last executing test programs: 21.686398187s ago: executing program 0 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) fchdir(r5) linkat(r5, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000200)={0xf0, 0x200, 0x300, 0x1000, 0xfffffff0, 0x100, 0x10, 0x0, {0x7e, 0x2, 0x1}, {0xfffffffc, 0x5, 0x1}, {0x80, 0xfffffffb, 0x1}, {0xfffffffe, 0x5}, 0x3, 0x2, 0x3f, 0xffffffff, 0x0, 0x9, 0x5, 0x8c, 0xf, 0x80000001, 0x0, 0xb35e, 0x878bd5956ea27228, 0x200, 0x0, 0xc}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044941, &(0x7f0000003d00)) 16.168047309s ago: executing program 0 (id=904): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x1, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sysfs$1(0x1, &(0x7f0000000080)='@\x00') r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x40000010) recvmmsg(r2, &(0x7f00000034c0)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/198, 0xc6}], 0x3}, 0x1}, {{&(0x7f0000000440)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/90, 0x5a}, {&(0x7f0000001ac0)=""/162, 0xa2}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c80)=""/132, 0x84}], 0x8, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000002e40)=""/159, 0x9f}, {&(0x7f0000002f00)=""/117, 0x75}, {&(0x7f0000002f80)=""/243, 0xf3}], 0x3, &(0x7f0000003080)=""/207, 0xcf}, 0x6}, {{&(0x7f00000035c0)=@caif=@dgm, 0x80, &(0x7f0000003440)=[{&(0x7f0000003200)=""/24, 0x18}, {&(0x7f0000003240)=""/124, 0x7c}, {&(0x7f0000003180)=""/115, 0x73}, {&(0x7f0000003380)=""/137, 0x89}], 0x4, &(0x7f0000003480)=""/7, 0x7}, 0xfd1}], 0x4, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x7fffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000600000b00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 12.009587871s ago: executing program 3 (id=917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0xfffffffffffffc01, 0x0) 11.025657065s ago: executing program 3 (id=920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1, 0xb, 0x3) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000c646355ee986b1b20e92da440000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4100) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x3700, &(0x7f0000000340)={0x0, 0x5565, 0x4, 0x0, 0x10a}, 0x0, 0x0) 10.091829161s ago: executing program 3 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e2200004e2480020a00005000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="8a", 0x1, 0x8072, &(0x7f0000000080)={0xa, 0x3, 0x1, @remote, 0x6}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x101002, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x10000008}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) 9.514002326s ago: executing program 3 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) fchdir(r5) linkat(r5, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000200)={0xf0, 0x200, 0x300, 0x1000, 0xfffffff0, 0x100, 0x10, 0x0, {0x7e, 0x2, 0x1}, {0xfffffffc, 0x5, 0x1}, {0x80, 0xfffffffb, 0x1}, {0xfffffffe, 0x5}, 0x3, 0x2, 0x3f, 0xffffffff, 0x0, 0x9, 0x5, 0x8c, 0xf, 0x80000001, 0x0, 0xb35e, 0x878bd5956ea27228, 0x200, 0x0, 0xc}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044941, &(0x7f0000003d00)) 9.121428845s ago: executing program 1 (id=928): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300f76ec115f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 8.406617034s ago: executing program 2 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 8.198595043s ago: executing program 1 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r5, 0xfffffffffffffc01, 0x0) 8.166869886s ago: executing program 0 (id=931): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) prctl$PR_GET_IO_FLUSHER(0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) 7.404297659s ago: executing program 2 (id=932): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0x83, 0x55, 0x0, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r1, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r4 = syz_usb_connect(0x6, 0x24, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/190, 0xbe}], 0x1, &(0x7f0000000180)}, 0x8}, {{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f0000000640)}, {&(0x7f00000006c0)=""/94, 0x5e}, {&(0x7f0000000740)=""/169, 0xa9}, {&(0x7f00000008c0)=""/86, 0x56}], 0x5, &(0x7f00000009c0)=""/179, 0xb3}, 0xc}], 0x2, 0x2, 0x0) r7 = gettid() futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r7, 0x11) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) 7.174729739s ago: executing program 1 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) fchdir(r4) linkat(r4, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000200)={0xf0, 0x200, 0x300, 0x1000, 0xfffffff0, 0x100, 0x10, 0x0, {0x7e, 0x2, 0x1}, {0xfffffffc, 0x5, 0x1}, {0x80, 0xfffffffb, 0x1}, {0xfffffffe, 0x5}, 0x3, 0x2, 0x3f, 0xffffffff, 0x0, 0x9, 0x5, 0x8c, 0xf, 0x80000001, 0x0, 0xb35e, 0x878bd5956ea27228, 0x200, 0x0, 0xc}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044941, &(0x7f0000003d00)) 6.499069797s ago: executing program 4 (id=934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1, 0xb, 0x3) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000c646355ee986b1b20e92da440000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4100) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x3700, &(0x7f0000000340)={0x0, 0x5565, 0x4, 0x0, 0x10a}, 0x0, 0x0) 5.986130346s ago: executing program 0 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x8, 0xffffffff, 0x138}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_kthread_stop_ret\x00', r8, 0x0, 0xfffffffffffffffb}, 0x18) r10 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0xffffffffffffff39, 0x0}, 0x29) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r11, 0x5760, 0x5e) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 5.566122455s ago: executing program 3 (id=936): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000017000000003800000008000300", @ANYRES32=r4, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x600d0}, 0x0) 5.549417188s ago: executing program 4 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e2200004e2480020a00005000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x101002, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000008}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) 5.090848704s ago: executing program 3 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) fchdir(r5) linkat(r5, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044941, &(0x7f0000003d00)) 5.052320928s ago: executing program 4 (id=939): socket(0x400000000010, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) setgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffe93, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22000005}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000380)=@v={0x93, 0x7, 0x0, 0x15, @MIDI_NOTEON=@special, 0x9a, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f1", 0x8) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 4.975983171s ago: executing program 0 (id=940): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) 3.99703035s ago: executing program 