syscall_64+0xc9/0xf80 [ 161.893624][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.893643][ T6799] RIP: 0033:0x7fca5f75c84e [ 161.893657][ T6799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.893673][ T6799] RSP: 002b:00007fca606cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.893689][ T6799] RAX: ffffffffffffffda RBX: 00007fca606cf6c0 RCX: 00007fca5f75c84e [ 161.893700][ T6799] RDX: 0000000000000001 RSI: 00007fca606cf0a0 RDI: 0000000000000004 [ 161.893710][ T6799] RBP: 00007fca606cf090 R08: 0000000000000000 R09: 0000000000000000 [ 161.893720][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.893729][ T6799] R13: 00007fca5fa16038 R14: 00007fca5fa15fa0 R15: 00007ffe5e3aee28 [ 161.893754][ T6799] [ 162.139653][ T73] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.147353][ T73] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 162.157951][ T73] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.165421][ T73] usb 8-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 162.171204][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.179150][ T73] usb 8-1: config 0 descriptor?? [ 162.184738][ T6790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.187603][ T6790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.279853][ T40] audit: type=1400 audit(1770744399.145:305): avc: denied { read } for pid=6800 comm="syz.0.222" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.339036][ T40] audit: type=1400 audit(1770744399.145:306): avc: denied { open } for pid=6800 comm="syz.0.222" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.391260][ T40] audit: type=1400 audit(1770744399.145:307): avc: denied { ioctl } for pid=6800 comm="syz.0.222" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.407043][ T6803] syz.0.223 uses obsolete (PF_INET,SOCK_PACKET) [ 162.448873][ T73] usbhid 8-1:0.0: can't add hid device: -71 [ 162.460392][ T73] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 162.468144][ T73] usb 8-1: USB disconnect, device number 4 [ 162.469041][ T40] audit: type=1400 audit(1770744399.345:308): avc: denied { ioctl } for pid=6802 comm="syz.0.223" path="socket:[11111]" dev="sockfs" ino=11111 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.673172][ T40] audit: type=1400 audit(1770744399.545:309): avc: denied { allowed } for pid=6807 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.722837][ T6808] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 162.741002][ T40] audit: type=1400 audit(1770744399.625:310): avc: denied { setopt } for pid=6807 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.840860][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.031193][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 163.038904][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 163.063953][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.071215][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.074788][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 163.075021][ T6813] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 163.080481][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 163.080505][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.113271][ T40] audit: type=1400 audit(1770744399.995:311): avc: denied { relabelto } for pid=6812 comm="syz.3.227" name="cpu.stat" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 163.118685][ T9] usb 5-1: config 0 descriptor?? [ 163.133711][ T40] audit: type=1400 audit(1770744399.995:312): avc: denied { associate } for pid=6812 comm="syz.3.227" name="cpu.stat" dev="tmpfs" ino=402 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 163.153652][ T40] audit: type=1400 audit(1770744400.025:313): avc: denied { append } for pid=6812 comm="syz.3.227" path="/70/cpu.stat" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 163.529198][ T6052] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 163.654241][ T6821] sp0: Synchronizing with TNC [ 163.659270][ T6052] usb 8-1: device descriptor read/64, error -71 [ 163.792401][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 163.798392][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 163.841521][ T9] usb 5-1: USB disconnect, device number 7 [ 163.971087][ T6052] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 164.080492][ T6823] bond1 (unregistering): Released all slaves [ 164.143258][ T6052] usb 8-1: device descriptor read/64, error -71 [ 164.193274][ T6826] __nla_validate_parse: 8 callbacks suppressed [ 164.193299][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.232'. [ 164.218018][ T6825] netlink: 72 bytes leftover after parsing attributes in process `syz.1.232'. [ 164.221259][ T6827] netlink: 40 bytes leftover after parsing attributes in process `syz.1.232'. [ 164.250603][ T6052] usb usb8-port1: attempt power cycle [ 164.363443][ T6832] batadv_slave_1: entered promiscuous mode [ 164.437745][ T6830] batadv_slave_1: left promiscuous mode [ 164.508081][ T6836] overlayfs: failed to get inode (-116) [ 164.535798][ T6836] overlayfs: failed to get inode (-116) [ 164.540509][ T6836] overlayfs: failed to get inode (-116) [ 164.543158][ T6836] overlayfs: failed to get inode (-116) [ 164.621648][ T6052] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 164.651653][ T6052] usb 8-1: device descriptor read/8, error -71 [ 164.890028][ T6052] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 164.928170][ T6052] usb 8-1: device descriptor read/8, error -71 [ 165.049599][ T6052] usb usb8-port1: unable to enumerate USB device [ 165.115891][ T1029] IPVS: starting estimator thread 0... [ 165.259976][ T6849] IPVS: using max 28 ests per chain, 67200 per kthread [ 165.340384][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 165.376160][ T6855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.245'. [ 165.393660][ T6855] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 165.451835][ T6857] evm: overlay not supported [ 165.492379][ T6857] syz.1.246 (6857) used obsolete PPPIOCDETACH ioctl [ 165.746042][ T6866] loop5: detected capacity change from 0 to 7 [ 165.780717][ T6870] loop7: detected capacity change from 0 to 7 [ 165.790917][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.790972][ T6867] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.828901][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.857692][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.858325][ T6301] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.861862][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.867979][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.881160][ T6301] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.886265][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.917088][ T6301] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.917119][ T6301] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.917162][ T6301] Buffer I/O error on dev loop5, logical block 0, async page read [ 165.917209][ T6301] ldm_validate_partition_table(): Disk read failed. [ 165.917263][ T6301] Dev loop5: unable to read RDB block 0 [ 165.917310][ T6301] loop5: unable to read partition table [ 165.917486][ T6301] loop5: partition table beyond EOD, truncated [ 165.923085][ T6866] ldm_validate_partition_table(): Disk read failed. [ 165.923148][ T6866] Dev loop5: unable to read RDB block 0 [ 165.923197][ T6866] loop5: unable to read partition table [ 165.923339][ T6866] loop5: partition table beyond EOD, truncated [ 165.923355][ T6866] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 166.073211][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.079085][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.083706][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.088064][ T6870] ldm_validate_partition_table(): Disk read failed. [ 166.090825][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.128241][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.142749][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.175993][ T6870] Dev loop7: unable to read RDB block 0 [ 166.179718][ T6870] loop7: unable to read partition table [ 166.197100][ T6870] loop7: partition table beyond EOD, truncated [ 166.211539][ T6870] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 166.709598][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 166.709618][ T40] audit: type=1400 audit(1770744403.595:330): avc: denied { execute } for pid=6889 comm="syz.0.257" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 167.151416][ T6909] FAULT_INJECTION: forcing a failure. [ 167.151416][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 167.156073][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: syz.2.264 Not tainted syzkaller #0 PREEMPT(full) [ 167.156100][ T6909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.156110][ T6909] Call Trace: [ 167.156120][ T6909] [ 167.156128][ T6909] dump_stack_lvl+0x100/0x190 [ 167.156160][ T6909] should_fail_ex.cold+0x5/0xa [ 167.156181][ T6909] should_failslab+0xc2/0x120 [ 167.156206][ T6909] kmem_cache_alloc_noprof+0x83/0x780 [ 167.156229][ T6909] ? do_getname+0x35/0x390 [ 167.156249][ T6909] ? do_getname+0x35/0x390 [ 167.156262][ T6909] do_getname+0x35/0x390 [ 167.156280][ T6909] user_path_at+0x26/0x60 [ 167.156302][ T6909] __x64_sys_umount+0x10a/0x1a0 [ 167.156328][ T6909] ? __pfx___x64_sys_umount+0x10/0x10 [ 167.156355][ T6909] ? rcu_is_watching+0x12/0xc0 [ 167.156381][ T6909] do_syscall_64+0xc9/0xf80 [ 167.156401][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.156419][ T6909] RIP: 0033:0x7f502499bf79 [ 167.156436][ T6909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.156451][ T6909] RSP: 002b:00007f50257cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 167.156468][ T6909] RAX: ffffffffffffffda RBX: 00007f5024c15fa0 RCX: 00007f502499bf79 [ 167.156479][ T6909] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000240 [ 167.156488][ T6909] RBP: 00007f50257cd090 R08: 0000000000000000 R09: 0000000000000000 [ 167.156497][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.156506][ T6909] R13: 00007f5024c16038 R14: 00007f5024c15fa0 R15: 00007ffe4f2ec1a8 [ 167.156539][ T6909] [ 167.338924][ T1029] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 167.501284][ T6913] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 167.519897][ T1029] usb 8-1: device descriptor read/64, error -71 [ 167.574821][ T6916] Bluetooth: MGMT ver 1.23 [ 167.584470][ T40] audit: type=1400 audit(1770744404.465:331): avc: denied { write } for pid=6915 comm="syz.0.266" path="socket:[12914]" dev="sockfs" ino=12914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.823930][ T1029] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 167.959685][ T1029] usb 8-1: device descriptor read/64, error -71 [ 167.973694][ T40] audit: type=1400 audit(1770744404.855:332): avc: denied { getopt } for pid=6928 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.034854][ T40] audit: type=1400 audit(1770744404.915:333): avc: denied { setopt } for pid=6928 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.053783][ T6929] tmpfs: Bad value for 'mpol' [ 168.057360][ T40] audit: type=1400 audit(1770744404.935:334): avc: denied { accept } for pid=6928 comm="syz.0.270" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.069196][ T1029] usb usb8-port1: attempt power cycle [ 168.098954][ T73] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 168.241046][ T73] usb 6-1: device descriptor read/64, error -71 [ 168.245224][ T40] audit: type=1400 audit(1770744405.125:335): avc: denied { write } for pid=6930 comm="syz.0.272" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 168.438863][ T1029] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 168.482278][ T1029] usb 8-1: device descriptor read/8, error -71 [ 168.499102][ T73] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 168.616881][ T40] audit: type=1400 audit(1770744405.495:336): avc: denied { read write } for pid=6941 comm="syz.2.275" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 168.645757][ T40] audit: type=1400 audit(1770744405.495:337): avc: denied { open } for pid=6941 comm="syz.2.275" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 168.651656][ T73] usb 6-1: device descriptor read/64, error -71 [ 168.718950][ T1029] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 168.733121][ T40] audit: type=1400 audit(1770744405.605:338): avc: denied { write } for pid=6943 comm="syz.0.276" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.749622][ T1029] usb 8-1: device descriptor read/8, error -71 [ 168.769508][ T6942] QAT: Device 2 not found [ 168.777992][ T40] audit: type=1400 audit(1770744405.655:339): avc: denied { write } for pid=6941 comm="syz.2.275" path="socket:[12030]" dev="sockfs" ino=12030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.789989][ T73] usb usb6-port1: attempt power cycle [ 168.795129][ T6942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6942 comm=syz.2.275 [ 168.873479][ T1029] usb usb8-port1: unable to enumerate USB device [ 168.989246][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 168.992501][ T6951] netlink: 100 bytes leftover after parsing attributes in process `syz.0.276'. [ 169.169060][ T73] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 169.256706][ T73] usb 6-1: device descriptor read/8, error -71 [ 169.403934][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 169.521965][ T73] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 169.528703][ T6959] fuse: Bad value for 'fd' [ 169.540603][ T73] usb 6-1: device descriptor read/8, error -71 [ 169.661166][ T73] usb usb6-port1: unable to enumerate USB device [ 169.677051][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.884511][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.906252][ T6944] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 171.643411][ T6944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.646223][ T6944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.659104][ T6944] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.981201][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 171.981223][ T40] audit: type=1400 audit(1770744408.825:343): avc: denied { create } for pid=6974 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 172.037466][ T40] audit: type=1400 audit(1770744408.825:344): avc: denied { setopt } for pid=6974 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 172.126233][ T40] audit: type=1400 audit(1770744408.985:345): avc: denied { create } for pid=6980 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.158950][ T40] audit: type=1400 audit(1770744408.995:346): avc: denied { accept } for pid=6980 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.247200][ T40] audit: type=1400 audit(1770744408.995:347): avc: denied { getopt } for pid=6980 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.290874][ T40] audit: type=1400 audit(1770744408.995:348): avc: denied { ioctl } for pid=6980 comm="syz.3.288" path="socket:[12088]" dev="sockfs" ino=12088 