4 (id=941): openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.798815873s ago: executing program 1 (id=942): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300f76ec115f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 3.68836196s ago: executing program 4 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r5, 0xfffffffffffffc01, 0x0) 2.627062173s ago: executing program 4 (id=944): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$rtc(0x0, 0xc62, 0x80080) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x40, 0x15, 0x2, "f61b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r2, &(0x7f0000000cc0)=""/144, 0x90) 2.212463181s ago: executing program 1 (id=945): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) prctl$PR_GET_IO_FLUSHER(0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) 2.050657685s ago: executing program 2 (id=946): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x20, 0x0, {}, {}, {}, {0x0, 0x0, 0x20}, 0x0, 0x2, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (fail_nth: 3) 1.1791439s ago: executing program 2 (id=947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000000)={0xfc, {"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", 0xfffffffffffffe76}}, 0x104b) (fail_nth: 5) 1.115645533s ago: executing program 1 (id=948): socket(0x400000000010, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) setgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffe93, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22000005}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000380)=@v={0x93, 0x7, 0x0, 0x15, @MIDI_NOTEON=@special, 0x9a, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$alg(0x26, 0x5, 0x0) listen(r5, 0x3) accept(r5, &(0x7f0000000040)=@qipcrtr, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 690.560034ms ago: executing program 2 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x101002, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000008}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) 546.094155ms ago: executing program 2 (id=950): socket(0x400000000010, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20000008b}, 0x0) setgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffe93, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22000005}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000380)=@v={0x93, 0x7, 0x0, 0x15, @MIDI_NOTEON=@special, 0x9a, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f1", 0x8) accept(r5, &(0x7f0000000040)=@qipcrtr, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 0s ago: executing program 0 (id=951): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$video(0x0, 0x3f, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000340)={0x18, 0x0, {0x15, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6tnl0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001800190e"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x60}}, 0x40000) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4008010) kernel console output (not intermixed with test programs): to 7 [ 78.608757][ T5870] pwc: recv_control_msg error -32 req 02 val 2000 [ 78.628621][ T5870] pwc: recv_control_msg error -32 req 02 val 2100 [ 78.661358][ T5870] pwc: recv_control_msg error -32 req 04 val 1500 [ 78.664811][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.874830][ T973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 78.908999][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.983494][ T973] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 78.998391][ T973] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.006718][ T973] usb 1-1: Manufacturer: syz [ 79.038976][ T973] usb 1-1: config 0 descriptor?? [ 79.380693][ T973] rc_core: IR keymap rc-hauppauge not found [ 79.394934][ T973] Registered IR keymap rc-empty [ 79.420138][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.444989][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.457594][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.478075][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.556924][ T973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 79.874918][ T30] audit: type=1400 audit(1744009945.036:218): avc: denied { read write } for pid=6156 comm="syz.1.57" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.898286][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.355606][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 80.363079][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 80.370231][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 80.377402][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 80.384168][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 80.392096][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 80.400413][ T5870] pwc: Registered as video103. [ 80.408403][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 80.429041][ T5870] usb 4-1: USB disconnect, device number 3 [ 80.437745][ T30] audit: type=1400 audit(1744009945.036:219): avc: denied { open } for pid=6156 comm="syz.1.57" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.461570][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.48'. [ 80.483501][ T30] audit: type=1400 audit(1744009945.906:220): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2825 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.535957][ T973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 80.574284][ T6158] input: syz0 as /devices/virtual/input/input13 [ 80.743598][ T30] audit: type=1400 audit(1744009946.006:221): avc: denied { ioctl } for pid=6156 comm="syz.1.57" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.855418][ T6174] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 80.895496][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.935458][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.955220][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.975141][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.008493][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.120728][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.145362][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.165379][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.185349][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.265794][ T973] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.308577][ T973] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 81.344178][ T973] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 81.413877][ T973] usb 1-1: USB disconnect, device number 5 [ 81.498649][ T30] audit: type=1400 audit(1744009946.976:222): avc: denied { getopt } for pid=6181 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.091901][ T30] audit: type=1400 audit(1744009947.556:223): avc: denied { ioctl } for pid=6192 comm="syz.1.65" path="socket:[8492]" dev="sockfs" ino=8492 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.116050][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.109003][ T6205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.420934][ T30] audit: type=1400 audit(1744009948.606:224): avc: denied { setopt } for pid=6202 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.440381][ T5825] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 83.440446][ T5825] Bluetooth: hci0: Injecting HCI hardware error event [ 83.441338][ T5834] Bluetooth: hci0: hardware error 0x00 [ 83.690988][ T6209] tmpfs: Bad value for 'mpol' [ 83.815252][ T5922] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.831368][ T30] audit: type=1400 audit(1744009949.306:225): avc: denied { getopt } for pid=6210 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.907306][ T30] audit: type=1400 audit(1744009949.386:226): avc: denied { create } for pid=6210 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.953064][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 83.965275][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 83.991684][ T5922] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 84.022610][ T5922] usb 3-1: config 0 has no interface number 0 [ 84.102241][ T30] audit: type=1400 audit(1744009949.556:227): avc: denied { read } for pid=6214 comm="syz.3.72" path="socket:[8545]" dev="sockfs" ino=8545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.160347][ T5922] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 84.172748][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.182156][ T5922] usb 3-1: Product: syz [ 84.189571][ T5922] usb 3-1: Manufacturer: syz [ 84.214565][ T5922] usb 3-1: SerialNumber: syz [ 84.300526][ T6220] capability: warning: `syz.3.75' uses 32-bit capabilities (legacy support in use) [ 84.378959][ T6229] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 84.388798][ T5922] usb 3-1: config 0 descriptor?? [ 84.399204][ T5922] hub 3-1:0.89: bad descriptor, ignoring hub [ 84.408569][ T5922] hub 3-1:0.89: probe with driver hub failed with error -5 [ 84.423288][ T5922] option 3-1:0.89: GSM modem (1-port) converter detected [ 84.894640][ T5922] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 84.930000][ T5922] usb 3-1: USB disconnect, device number 5 [ 84.950951][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 84.950964][ T30] audit: type=1400 audit(1744009950.426:229): avc: denied { name_bind } for pid=6232 comm="syz.3.77" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 85.005068][ T30] audit: type=1400 audit(1744009950.466:230): avc: denied { write } for pid=6232 comm="syz.3.77" name="tcp6" dev="proc" ino=4026533444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.365480][ T30] audit: type=1400 audit(1744009950.606:231): avc: denied { create } for pid=6232 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.386236][ T5922] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 85.434210][ T5922] option 3-1:0.89: device disconnected [ 85.691060][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 86.144526][ T6246] netlink: 'syz.4.80': attribute type 5 has an invalid length. [ 86.514253][ T6257] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 86.524064][ T6257] cramfs: wrong magic [ 86.820274][ T30] audit: type=1400 audit(1744009952.216:232): avc: denied { unlink } for pid=6242 comm="syz.3.82" name="#1" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.874883][ T5870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 86.887617][ T30] audit: type=1400 audit(1744009952.256:233): avc: denied { mount } for pid=6242 comm="syz.3.82" name="/" dev="overlay" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.048817][ T5870] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 87.060070][ T5870] usb 3-1: config 0 has no interface number 0 [ 87.082761][ T5870] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 87.102114][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.112194][ T5870] usb 3-1: Product: syz [ 87.120318][ T5870] usb 3-1: Manufacturer: syz [ 87.125091][ T5933] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.144783][ T5870] usb 3-1: SerialNumber: syz [ 87.185410][ T5870] usb 3-1: config 0 descriptor?? [ 87.209614][ T5870] usb-storage 3-1:0.21: USB Mass Storage device detected [ 87.221763][ T30] audit: type=1400 audit(1744009952.696:234): avc: denied { mount } for pid=6260 comm="syz.0.86" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.228339][ T5870] usb-storage 3-1:0.21: device ignored [ 87.291585][ T5933] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 87.326809][ T5933] usb 5-1: config 0 has no interface number 0 [ 87.334699][ T5933] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 87.343790][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.365456][ T30] audit: type=1400 audit(1744009952.836:235): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.385872][ T5933] usb 5-1: Product: syz [ 87.390431][ T5933] usb 5-1: Manufacturer: syz [ 87.408914][ T5933] usb 5-1: SerialNumber: syz [ 87.423394][ T5933] usb 5-1: config 0 descriptor?? [ 87.432373][ T5922] usb 3-1: USB disconnect, device number 6 [ 87.434357][ T5933] usb-storage 5-1:0.21: USB Mass Storage device detected [ 87.467627][ T5933] usb-storage 5-1:0.21: device ignored [ 87.722683][ T30] audit: type=1400 audit(1744009953.196:236): avc: denied { bind } for pid=6272 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.845481][ T5922] usb 5-1: USB disconnect, device number 5 [ 88.038171][ T6284] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 88.071449][ T30] audit: type=1400 audit(1744009953.546:237): avc: denied { append } for pid=6278 comm="syz.1.89" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 88.151252][ T6279] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3435572954 (6871145908 ns) > initial count (1845465872 ns). Using initial count to start timer. [ 88.179636][ T30] audit: type=1400 audit(1744009953.566:238): avc: denied { map } for pid=6278 comm="syz.1.89" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 88.255317][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 88.267569][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 88.416508][ T6292] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 89.310332][ T6310] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 89.319439][ T6310] cramfs: wrong magic [ 89.756026][ T5870] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.915269][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 89.927323][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 89.937681][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.947007][ T5870] usb 4-1: Product: syz [ 89.951498][ T5870] usb 4-1: Manufacturer: syz [ 89.956335][ T5870] usb 4-1: SerialNumber: syz [ 89.985350][ T5870] usb 4-1: config 0 descriptor?? [ 90.067991][ T5870] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 90.117357][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 90.117402][ T30] audit: type=1400 audit(1744009955.596:243): avc: denied { create } for pid=6313 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.180153][ T30] audit: type=1400 audit(1744009955.596:244): avc: denied { create } for pid=6313 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.199458][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.251802][ T30] audit: type=1400 audit(1744009955.596:245): avc: denied { connect } for pid=6313 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.327596][ T5870] gspca_sunplus: reg_w_riv err -71 [ 90.333942][ T5870] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 90.383690][ T30] audit: type=1400 audit(1744009955.596:246): avc: denied { ioctl } for pid=6313 comm="syz.1.99" path="socket:[9406]" dev="sockfs" ino=9406 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.425310][ T5870] usb 4-1: USB disconnect, device number 4 [ 90.477547][ T30] audit: type=1400 audit(1744009955.596:247): avc: denied { read write } for pid=6313 comm="syz.1.99" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.500488][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.515084][ T30] audit: type=1400 audit(1744009955.596:248): avc: denied { open } for pid=6313 comm="syz.1.99" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.581968][ T30] audit: type=1400 audit(1744009955.596:249): avc: denied { ioctl } for pid=6313 comm="syz.1.99" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.942334][ T30] audit: type=1400 audit(1744009955.596:250): avc: denied { write } for pid=6313 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.018494][ T30] audit: type=1400 audit(1744009955.776:251): avc: denied { read append } for pid=6316 comm="syz.0.100" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.110461][ T30] audit: type=1400 audit(1744009955.776:252): avc: denied { open } for pid=6316 comm="syz.0.100" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.134014][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.161228][ T6331] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.303085][ T6338] bridge: RTM_NEWNEIGH with invalid ether address [ 91.312193][ T6343] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 91.422880][ T24] IPVS: starting estimator thread 0... [ 91.435371][ T973] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 91.515500][ T6349] IPVS: using max 41 ests per chain, 98400 per kthread [ 91.585153][ T973] usb 5-1: Using ep0 maxpacket: 8 [ 91.593200][ T973] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 91.601998][ T973] usb 5-1: config 179 has no interface number 0 [ 91.610656][ T973] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 91.622514][ T973] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 91.634651][ T973] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.646560][ T5922] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.656370][ T973] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 91.770195][ T973] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 91.785909][ T973] usb 5-1: config 179 interface 65 has no altsetting 0 [ 91.802459][ T973] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 91.812816][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.842803][ T5922] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 91.902628][ T5922] usb 1-1: config 0 has no interface number 0 [ 91.913109][ T973] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input14 [ 91.936445][ T5922] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 91.948809][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.961597][ T5922] usb 1-1: Product: syz [ 91.966561][ T5922] usb 1-1: Manufacturer: syz [ 91.972644][ T5922] usb 1-1: SerialNumber: syz [ 91.984497][ T5922] usb 1-1: config 0 descriptor?? [ 91.998109][ T5922] usb-storage 1-1:0.21: USB Mass Storage device detected [ 92.021082][ T5922] usb-storage 1-1:0.21: device ignored [ 92.098726][ T5913] usb 5-1: USB disconnect, device number 6 [ 92.121270][ T5913] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 92.252994][ T5870] usb 1-1: USB disconnect, device number 6 [ 93.889544][ T6393] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 95.265605][ T6401] tipc: Started in network mode [ 95.271232][ T6401] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 95.278755][ T6401] tipc: Enabled bearer , priority 0 [ 95.736575][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 95.746393][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 95.746406][ T30] audit: type=1400 audit(1744009961.216:307): avc: denied { create } for pid=6408 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.955291][ T30] audit: type=1400 audit(1744009961.216:308): avc: denied { write } for pid=6408 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.978448][ T30] audit: type=1400 audit(1744009961.456:309): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.021361][ T30] audit: type=1400 audit(1744009961.456:310): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.142082][ T30] audit: type=1400 audit(1744009961.456:311): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.403408][ T24] tipc: Node number set to 11578026 [ 96.600478][ T30] audit: type=1400 audit(1744009962.066:312): avc: denied { bind } for pid=6424 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.706933][ T30] audit: type=1400 audit(1744009962.076:313): avc: denied { node_bind } for pid=6424 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 97.554082][ T30] audit: type=1400 audit(1744009963.016:314): avc: denied { append } for pid=6433 comm="syz.4.135" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.577167][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.653768][ T6439] FAULT_INJECTION: forcing a failure. [ 97.653768][ T6439] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.667117][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.1.134 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 97.667139][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.667146][ T6439] Call Trace: [ 97.667151][ T6439] [ 97.667156][ T6439] dump_stack_lvl+0x16c/0x1f0 [ 97.667173][ T6439] should_fail_ex+0x512/0x640 [ 97.667187][ T6439] _copy_from_user+0x2e/0xd0 [ 97.667200][ T6439] snd_pcm_oss_write2+0x1c2/0x410 [ 97.667217][ T6439] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 97.667231][ T6439] ? snd_pcm_oss_write+0x4a2/0xa10 [ 97.667249][ T6439] snd_pcm_oss_write+0x711/0xa10 [ 97.667266][ T6439] ? security_file_permission+0x71/0x210 [ 97.667284][ T6439] vfs_write+0x25c/0x1180 [ 97.667293][ T6439] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 97.667311][ T6439] ? __pfx_vfs_write+0x10/0x10 [ 97.667318][ T6439] ? find_held_lock+0x2b/0x80 [ 97.667332][ T6439] ? __fget_files+0x204/0x3c0 [ 97.667343][ T6439] ? __fget_files+0x20e/0x3c0 [ 97.667355][ T6439] ksys_write+0x12a/0x240 [ 97.667364][ T6439] ? __pfx_ksys_write+0x10/0x10 [ 97.667376][ T6439] do_syscall_64+0xcd/0x260 [ 97.667391][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.667401][ T6439] RIP: 0033:0x7f1a77f8d169 [ 97.667410][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.667419][ T6439] RSP: 002b:00007f1a78d71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.667428][ T6439] RAX: ffffffffffffffda RBX: 00007f1a781a6160 RCX: 00007f1a77f8d169 [ 97.667434][ T6439] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000006 [ 97.667439][ T6439] RBP: 00007f1a78d71090 R08: 0000000000000000 R09: 0000000000000000 [ 97.667445][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.667450][ T6439] R13: 0000000000000000 R14: 00007f1a781a6160 R15: 00007ffe22723238 [ 97.667462][ T6439] [ 98.079737][ T30] audit: type=1400 audit(1744009963.556:315): avc: denied { getopt } for pid=6445 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.104247][ T30] audit: type=1400 audit(1744009963.556:316): avc: denied { create } for pid=6445 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.806021][ T6454] geneve2: entered promiscuous mode [ 98.811271][ T6454] geneve2: entered allmulticast mode [ 100.314095][ T6483] Zero length message leads to an empty skb [ 100.740692][ T5913] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.909269][ T5913] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 100.953594][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.985729][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.993745][ T5913] usb 2-1: Product: syz [ 101.003840][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 101.003853][ T30] audit: type=1400 audit(1744009966.476:324): avc: denied { connect } for pid=6500 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.016452][ T5913] usb 2-1: Manufacturer: syz [ 101.050401][ T5913] usb 2-1: SerialNumber: syz [ 101.067673][ T6480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.074850][ T5933] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.326547][ T5913] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 101.384959][ T5933] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.410727][ T5933] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.644601][ T5933] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.808184][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.826612][ T5870] usb 2-1: USB disconnect, device number 3 [ 101.863272][ T5870] usblp0: removed [ 101.902857][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.966532][ T5933] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.018471][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.053402][ T5933] usb 5-1: Product: syz [ 102.063791][ T5933] usb 5-1: Manufacturer: syz [ 102.089610][ T5933] cdc_wdm 5-1:1.0: skipping garbage [ 102.095566][ T5933] cdc_wdm 5-1:1.0: skipping garbage [ 102.105344][ T5933] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 102.111330][ T5933] cdc_wdm 5-1:1.0: Unknown control protocol [ 102.181729][ T30] audit: type=1400 audit(1744009967.656:325): avc: denied { block_suspend } for pid=6516 comm="syz.3.161" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.176976][ T6522] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 103.234238][ T6524] serio: Serial port ptm0 [ 103.327862][ T6531] syz.2.165 uses obsolete (PF_INET,SOCK_PACKET) [ 103.899807][ T6532] veth1_vlan: entered allmulticast mode [ 104.282814][ T5933] usb 5-1: USB disconnect, device number 7 [ 106.104615][ T30] audit: type=1400 audit(1744009971.136:326): avc: denied { accept } for pid=6550 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.207712][ T6559] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 106.507823][ T30] audit: type=1400 audit(1744009971.986:327): avc: denied { mount } for pid=6561 comm="syz.2.175" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 106.529550][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.562016][ T30] audit: type=1400 audit(1744009972.036:328): avc: denied { create } for pid=6564 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.617582][ T30] audit: type=1400 audit(1744009972.066:329): avc: denied { ioctl } for pid=6564 comm="syz.1.177" path="socket:[10244]" dev="sockfs" ino=10244 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.709539][ T30] audit: type=1400 audit(1744009972.186:330): avc: denied { create } for pid=6566 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.762845][ T6573] process 'syz.1.181' launched '/dev/fd/6' with NULL argv: empty string added [ 106.766269][ T30] audit: type=1400 audit(1744009972.236:331): avc: denied { execute } for pid=6568 comm="syz.1.181" dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.945686][ T30] audit: type=1400 audit(1744009972.266:332): avc: denied { execute_no_trans } for pid=6568 comm="syz.1.181" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.982518][ T30] audit: type=1400 audit(1744009972.316:333): avc: denied { mount } for pid=6570 comm="syz.3.179" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.504280][ T30] audit: type=1400 audit(1744009972.976:334): avc: denied { shutdown } for pid=6592 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.575425][ T30] audit: type=1400 audit(1744009972.996:335): avc: denied { name_connect } for pid=6592 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 107.595410][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.114858][ T5913] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.147540][ T5913] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 110.181538][ T5913] usb 4-1: config 0 has no interface number 0 [ 110.245018][ T5913] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 110.265261][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.701850][ T5913] usb 4-1: Product: syz [ 110.713155][ T5913] usb 4-1: Manufacturer: syz [ 110.717988][ T5913] usb 4-1: SerialNumber: syz [ 110.725522][ T5913] usb 4-1: config 0 descriptor?? [ 110.796024][ T5913] usb-storage 4-1:0.21: USB Mass Storage device detected [ 110.828541][ T5913] usb-storage 4-1:0.21: device ignored [ 111.020010][ T6646] Bluetooth: MGMT ver 1.23 [ 111.030099][ T5913] usb 4-1: USB disconnect, device number 5 [ 111.160738][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 111.160752][ T30] audit: type=1400 audit(1744009976.636:340): avc: denied { create } for pid=6627 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 111.417241][ T30] audit: type=1400 audit(1744009976.676:341): avc: denied { write } for pid=6627 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 111.554991][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 111.699265][ T30] audit: type=1400 audit(1744009976.766:342): avc: denied { read write } for pid=6652 comm="syz.4.209" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.736350][ T30] audit: type=1400 audit(1744009976.766:343): avc: denied { open } for pid=6652 comm="syz.4.209" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.759538][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.782988][ T30] audit: type=1400 audit(1744009976.966:344): avc: denied { write } for pid=6657 comm="syz.0.210" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.814919][ T10] usb 5-1: device descriptor read/64, error -71 [ 112.005933][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 112.395183][ T30] audit: type=1400 audit(1744009977.846:345): avc: denied { lock } for pid=6662 comm="syz.0.213" path="socket:[9951]" dev="sockfs" ino=9951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.534772][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 112.904589][ T10] usb 5-1: device descriptor read/64, error -71 [ 113.031712][ T10] usb usb5-port1: attempt power cycle [ 113.051508][ T6683] pim6reg1: entered promiscuous mode [ 113.095655][ T6683] pim6reg1: entered allmulticast mode [ 113.570222][ T30] audit: type=1400 audit(1744009979.046:346): avc: denied { checkpoint_restore } for pid=6687 comm="syz.3.220" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.744814][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 113.931242][ T10] usb 5-1: device descriptor read/8, error -71 [ 114.644751][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 114.748527][ T30] audit: type=1400 audit(1744009980.206:347): avc: denied { write } for pid=6713 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.996193][ T10] usb 5-1: device not accepting address 11, error -71 [ 115.004047][ T10] usb usb5-port1: unable to enumerate USB device [ 115.989469][ T30] audit: type=1400 audit(1744009981.436:348): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.180581][ T30] audit: type=1400 audit(1744009981.446:349): avc: denied { bind } for pid=6728 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 116.448898][ T30] audit: type=1400 audit(1744009981.446:350): avc: denied { name_bind } for pid=6728 comm="syz.3.235" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 116.471252][ T30] audit: type=1400 audit(1744009981.446:351): avc: denied { node_bind } for pid=6728 comm="syz.3.235" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 116.492449][ T30] audit: type=1400 audit(1744009981.446:352): avc: denied { listen } for pid=6728 comm="syz.3.235" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 116.552611][ T30] audit: type=1400 audit(1744009981.446:353): avc: denied { connect } for pid=6728 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 117.119449][ T30] audit: type=1400 audit(1744009981.446:354): avc: denied { name_connect } for pid=6728 comm="syz.3.235" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 117.433968][ T30] audit: type=1400 audit(1744009981.466:355): avc: denied { bind } for pid=6700 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.493243][ T30] audit: type=1400 audit(1744009981.546:356): avc: denied { write } for pid=6728 comm="syz.3.235" laddr=172.20.20.170 lport=40006 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 117.738964][ T30] audit: type=1400 audit(1744009981.706:357): avc: denied { lock } for pid=6720 comm="syz.4.233" path="socket:[10511]" dev="sockfs" ino=10511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 118.640919][ T30] audit: type=1400 audit(1744009983.556:358): avc: denied { create } for pid=6741 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.878825][ T6755] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 120.929813][ T6801] sp0: Synchronizing with TNC [ 121.788977][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 121.813402][ T30] audit: type=1400 audit(1744009987.266:364): avc: denied { connect } for pid=6809 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.604346][ T30] audit: type=1400 audit(1744009988.656:365): avc: denied { setopt } for pid=6837 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.630383][ T30] audit: type=1400 audit(1744009988.656:366): avc: denied { ioctl } for pid=6837 comm="syz.0.270" path="socket:[10158]" dev="sockfs" ino=10158 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.655108][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.033317][ T6856] netlink: 104 bytes leftover after parsing attributes in process `syz.1.276'. [ 124.176320][ T30] audit: type=1400 audit(1744009989.656:367): avc: denied { write } for pid=6861 comm="syz.2.279" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.317740][ T30] audit: type=1400 audit(1744009989.796:368): avc: denied { listen } for pid=6869 comm="syz.2.283" lport=44471 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.371247][ T30] audit: type=1400 audit(1744009989.846:369): avc: denied { accept } for pid=6869 comm="syz.2.283" lport=44471 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.557983][ T6877] block nbd1: NBD_DISCONNECT [ 125.554815][ T30] audit: type=1400 audit(1744009990.996:370): avc: denied { setopt } for pid=6893 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.708931][ T30] audit: type=1400 audit(1744009991.006:371): avc: denied { bind } for pid=6893 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.974977][ T6910] capability: warning: `syz.0.296' uses deprecated v2 capabilities in a way that may be insecure [ 126.270778][ T30] audit: type=1400 audit(1744009991.696:372): avc: denied { nlmsg_read } for pid=6908 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.344412][ T6913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6913 comm=syz.0.296 [ 126.451266][ T30] audit: type=1400 audit(1744009991.926:373): avc: denied { read } for pid=6908 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 127.752576][ T30] audit: type=1400 audit(1744009993.226:374): avc: denied { name_bind } for pid=6945 comm="syz.4.310" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 127.806725][ T6943] could not allocate digest TFM handle sha224-arm64 [ 127.912444][ T30] audit: type=1400 audit(1744009993.386:375): avc: denied { read } for pid=6952 comm="syz.1.313" lport=57451 faddr=fc02::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.934884][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.796503][ T30] audit: type=1400 audit(1744009994.256:376): avc: denied { create } for pid=6958 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 129.628611][ T30] audit: type=1400 audit(1744009994.266:377): avc: denied { connect } for pid=6958 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 129.648813][ T30] audit: type=1400 audit(1744009994.686:378): avc: denied { listen } for pid=6961 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.675153][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 129.754383][ T30] audit: type=1400 audit(1744009995.076:379): avc: denied { accept } for pid=6958 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.242887][ T30] audit: type=1400 audit(1744009995.516:380): avc: denied { getopt } for pid=6970 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.572610][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 131.078582][ T30] audit: type=1400 audit(1744009996.556:381): avc: denied { bind } for pid=6985 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.128035][ T30] audit: type=1400 audit(1744009996.556:382): avc: denied { write } for pid=6985 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.767881][ T30] audit: type=1400 audit(1744009996.856:383): avc: denied { read write } for pid=6987 comm="syz.2.324" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 132.409503][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.416568][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.931308][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 133.400757][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 133.400787][ T30] audit: type=1400 audit(1744009998.806:387): avc: denied { setopt } for pid=7025 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.540368][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 135.652661][ T7070] ip6gretap1: entered allmulticast mode [ 135.786697][ T7081] sp0: Synchronizing with TNC [ 136.255808][ T30] audit: type=1400 audit(1744010001.726:388): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.305666][ T30] audit: type=1400 audit(1744010001.756:389): avc: denied { read } for pid=5490 comm="dhcpcd" name="n103" dev="tmpfs" ino=3230 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.358113][ T30] audit: type=1400 audit(1744010001.756:390): avc: denied { open } for pid=5490 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=3230 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.448513][ T30] audit: type=1400 audit(1744010001.756:391): avc: denied { getattr } for pid=5490 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=3230 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.545284][ T30] audit: type=1400 audit(1744010001.996:392): avc: denied { write } for pid=7090 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.259549][ T7109] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 137.273101][ T7109] VFS: Can't find a romfs filesystem on dev nullb0. [ 137.273101][ T7109] [ 138.096327][ T30] audit: type=1400 audit(1744010003.116:393): avc: denied { ioctl } for pid=7106 comm="syz.3.368" path="socket:[11594]" dev="sockfs" ino=11594 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.492468][ T30] audit: type=1400 audit(1744010003.966:394): avc: denied { map } for pid=7119 comm="syz.3.372" path="socket:[11628]" dev="sockfs" ino=11628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 139.934892][ T30] audit: type=1400 audit(1744010005.406:395): avc: denied { bind } for pid=7145 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.473015][ T7160] netlink: 64 bytes leftover after parsing attributes in process `syz.0.387'. [ 140.482089][ T30] audit: type=1400 audit(1744010005.946:396): avc: denied { bind } for pid=7159 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.521058][ T7160] netlink: 924 bytes leftover after parsing attributes in process `syz.0.387'. [ 140.542757][ T30] audit: type=1400 audit(1744010005.996:397): avc: denied { watch } for pid=7162 comm="syz.1.389" path="/81" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.620216][ T6359] Bluetooth: hci5: Frame reassembly failed (-84) [ 141.051926][ T7182] netlink: 'syz.1.396': attribute type 11 has an invalid length. [ 142.799466][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 142.812961][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 143.136416][ T7208] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 146.184061][ T7237] xt_CT: No such helper "syz0" [ 146.706955][ T7251] ptrace attach of "./syz-executor exec"[5821] was attempted by ""[7251] [ 147.212040][ T7256] netlink: 'syz.4.419': attribute type 1 has an invalid length. [ 147.330078][ T7265] fuse: root generation should be zero [ 147.875788][ T7276] netlink: 52 bytes leftover after parsing attributes in process `syz.0.425'. [ 148.142242][ T7280] sp0: Synchronizing with TNC [ 150.754428][ T7331] sctp: [Deprecated]: syz.0.441 (pid 7331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.754428][ T7331] Use struct sctp_sack_info instead [ 151.315214][ T30] audit: type=1400 audit(1744010016.766:398): avc: denied { connect } for pid=7342 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.381804][ T30] audit: type=1400 audit(1744010016.776:399): avc: denied { shutdown } for pid=7342 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.002781][ T30] audit: type=1400 audit(1744010017.476:400): avc: denied { remount } for pid=7352 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 152.056111][ T30] audit: type=1400 audit(1744010017.526:401): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 152.258942][ T7360] input: syz0 as /devices/virtual/input/input15 [ 152.628402][ T7364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7364 comm=syz.0.457 [ 152.663286][ T30] audit: type=1400 audit(1744010018.136:402): avc: denied { getopt } for pid=7359 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.275527][ T30] audit: type=1400 audit(1744010018.236:403): avc: denied { name_bind } for pid=7370 comm="syz.0.462" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 156.080342][ T30] audit: type=1400 audit(1744010021.546:404): avc: denied { listen } for pid=7409 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.141485][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 156.156592][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:8 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 156.156618][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.156630][ T5834] Workqueue: hci1 hci_rx_work [ 156.156654][ T5834] Call Trace: [ 156.156660][ T5834] [ 156.156668][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 156.156693][ T5834] sysfs_warn_dup+0x7f/0xa0 [ 156.156712][ T5834] sysfs_create_dir_ns+0x24b/0x2b0 [ 156.156729][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 156.156750][ T5834] ? kobject_namespace+0x97/0x1a0 [ 156.156779][ T5834] kobject_add_internal+0x2c4/0x9b0 [ 156.156809][ T5834] kobject_add+0x16e/0x240 [ 156.156834][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 156.156864][ T5834] ? kobject_put+0xab/0x5a0 [ 156.156896][ T5834] device_add+0x288/0x1a70 [ 156.156919][ T5834] ? __pfx_dev_set_name+0x10/0x10 [ 156.156938][ T5834] ? __pfx_device_add+0x10/0x10 [ 156.156955][ T5834] ? mgmt_send_event_skb+0x2fb/0x460 [ 156.156979][ T5834] hci_conn_add_sysfs+0x17e/0x230 [ 156.157000][ T5834] le_conn_complete_evt+0x1075/0x1d70 [ 156.157037][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 156.157066][ T5834] ? hci_event_packet+0x43c/0x1190 [ 156.157089][ T5834] hci_le_conn_complete_evt+0x23c/0x370 [ 156.157123][ T5834] hci_le_meta_evt+0x2f3/0x5e0 [ 156.157141][ T5834] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 156.157172][ T5834] hci_event_packet+0x669/0x1190 [ 156.157189][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 156.157208][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 156.157229][ T5834] ? kcov_remote_start+0x3d9/0x6d0 [ 156.157252][ T5834] hci_rx_work+0x2c5/0x16b0 [ 156.157277][ T5834] process_one_work+0x9cc/0x1b70 [ 156.157307][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 156.157334][ T5834] ? assign_work+0x1a0/0x250 [ 156.157355][ T5834] worker_thread+0x6c8/0xf10 [ 156.157386][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 156.157409][ T5834] kthread+0x3c2/0x780 [ 156.157427][ T5834] ? __pfx_kthread+0x10/0x10 [ 156.157444][ T5834] ? __pfx_kthread+0x10/0x10 [ 156.157460][ T5834] ? __pfx_kthread+0x10/0x10 [ 156.157476][ T5834] ? __pfx_kthread+0x10/0x10 [ 156.157492][ T5834] ? rcu_is_watching+0x12/0xc0 [ 156.157514][ T5834] ? __pfx_kthread+0x10/0x10 [ 156.157531][ T5834] ret_from_fork+0x45/0x80 [ 156.157550][ T5834] ? __pfx_kthread+0x10/0x10 [ 156.157567][ T5834] ret_from_fork_asm+0x1a/0x30 [ 156.157605][ T5834] [ 156.157771][ T5834] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 