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.490691][ T6018] IPVS: starting estimator thread 0... [ 172.635359][ T6991] IPVS: using max 43 ests per chain, 103200 per kthread [ 172.788890][ T24] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 172.939106][ T24] usb 8-1: device descriptor read/64, error -71 [ 172.962651][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.968995][ T6996] fuse: Bad value for 'fd' [ 173.189458][ T24] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 173.201641][ T7004] xt_bpf: check failed: parse error [ 173.261284][ T7007] FAULT_INJECTION: forcing a failure. [ 173.261284][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 173.279264][ T7007] CPU: 0 UID: 0 PID: 7007 Comm: syz.1.297 Not tainted syzkaller #0 PREEMPT(full) [ 173.279291][ T7007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.279302][ T7007] Call Trace: [ 173.279307][ T7007] [ 173.279313][ T7007] dump_stack_lvl+0x100/0x190 [ 173.279344][ T7007] should_fail_ex.cold+0x5/0xa [ 173.279365][ T7007] should_failslab+0xc2/0x120 [ 173.279424][ T7007] ? tomoyo_encode2+0xfb/0x3c0 [ 173.279452][ T7007] __kmalloc_noprof+0xf6/0x9c0 [ 173.279476][ T7007] ? tomoyo_encode2+0xfb/0x3c0 [ 173.279500][ T7007] tomoyo_encode2+0xfb/0x3c0 [ 173.279528][ T7007] tomoyo_encode+0x29/0x50 [ 173.279553][ T7007] tomoyo_realpath_from_path+0x18c/0x690 [ 173.279586][ T7007] tomoyo_path_number_perm+0x23c/0x580 [ 173.279607][ T7007] ? tomoyo_path_number_perm+0x22e/0x580 [ 173.279632][ T7007] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.279675][ T7007] ? find_held_lock+0x2b/0x80 [ 173.279702][ T7007] ? hook_file_ioctl_common+0x146/0x410 [ 173.279722][ T7007] ? __fget_files+0x215/0x3d0 [ 173.279763][ T7007] ? __fget_files+0x21f/0x3d0 [ 173.279790][ T7007] security_file_ioctl+0xd3/0x230 [ 173.279817][ T7007] __x64_sys_ioctl+0xb7/0x210 [ 173.279839][ T7007] do_syscall_64+0xc9/0xf80 [ 173.279861][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.279880][ T7007] RIP: 0033:0x7fe865b9bf79 [ 173.279895][ T7007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.279913][ T7007] RSP: 002b:00007fe8669dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.279932][ T7007] RAX: ffffffffffffffda RBX: 00007fe865e15fa0 RCX: 00007fe865b9bf79 [ 173.279945][ T7007] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000005 [ 173.279955][ T7007] RBP: 00007fe8669dd090 R08: 0000000000000000 R09: 0000000000000000 [ 173.279967][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.279977][ T7007] R13: 00007fe865e16038 R14: 00007fe865e15fa0 R15: 00007ffe624df4a8 [ 173.280001][ T7007] [ 173.280121][ T7007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.345101][ T24] usb 8-1: device descriptor read/64, error -71 [ 173.672071][ T24] usb usb8-port1: attempt power cycle [ 173.676647][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.677095][ T5964] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.770931][ T7014] sctp: [Deprecated]: syz.2.300 (pid 7014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.770931][ T7014] Use struct sctp_sack_info instead [ 173.951277][ T40] audit: type=1400 audit(1770744410.835:349): avc: denied { read } for pid=7015 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.993083][ T1029] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 174.019290][ T24] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 174.063450][ T24] usb 8-1: device descriptor read/8, error -71 [ 174.129204][ T40] audit: type=1400 audit(1770744411.005:350): avc: denied { add_name } for pid=7018 comm="syz.2.303" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.159103][ T1029] usb 6-1: device descriptor read/64, error -71 [ 174.165463][ T40] audit: type=1400 audit(1770744411.005:351): avc: denied { create } for pid=7018 comm="syz.2.303" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.217967][ T40] audit: type=1400 audit(1770744411.005:352): avc: denied { associate } for pid=7018 comm="syz.2.303" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 174.331692][ T24] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 174.359647][ T24] usb 8-1: device descriptor read/8, error -71 [ 174.480758][ T24] usb usb8-port1: unable to enumerate USB device [ 174.510513][ T1029] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 174.659372][ T1029] usb 6-1: device descriptor read/64, error -71 [ 174.698191][ T7022] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 174.792487][ T1029] usb usb6-port1: attempt power cycle [ 175.032860][ T7034] fuse: Bad value for 'fd' [ 175.139165][ T1029] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 175.179602][ T1029] usb 6-1: device descriptor read/8, error -71 [ 175.444923][ T1029] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 175.480423][ T1029] usb 6-1: device descriptor read/8, error -71 [ 175.589334][ T1029] usb usb6-port1: unable to enumerate USB device [ 175.621208][ T7038] syzkaller0: entered promiscuous mode [ 175.624575][ T7038] syzkaller0: entered allmulticast mode [ 176.708874][ T5964] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.119781][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 177.119797][ T40] audit: type=1400 audit(1770744414.005:364): avc: denied { create } for pid=7052 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 177.213138][ T7054] new mount options do not match the existing superblock, will be ignored [ 177.220037][ T40] audit: type=1400 audit(1770744414.105:365): avc: denied { mount } for pid=7050 comm="syz.1.314" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 177.266173][ T7054] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 177.281219][ T40] audit: type=1400 audit(1770744414.125:366): avc: denied { remount } for pid=7050 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 177.289532][ T40] audit: type=1400 audit(1770744414.165:367): avc: denied { setopt } for pid=7050 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.341246][ T7054] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 177.346444][ T40] audit: type=1400 audit(1770744414.215:368): avc: denied { sys_admin } for pid=7050 comm="syz.1.314" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 177.386935][ T40] audit: type=1400 audit(1770744414.215:369): avc: denied { create } for pid=7050 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.428958][ T40] audit: type=1400 audit(1770744414.215:370): avc: denied { connect } for pid=7050 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.940932][ T40] audit: type=1400 audit(1770744414.835:371): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 177.971799][ T39] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 178.129463][ T39] usb 7-1: device descriptor read/64, error -71 [ 178.420256][ T39] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 178.559700][ T39] usb 7-1: device descriptor read/64, error -71 [ 178.669291][ T39] usb usb7-port1: attempt power cycle [ 179.059804][ T39] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 179.089648][ T39] usb 7-1: device descriptor read/8, error -71 [ 179.340193][ T39] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 179.390829][ T39] usb 7-1: device descriptor read/8, error -71 [ 179.516354][ T39] usb usb7-port1: unable to enumerate USB device [ 181.156067][ T40] audit: type=1400 audit(1770744418.045:372): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 181.214545][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 181.370714][ T9] usb 7-1: device descriptor read/64, error -71 [ 181.418509][ T7081] MINIX-fs: unable to read superblock [ 181.628909][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 181.698815][ T7086] FAULT_INJECTION: forcing a failure. [ 181.698815][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 181.729199][ T7086] CPU: 0 UID: 0 PID: 7086 Comm: syz.1.327 Not tainted syzkaller #0 PREEMPT(full) [ 181.729227][ T7086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.729237][ T7086] Call Trace: [ 181.729244][ T7086] [ 181.729252][ T7086] dump_stack_lvl+0x100/0x190 [ 181.729283][ T7086] should_fail_ex.cold+0x5/0xa [ 181.729305][ T7086] should_failslab+0xc2/0x120 [ 181.729330][ T7086] __kmalloc_cache_noprof+0x80/0x810 [ 181.729347][ T7086] ? kobject_uevent_env+0x263/0x18b0 [ 181.729374][ T7086] ? kobject_uevent_env+0x263/0x18b0 [ 181.729394][ T7086] kobject_uevent_env+0x263/0x18b0 [ 181.729424][ T7086] lo_ioctl+0xb44/0x1bc0 [ 181.729451][ T7086] ? __pfx_lo_ioctl+0x10/0x10 [ 181.729472][ T7086] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 181.729494][ T7086] ? lockdep_hardirqs_on+0x78/0x100 [ 181.729511][ T7086] ? blk_get_meta_cap+0xd4/0x6c0 [ 181.729537][ T7086] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 181.729558][ T7086] ? tomoyo_path_number_perm+0x28f/0x580 [ 181.729589][ T7086] ? blkdev_common_ioctl+0x515/0x2ba0 [ 181.729624][ T7086] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 181.729653][ T7086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.729682][ T7086] ? do_vfs_ioctl+0x226/0x13e0 [ 181.729702][ T7086] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.729719][ T7086] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 181.729748][ T7086] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 181.729782][ T7086] ? __pfx_lo_ioctl+0x10/0x10 [ 181.729804][ T7086] blkdev_ioctl+0x5ad/0x6f0 [ 181.729828][ T7086] ? __pfx_blkdev_ioctl+0x10/0x10 [ 181.729850][ T7086] ? selinux_file_ioctl+0x139/0x290 [ 181.729874][ T7086] ? selinux_file_ioctl+0xb4/0x290 [ 181.729899][ T7086] ? __pfx_blkdev_ioctl+0x10/0x10 [ 181.729924][ T7086] __x64_sys_ioctl+0x18e/0x210 [ 181.729945][ T7086] do_syscall_64+0xc9/0xf80 [ 181.729964][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.729982][ T7086] RIP: 0033:0x7fe865b9bf79 [ 181.729997][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.730013][ T7086] RSP: 002b:00007fe8669dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.730031][ T7086] RAX: ffffffffffffffda RBX: 00007fe865e15fa0 RCX: 00007fe865b9bf79 [ 181.730042][ T7086] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000005 [ 181.730053][ T7086] RBP: 00007fe8669dd090 R08: 0000000000000000 R09: 0000000000000000 [ 181.730063][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.730073][ T7086] R13: 00007fe865e16038 R14: 00007fe865e15fa0 R15: 00007ffe624df4a8 [ 181.730097][ T7086] [ 181.927138][ T9] usb 7-1: device descriptor read/64, error -71 [ 182.041795][ T9] usb usb7-port1: attempt power cycle [ 182.288856][ T6026] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 182.351082][ T40] audit: type=1400 audit(1770744419.225:373): avc: denied { bind } for pid=7091 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.395086][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 182.417281][ T7092] netlink: 'syz.3.330': attribute type 28 has an invalid length. [ 182.433811][ T7092] netlink: 'syz.3.330': attribute type 3 has an invalid length. [ 182.447531][ T7092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.330'. [ 182.459383][ T6026] usb 6-1: device descriptor read/64, error -71 [ 182.484746][ T9] usb 7-1: device descriptor read/8, error -71 [ 182.503093][ T7095] 9pnet_virtio: no channels available for device 127.0.0.1 [ 182.777170][ T7100] overlayfs: missing 'lowerdir' [ 182.790930][ T6026] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 182.794456][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 182.798110][ T40] audit: type=1400 audit(1770744419.685:374): avc: denied { create } for pid=7098 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.826713][ T40] audit: type=1400 audit(1770744419.685:375): avc: denied { setattr } for pid=7098 comm="syz.3.333" path="socket:[12220]" dev="sockfs" ino=12220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.834466][ T9] usb 7-1: device descriptor read/8, error -71 [ 182.941600][ T6026] usb 6-1: device descriptor read/64, error -71 [ 182.997589][ T9] usb usb7-port1: unable to enumerate USB device [ 183.001729][ T7103] SELinux: policydb string length 0 does not match expected length 8 [ 183.003589][ T40] audit: type=1400 audit(1770744419.885:376): avc: denied { write } for pid=7102 comm="syz.3.334" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.010175][ T7103] SELinux: failed to load policy [ 183.070831][ T6026] usb usb6-port1: attempt power cycle [ 183.148151][ T7103] mmap: syz.3.334 (7103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.492366][ T6026] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 183.533887][ T6026] usb 6-1: device descriptor read/8, error -71 [ 183.689528][ T7108] FAULT_INJECTION: forcing a failure. [ 183.689528][ T7108] name failslab, interval 1, probability 0, space 0, times 0 [ 183.696281][ T7108] CPU: 3 UID: 0 PID: 7108 Comm: syz.3.336 Not tainted syzkaller #0 PREEMPT(full) [ 183.696306][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.696317][ T7108] Call Trace: [ 183.696324][ T7108] [ 183.696333][ T7108] dump_stack_lvl+0x100/0x190 [ 183.696365][ T7108] should_fail_ex.cold+0x5/0xa [ 183.696385][ T7108] should_failslab+0xc2/0x120 [ 183.696408][ T7108] ? kobject_get_path+0xcf/0x2c0 [ 183.696426][ T7108] __kmalloc_noprof+0xf6/0x9c0 [ 183.696450][ T7108] ? kobject_get_path+0xcf/0x2c0 [ 183.696468][ T7108] kobject_get_path+0xcf/0x2c0 [ 183.696490][ T7108] kobject_uevent_env+0x287/0x18b0 [ 183.696520][ T7108] lo_ioctl+0xb44/0x1bc0 [ 183.696548][ T7108] ? __pfx_lo_ioctl+0x10/0x10 [ 183.696569][ T7108] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 183.696591][ T7108] ? lockdep_hardirqs_on+0x78/0x100 [ 183.696609][ T7108] ? blk_get_meta_cap+0xd4/0x6c0 [ 183.696638][ T7108] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 183.696660][ T7108] ? tomoyo_path_number_perm+0x28f/0x580 [ 183.696688][ T7108] ? blkdev_common_ioctl+0x515/0x2ba0 [ 183.696715][ T7108] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 183.696743][ T7108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.696771][ T7108] ? do_vfs_ioctl+0x226/0x13e0 [ 183.696789][ T7108] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 183.696805][ T7108] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 183.696834][ T7108] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 183.696869][ T7108] ? __pfx_lo_ioctl+0x10/0x10 [ 183.696891][ T7108] blkdev_ioctl+0x5ad/0x6f0 [ 183.696914][ T7108] ? __pfx_blkdev_ioctl+0x10/0x10 [ 183.696936][ T7108] ? selinux_file_ioctl+0x139/0x290 [ 183.696959][ T7108] ? selinux_file_ioctl+0xb4/0x290 [ 183.696985][ T7108] ? __pfx_blkdev_ioctl+0x10/0x10 [ 183.697009][ T7108] __x64_sys_ioctl+0x18e/0x210 [ 183.697029][ T7108] do_syscall_64+0xc9/0xf80 [ 183.697048][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.697066][ T7108] RIP: 0033:0x7f58e799bf79 [ 183.697080][ T7108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.697096][ T7108] RSP: 002b:00007f58e88b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.697114][ T7108] RAX: ffffffffffffffda RBX: 00007f58e7c15fa0 RCX: 00007f58e799bf79 [ 183.697125][ T7108] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000005 [ 183.697136][ T7108] RBP: 00007f58e88b7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.697145][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.697155][ T7108] R13: 00007f58e7c16038 R14: 00007f58e7c15fa0 R15: 00007fff01206da8 [ 183.697178][ T7108] [ 184.017267][ T6026] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 184.049603][ T6026] usb 6-1: device descriptor read/8, error -71 [ 184.152361][ T6026] usb usb6-port1: unable to enumerate USB device [ 184.212841][ T7117] netlink: 3916 bytes leftover after parsing attributes in process `syz.2.338'. [ 184.319648][ T7121] openvswitch: netlink: IPv6 tunnel dst address is zero [ 184.349612][ T7121] IPVS: set_ctl: invalid protocol: 59 172.20.20.25:20002 [ 184.574246][ T5619] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 184.670880][ T7126] netlink: 'syz.2.342': attribute type 2 has an invalid length. [ 184.683879][ T7126] netlink: 'syz.2.342': attribute type 2 has an invalid length. [ 184.702382][ T7126] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 184.706210][ T7126] netlink: 'syz.2.342': attribute type 2 has an invalid length. [ 184.782412][ T5619] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.786442][ T5619] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 184.791063][ T5964] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.801539][ T6052] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.806170][ T5619] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9344, setting to 64 [ 184.835663][ T5619] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.852483][ T5619] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 184.857790][ T5619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.864215][ T5619] usb 8-1: Product: syz [ 184.885974][ T5619] usb 8-1: Manufacturer: syz [ 184.893279][ T5619] usb 8-1: SerialNumber: syz [ 184.906958][ T5619] usb 8-1: config 0 descriptor?? [ 184.921402][ T7119] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.931899][ T5619] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input13 [ 184.959344][ T40] audit: type=1400 audit(1770744421.825:377): avc: denied { read } for pid=5325 comm="acpid" name="mouse2" dev="devtmpfs" ino=2960 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.987143][ T40] audit: type=1400 audit(1770744421.825:378): avc: denied { open } for pid=5325 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2960 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.004682][ T40] audit: type=1400 audit(1770744421.825:379): avc: denied { ioctl } for pid=5325 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2960 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.027262][ T6052] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.049950][ T73] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 185.062893][ T6052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.062919][ T6052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.062934][ T6052] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.062964][ T6052] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.062980][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.073027][ T6052] usb 5-1: config 0 descriptor?? [ 185.179451][ C0] kbtab 8-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 185.214992][ T7133] Cannot find add_set index 0 as target [ 185.317427][ T73] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.323486][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.328077][ T73] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 185.342224][ T73] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.392753][ T73] usb 7-1: config 0 descriptor?? [ 185.434617][ T73] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 185.437065][ T73] dvb-usb: bulk message failed: -22 (3/0) [ 185.476757][ T73] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 185.485171][ T73] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 185.488336][ T73] usb 7-1: media controller created [ 185.491177][ T1029] usb 8-1: USB disconnect, device number 17 [ 185.491205][ C3] kbtab 8-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 185.493982][ T73] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.581340][ T73] dvb-usb: bulk message failed: -22 (6/0) [ 185.585689][ T73] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 185.590341][ T73] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input14 [ 185.618880][ T6052] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 185.622367][ T6052] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 185.636531][ T73] dvb-usb: schedule remote query interval to 150 msecs. [ 185.637248][ T6052] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 2/15 [ 185.640505][ T73] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 185.643127][ T6052] plantronics 0003:047F:FFFF.0002: parse failed [ 185.656928][ T6052] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 185.665427][ T7138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.709222][ T6018] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 185.722224][ T7138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.732356][ T55] usb 7-1: USB disconnect, device number 13 [ 185.774816][ T55] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 185.816522][ T6052] usb 5-1: USB disconnect, device number 8 [ 185.840469][ T6018] usb 6-1: device descriptor read/64, error -71 [ 186.111535][ T6018] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 186.259086][ T6018] usb 6-1: device descriptor read/64, error -71 [ 186.388272][ T6018] usb usb6-port1: attempt power cycle [ 186.778014][ T6018] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 186.829489][ T6018] usb 6-1: device descriptor read/8, error -71 [ 186.881639][ T40] audit: type=1400 audit(1770744423.765:380): avc: denied { name_connect } for pid=7141 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 187.099160][ T6018] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 187.144052][ T6018] usb 6-1: device descriptor read/8, error -71 [ 187.283534][ T6026] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 187.285562][ T6018] usb usb6-port1: unable to enumerate USB device [ 187.319716][ T40] audit: type=1400 audit(1770744424.205:381): avc: denied { write } for pid=7169 comm="syz.3.353" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.325852][ T7170] veth1_to_team: entered promiscuous mode [ 187.371981][ T40] audit: type=1400 audit(1770744424.255:382): avc: denied { connect } for pid=7171 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.427174][ T6026] usb 5-1: device descriptor read/64, error -71 [ 187.447973][ T40] audit: type=1400 audit(1770744424.335:383): avc: denied { bind } for pid=7171 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.488900][ T40] audit: type=1400 audit(1770744424.375:384): avc: denied { write } for pid=7171 comm="syz.2.354" path="socket:[13157]" dev="sockfs" ino=13157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.659506][ T7169] veth1_to_team: left promiscuous mode [ 187.671585][ T6026] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 187.830092][ T6026] usb 5-1: device descriptor read/64, error -71 [ 187.876524][ T40] audit: type=1400 audit(1770744424.765:385): avc: denied { watch } for pid=7185 comm="syz.2.358" path="/98" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 187.914553][ T40] audit: type=1400 audit(1770744424.785:386): avc: denied { create } for pid=7185 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.933439][ T40] audit: type=1400 audit(1770744424.785:387): avc: denied { write } for pid=7185 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.955980][ T6026] usb usb5-port1: attempt power cycle [ 188.030601][ T40] audit: type=1400 audit(1770744424.895:388): avc: denied { listen } for pid=7191 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.055055][ T7192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.161735][ T7192] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 188.165869][ T7192] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 188.209708][ T7196] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 188.378977][ T6026] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 188.454181][ T6026] usb 5-1: device descriptor read/8, error -71 [ 188.712380][ T6026] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 188.739704][ T6026] usb 5-1: device descriptor read/8, error -71 [ 188.859411][ T6026] usb usb5-port1: unable to enumerate USB device [ 189.463149][ T7230] fuse: Bad value for 'group_id' [ 189.466904][ T7230] fuse: Bad value for 'group_id' [ 189.473063][ T7225] 9pnet_virtio: no channels available for device syz [ 189.511785][ T40] audit: type=1400 audit(1770744426.395:389): avc: denied { read append } for pid=7224 comm="syz.1.372" path="/91/file0/cpuset.effective_cpus" dev="9p" ino=72614219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.533292][ T40] audit: type=1400 audit(1770744426.395:390): avc: denied { lock } for pid=7224 comm="syz.1.372" path="/91/file0/cpuset.effective_cpus" dev="9p" ino=72614219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.846381][ T7238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.377'. [ 189.852495][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 189.886876][ T7211] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.011542][ T40] audit: type=1400 audit(1770744426.885:391): avc: denied { append } for pid=7245 comm="syz.3.380" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.017367][ T7249] binder: 7244:7249 ioctl c0306201 200000000640 returned -22 [ 190.416656][ T1029] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 190.572667][ T1029] usb 6-1: device descriptor read/64, error -71 [ 190.789523][ T5964] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.818940][ T1029] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 190.842248][ T7276] netlink: 144 bytes leftover after parsing attributes in process `syz.2.387'. [ 190.980390][ T1029] usb 6-1: device descriptor read/64, error -71 [ 191.034874][ T7277] netlink: 'syz.0.388': attribute type 2 has an invalid length. [ 191.050696][ T7277] netlink: 46 bytes leftover after parsing attributes in process `syz.0.388'. [ 191.090988][ T1029] usb usb6-port1: attempt power cycle [ 191.152389][ T7285] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.450993][ T1029] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 191.454819][ T6070] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 191.481081][ T1029] usb 6-1: device descriptor read/8, error -71 [ 191.598936][ T6070] usb 5-1: device descriptor read/64, error -71 [ 191.648888][ T55] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 191.749102][ T1029] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 191.788517][ T1029] usb 6-1: device descriptor read/8, error -71 [ 191.821871][ T5964] Bluetooth: hci1: Unknown advertising packet type: 0x70 [ 191.821929][ T5964] Bluetooth: hci1: Malformed LE Event: 0x0d [ 191.836188][ T55] usb 7-1: unable to get BOS descriptor or descriptor too short [ 191.856032][ T6070] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 191.863828][ T55] usb 7-1: no configurations [ 191.882489][ T55] usb 7-1: can't read configurations, error -22 [ 191.911025][ T1029] usb usb6-port1: unable to enumerate USB device [ 191.979662][ T6070] usb 5-1: device descriptor read/64, error -71 [ 192.099337][ T6070] usb usb5-port1: attempt power cycle [ 192.122398][ T7308] warning: `syz.3.398' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.124202][ T7309] SELinux: policydb version -29882011 does not match my version range 15-35 [ 192.133368][ T7309] SELinux: failed to load policy [ 192.155938][ T7308] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 192.302665][ T7312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.354506][ T7314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.470244][ T1029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.480726][ T6070] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 192.502806][ T6070] usb 5-1: device descriptor read/8, error -71 [ 192.608538][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 192.608555][ T40] audit: type=1400 audit(1770744429.485:414): avc: denied { create } for pid=7320 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 192.641233][ T40] audit: type=1400 audit(1770744429.525:415): avc: denied { setopt } for pid=7320 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 192.760490][ T6070] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 192.794017][ T6070] usb 5-1: device descriptor read/8, error -71 [ 192.929309][ T6070] usb usb5-port1: unable to enumerate USB device [ 193.019813][ T7325] FAULT_INJECTION: forcing a failure. [ 193.019813][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 193.025507][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.2.403 Not tainted syzkaller #0 PREEMPT(full) [ 193.025529][ T7325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.025538][ T7325] Call Trace: [ 193.025544][ T7325] [ 193.025551][ T7325] dump_stack_lvl+0x100/0x190 [ 193.025605][ T7325] should_fail_ex.cold+0x5/0xa [ 193.025622][ T7325] should_failslab+0xc2/0x120 [ 193.025643][ T7325] kmem_cache_alloc_noprof+0x83/0x780 [ 193.025662][ T7325] ? skb_clone+0x190/0x400 [ 193.025692][ T7325] ? skb_clone+0x190/0x400 [ 193.025707][ T7325] skb_clone+0x190/0x400 [ 193.025725][ T7325] netlink_broadcast_filtered+0xb6a/0xf50 [ 193.025752][ T7325] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 193.025771][ T7325] ? netlink_has_listeners+0x20f/0x430 [ 193.025787][ T7325] ? netlink_has_listeners+0x20f/0x430 [ 193.025807][ T7325] netlink_broadcast+0x39/0x50 [ 193.025825][ T7325] kobject_uevent_env+0xcdd/0x18b0 [ 193.025852][ T7325] lo_ioctl+0xb44/0x1bc0 [ 193.025885][ T7325] ? __pfx_lo_ioctl+0x10/0x10 [ 193.025902][ T7325] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 193.025919][ T7325] ? lockdep_hardirqs_on+0x78/0x100 [ 193.025933][ T7325] ? blk_get_meta_cap+0xd4/0x6c0 [ 193.025954][ T7325] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 193.025970][ T7325] ? tomoyo_path_number_perm+0x28f/0x580 [ 193.025995][ T7325] ? blkdev_common_ioctl+0x515/0x2ba0 [ 193.026017][ T7325] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 193.026040][ T7325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.026063][ T7325] ? do_vfs_ioctl+0x226/0x13e0 [ 193.026078][ T7325] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 193.026091][ T7325] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 193.026115][ T7325] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 193.026143][ T7325] ? __pfx_lo_ioctl+0x10/0x10 [ 193.026160][ T7325] blkdev_ioctl+0x5ad/0x6f0 [ 193.026179][ T7325] ? __pfx_blkdev_ioctl+0x10/0x10 [ 193.026197][ T7325] ? selinux_file_ioctl+0x139/0x290 [ 193.026216][ T7325] ? selinux_file_ioctl+0xb4/0x290 [ 193.026237][ T7325] ? __pfx_blkdev_ioctl+0x10/0x10 [ 193.026257][ T7325] __x64_sys_ioctl+0x18e/0x210 [ 193.026273][ T7325] do_syscall_64+0xc9/0xf80 [ 193.026288][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.026304][ T7325] RIP: 0033:0x7f502499bf79 [ 193.026316][ T7325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.026329][ T7325] RSP: 002b:00007f50257cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.026344][ T7325] RAX: ffffffffffffffda RBX: 00007f5024c15fa0 RCX: 00007f502499bf79 [ 193.026354][ T7325] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000005 [ 193.026362][ T7325] RBP: 00007f50257cd090 R08: 0000000000000000 R09: 0000000000000000 [ 193.026371][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.026379][ T7325] R13: 00007f5024c16038 R14: 00007f5024c15fa0 R15: 00007ffe4f2ec1a8 [ 193.026399][ T7325] [ 193.158195][ T7327] netlink: 252 bytes leftover after parsing attributes in process `syz.2.404'. [ 193.283151][ T7329] Bluetooth: MGMT ver 1.23 [ 193.367501][ T40] audit: type=1400 audit(1770744430.245:416): avc: denied { append } for pid=7328 comm="syz.1.406" name="video5" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 193.456500][ T7334] sctp: [Deprecated]: syz.3.405 (pid 7334) Use of int in max_burst socket option. [ 193.456500][ T7334] Use struct sctp_assoc_value instead [ 193.521739][ T6070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.582472][ T7338] input: syz0 as /devices/virtual/input/input15 [ 193.597575][ T40] audit: type=1400 audit(1770744430.445:417): avc: denied { read } for pid=7337 comm="syz.1.408" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 193.659480][ T73] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 193.750962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.843129][ T73] usb 7-1: Using ep0 maxpacket: 16 [ 193.849041][ T73] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.865532][ T73] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.917031][ T73] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.952030][ T73] usb 7-1: config 1 interface 0 has no altsetting 0 [ 193.992139][ T73] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 194.025482][ T73] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.036795][ T73] usb 7-1: Product: syz [ 194.056061][ T73] usb 7-1: Manufacturer: syz [ 194.065399][ T73] usb 7-1: SerialNumber: syz [ 194.105940][ T40] audit: type=1400 audit(1770744430.995:418): avc: denied { name_bind } for pid=7344 comm="syz.1.409" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 194.390408][ T73] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 194.590103][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.631943][ T7364] FAULT_INJECTION: forcing a failure. [ 194.631943][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 194.700469][ T7364] CPU: 1 UID: 0 PID: 7364 Comm: syz.0.412 Not tainted syzkaller #0 PREEMPT(full) [ 194.700497][ T7364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.700507][ T7364] Call Trace: [ 194.700514][ T7364] [ 194.700520][ T7364] dump_stack_lvl+0x100/0x190 [ 194.700550][ T7364] should_fail_ex.cold+0x5/0xa [ 194.700571][ T7364] should_failslab+0xc2/0x120 [ 194.700595][ T7364] __kmalloc_cache_noprof+0x80/0x810 [ 194.700613][ T7364] ? kobject_uevent_env+0x263/0x18b0 [ 194.700640][ T7364] ? kobject_uevent_env+0x263/0x18b0 [ 194.700661][ T7364] kobject_uevent_env+0x263/0x18b0 [ 194.700692][ T7364] lo_ioctl+0xb44/0x1bc0 [ 194.700718][ T7364] ? __pfx_lo_ioctl+0x10/0x10 [ 194.700741][ T7364] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 194.700764][ T7364] ? lockdep_hardirqs_on+0x78/0x100 [ 194.700783][ T7364] ? blk_get_meta_cap+0xd4/0x6c0 [ 194.700808][ T7364] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 194.700831][ T7364] ? tomoyo_path_number_perm+0x28f/0x580 [ 194.700863][ T7364] ? blkdev_common_ioctl+0x515/0x2ba0 [ 194.700892][ T7364] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 194.700923][ T7364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.700952][ T7364] ? do_vfs_ioctl+0x226/0x13e0 [ 194.700972][ T7364] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 194.700990][ T7364] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 194.701019][ T7364] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 194.701057][ T7364] ? __pfx_lo_ioctl+0x10/0x10 [ 194.701079][ T7364] blkdev_ioctl+0x5ad/0x6f0 [ 194.701105][ T7364] ? __pfx_blkdev_ioctl+0x10/0x10 [ 194.701129][ T7364] ? selinux_file_ioctl+0x139/0x290 [ 194.701154][ T7364] ? selinux_file_ioctl+0xb4/0x290 [ 194.701179][ T7364] ? __pfx_blkdev_ioctl+0x10/0x10 [ 194.701202][ T7364] __x64_sys_ioctl+0x18e/0x210 [ 194.701224][ T7364] do_syscall_64+0xc9/0xf80 [ 194.701244][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.701269][ T7364] RIP: 0033:0x7fca5f79bf79 [ 194.701285][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.701303][ T7364] RSP: 002b:00007fca606ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.701321][ T7364] RAX: ffffffffffffffda RBX: 00007fca5fa16090 RCX: 00007fca5f79bf79 [ 194.701332][ T7364] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000005 [ 194.701343][ T7364] RBP: 00007fca606ae090 R08: 0000000000000000 R09: 0000000000000000 [ 194.701354][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.701365][ T7364] R13: 00007fca5fa16128 R14: 00007fca5fa16090 R15: 00007ffe5e3aee28 [ 194.701390][ T7364] [ 195.005763][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.057098][ T55] usb 7-1: USB disconnect, device number 16 [ 195.076826][ T55] usblp0: removed [ 195.113752][ T7377] IPv6: sit1: Disabled Multicast RS [ 195.126392][ T7371] futex_wake_op: syz.3.413 tries to shift op by -1; fix this program [ 195.137372][ T7377] sit1: entered allmulticast mode [ 195.165867][ T7370] futex_wake_op: syz.3.413 tries to shift op by -1; fix this program [ 195.523722][ T6037] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 195.604011][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.759609][ T6037] usb 6-1: device descriptor read/64, error -71 [ 195.887438][ T40] audit: type=1400 audit(1770744432.755:419): avc: denied { mount } for pid=7398 comm="syz.3.420" name="/" dev="ramfs" ino=13777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 195.969927][ T40] audit: type=1400 audit(1770744432.755:420): avc: denied { connect } for pid=7398 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.006889][ T5619] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 196.014189][ T5619] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 196.020200][ C1] ------------[ cut here ]------------ [ 196.023019][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 196.025750][ C1] WARNING: kernel/workqueue.c:2251 at __queue_work+0xcbb/0x10f0, CPU#1: swapper/1/0 [ 196.029527][ C1] Modules linked in: [ 196.031649][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 196.038545][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.039679][ T6037] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 196.044718][ C1] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 196.044778][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d 95 94 ec 0e 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 62 8e 38 00 90 0f 0b 90 e9 ff f5 [ 196.044798][ C1] RSP: 0018:ffffc900006a0bf0 EFLAGS: 00010046 [ 196.048892][ T53] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 196.052003][ C1] [ 196.052017][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11006bdb151 [ 196.052032][ C1] RDX: ffff88801c325178 RSI: ffffffff8a71cdd0 RDI: ffffffff90bb1fa0 [ 196.052097][ C1] RBP: ffff888035ed8a70 R08: 0000000000000005 R09: 0000000000000000 [ 196.106881][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88801c325000 [ 196.120893][ C1] R13: 1ffff920000d418f R14: ffffffff81ce9c10 R15: 0000000000000001 [ 196.124318][ C1] FS: 0000000000000000(0000) GS:ffff8880d66b9000(0000) knlGS:0000000000000000 [ 196.127965][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.144159][ C1] CR2: 0000200000001000 CR3: 000000000e392000 CR4: 0000000000352ef0 [ 196.147841][ C1] Call Trace: [ 196.149357][ C1] [ 196.163689][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 196.166280][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 196.169505][ C1] call_timer_fn+0x19a/0x590 [ 196.172275][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 196.175698][ C1] ? __run_timers+0x560/0xac0 [ 196.177818][ C1] ? __run_timers+0x560/0xac0 [ 196.179905][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 196.197666][ C1] __run_timers+0x570/0xac0 [ 196.200176][ C1] ? __pfx___run_timers+0x10/0x10 [ 196.202153][ C1] ? handle_edge_irq+0x173/0x970 [ 196.204091][ C1] run_timer_base+0x114/0x190 [ 196.205873][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 196.208206][ C1] run_timer_softirq+0x1a/0x50 [ 196.223353][ C1] handle_softirqs+0x1ea/0x910 [ 196.225506][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 196.228065][ C1] __irq_exit_rcu+0xef/0x150 [ 196.230292][ C1] irq_exit_rcu+0x9/0x30 [ 196.232195][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 196.234670][ C1] [ 196.235957][ C1] [ 196.237320][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.252255][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 196.254683][ C1] Code: 96 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 fa 10 00 fb f4 7c 34 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 196.271388][ C1] RSP: 0018:ffffc90000177df0 EFLAGS: 00000202 [ 196.274350][ C1] RAX: 000000000009c819 RBX: ffff88801e2d2480 RCX: ffffffff8b7a84b5 [ 196.292299][ C1] RDX: 0000000000000000 RSI: ffffffff8dc522a0 RDI: ffffffff8bfaa9a0 [ 196.296286][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100d4a6745 [ 196.300743][ C1] R10: ffff88806a533a2b R11: 0000000000000000 R12: ffffed1003c5a490 [ 196.303836][ C1] R13: 0000000000000001 R14: ffffffff90b827d0 R15: 0000000000000000 [ 196.306821][ C1] ? ct_kernel_exit+0x125/0x180 [ 196.323673][ C1] default_idle+0x9/0x10 [ 196.326045][ C1] default_idle_call+0x6c/0xb0 [ 196.328618][ C1] do_idle+0x35b/0x4b0 [ 196.330600][ C1] ? __pfx_do_idle+0x10/0x10 [ 196.332717][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.334775][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 196.337425][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 196.355872][ C1] cpu_startup_entry+0x4f/0x60 [ 196.358007][ C1] start_secondary+0x21d/0x2d0 [ 196.360384][ C1] ? __pfx_start_secondary+0x10/0x10 [ 196.362828][ C1] common_startup_64+0x13e/0x148 [ 196.365277][ C1] [ 196.366832][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.369885][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 196.387274][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.400715][ C1] Call Trace: [ 196.401995][ C1] [ 196.403023][ C1] dump_stack_lvl+0x100/0x190 [ 196.404737][ C1] vpanic+0x20d/0x630 [ 196.406192][ C1] panic+0xd1/0xd1 [ 196.407588][ C1] ? __pfx_panic+0x10/0x10 [ 196.409140][ C1] ? check_panic_on_warn+0x1f/0x90 [ 196.410981][ C1] check_panic_on_warn.cold+0x19/0x34 [ 196.413062][ C1] ? __queue_work+0xcbb/0x10f0 [ 196.414885][ C1] __warn.cold+0x191/0x2f8 [ 196.416567][ C1] __report_bug+0x296/0x3d0 [ 196.432157][ C1] ? __queue_work+0xcbb/0x10f0 [ 196.433980][ C1] ? __pfx___report_bug+0x10/0x10 [ 196.435940][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 196.438133][ C1] ? __resched_curr+0xfd/0x3b0 [ 196.444500][ C1] ? look_up_lock_class+0x64/0x120 [ 196.450055][ C1] ? __pfx___resched_curr+0x10/0x10 [ 196.461528][ C1] report_bug_entry+0xe1/0x290 [ 196.463793][ C1] ? __queue_work+0xcbf/0x10f0 [ 196.465892][ C1] handle_bug+0x1c9/0x2a0 [ 196.467718][ C1] exc_invalid_op+0x17/0x50 [ 196.469550][ C1] asm_exc_invalid_op+0x1a/0x20 [ 196.471446][ C1] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 196.473486][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d 95 94 ec 0e 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 62 8e 38 00 90 0f 0b 90 e9 ff f5 [ 196.497392][ C1] RSP: 0018:ffffc900006a0bf0 EFLAGS: 00010046 [ 196.499981][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11006bdb151 [ 196.514396][ C1] RDX: ffff88801c325178 RSI: ffffffff8a71cdd0 RDI: ffffffff90bb1fa0 [ 196.518281][ C1] RBP: ffff888035ed8a70 R08: 0000000000000005 R09: 0000000000000000 [ 196.536260][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88801c325000 [ 196.539721][ C1] R13: 1ffff920000d418f R14: ffffffff81ce9c10 R15: 0000000000000001 [ 196.543645][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 196.546167][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 196.548533][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 196.550873][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 196.566189][ C1] call_timer_fn+0x19a/0x590 [ 196.568690][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 196.570962][ C1] ? __run_timers+0x560/0xac0 [ 196.573081][ C1] ? __run_timers+0x560/0xac0 [ 196.575110][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 196.585352][ C1] __run_timers+0x570/0xac0 [ 196.587402][ C1] ? __pfx___run_timers+0x10/0x10 [ 196.594323][ C1] ? handle_edge_irq+0x173/0x970 [ 196.596620][ C1] run_timer_base+0x114/0x190 [ 196.598678][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 196.605805][ C1] run_timer_softirq+0x1a/0x50 [ 196.608108][ C1] handle_softirqs+0x1ea/0x910 [ 196.611211][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 196.614430][ C1] __irq_exit_rcu+0xef/0x150 [ 196.616321][ C1] irq_exit_rcu+0x9/0x30 [ 196.617961][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 196.620931][ C1] [ 196.622343][ C1] [ 196.623969][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.627183][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 196.630053][ C1] Code: 96 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 fa 10 00 fb f4 7c 34 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 196.638169][ C1] RSP: 0018:ffffc90000177df0 EFLAGS: 00000202 [ 196.641624][ C1] RAX: 000000000009c819 RBX: ffff88801e2d2480 RCX: ffffffff8b7a84b5 [ 196.644932][ C1] RDX: 0000000000000000 RSI: ffffffff8dc522a0 RDI: ffffffff8bfaa9a0 [ 196.648402][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100d4a6745 [ 196.683599][ C1] R10: ffff88806a533a2b R11: 0000000000000000 R12: ffffed1003c5a490 [ 196.687234][ C1] R13: 0000000000000001 R14: ffffffff90b827d0 R15: 0000000000000000 [ 196.696547][ C1] ? ct_kernel_exit+0x125/0x180 [ 196.698724][ C1] default_idle+0x9/0x10 [ 196.711792][ C1] default_idle_call+0x6c/0xb0 [ 196.714258][ C1] do_idle+0x35b/0x4b0 [ 196.716128][ C1] ? __pfx_do_idle+0x10/0x10 [ 196.718188][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.721545][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 196.724176][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 196.727140][ C1] cpu_startup_entry+0x4f/0x60 [ 196.730463][ C1] start_secondary+0x21d/0x2d0 [ 196.733882][ C1] ? __pfx_start_secondary+0x10/0x10 [ 196.737342][ C1] common_startup_64+0x13e/0x148 [ 196.740640][ C1] [ 196.751903][ C1] Kernel Offset: disabled [ 196.754446][ C1] Rebooting in 86400 seconds..