156.349667][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 156.380747][ T5834] Bluetooth: hci1: failed to register connection device [ 156.460898][ T30] audit: type=1400 audit(1744010021.546:405): avc: denied { accept } for pid=7409 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.536572][ T30] audit: type=1400 audit(1744010021.816:406): avc: denied { bind } for pid=7422 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.701543][ T30] audit: type=1400 audit(1744010022.176:407): avc: denied { ioctl } for pid=7426 comm="syz.4.479" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.302242][ T30] audit: type=1400 audit(1744010023.766:408): avc: denied { read } for pid=7439 comm="syz.1.482" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.494769][ T30] audit: type=1400 audit(1744010023.766:409): avc: denied { open } for pid=7439 comm="syz.1.482" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.550125][ T30] audit: type=1400 audit(1744010024.026:410): avc: denied { listen } for pid=7441 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.613766][ T30] audit: type=1400 audit(1744010024.026:411): avc: denied { write } for pid=7441 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.113970][ T7440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.181639][ T7440] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 159.214449][ T7440] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 159.245268][ T7440] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 159.260758][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 159.307598][ T7440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.321064][ T7440] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.328820][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 159.357151][ T7440] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.367547][ T7440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.391146][ T7440] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 159.421543][ T7440] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 159.606890][ T7440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.619518][ T7440] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 160.127790][ T7440] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 160.646177][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.112590][ T30] audit: type=1400 audit(1744010026.536:412): avc: denied { getopt } for pid=7491 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 161.366474][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.445840][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.710203][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 161.862689][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 162.017853][ T30] audit: type=1400 audit(1744010027.476:413): avc: denied { mount } for pid=7511 comm="syz.2.509" name="/" dev="ramfs" ino=12784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 162.139181][ T7510] bond1: entered promiscuous mode [ 162.173949][ T7510] bond1: entered allmulticast mode [ 162.179912][ T7510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.354790][ T5870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 162.408305][ T7530] ======================================================= [ 162.408305][ T7530] WARNING: The mand mount option has been deprecated and [ 162.408305][ T7530] and is ignored by this kernel. Remove the mand [ 162.408305][ T7530] option from the mount to silence this warning. [ 162.408305][ T7530] ======================================================= [ 162.449076][ T7530] ERROR: device name not specified. [ 162.857621][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.883636][ T30] audit: type=1400 audit(2000000000.860:414): avc: denied { accept } for pid=7528 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.934976][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 162.947686][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 162.960465][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 162.975985][ T5870] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.997452][ T5870] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 163.008397][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 163.019006][ T5870] usb 5-1: Product: syz [ 163.023174][ T5870] usb 5-1: Manufacturer: syz [ 163.029301][ T5870] usb 5-1: SerialNumber: syz [ 163.050802][ T5870] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input16 [ 163.096172][ T973] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.525324][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.543465][ T5872] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 163.573918][ T5870] usb 5-1: USB disconnect, device number 12 [ 163.599408][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.611088][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.623778][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.634137][ T973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.647246][ T973] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.656980][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.679787][ T973] usb 3-1: config 0 descriptor?? [ 163.742085][ T5870] appletouch 5-1:1.0: input: appletouch disconnected [ 163.746965][ T5872] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 163.765383][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 163.776086][ T5872] usb 2-1: config 0 has no interface number 0 [ 163.801514][ T5834] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 163.810637][ T5872] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 163.821233][ T5872] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 163.834194][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.848975][ T5872] usb 2-1: config 0 descriptor?? [ 163.891665][ T5872] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input17 [ 164.140868][ T7530] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 164.161208][ T5870] usb 2-1: USB disconnect, device number 4 [ 164.253090][ T973] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 164.301032][ T973] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 165.605325][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.623432][ T30] audit: type=1400 audit(2000000003.600:415): avc: denied { getopt } for pid=7567 comm="syz.3.525" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.685024][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.725567][ T973] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 165.844823][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 166.657607][ T30] audit: type=1400 audit(2000000004.640:416): avc: denied { write } for pid=7585 comm="syz.3.532" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.703267][ T7586] usb usb8: usbfs: process 7586 (syz.3.532) did not claim interface 0 before use [ 167.398371][ T5872] usb 3-1: USB disconnect, device number 7 [ 167.554573][ T30] audit: type=1400 audit(2000000005.530:417): avc: denied { connect } for pid=7625 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.328961][ T30] audit: type=1400 audit(2000000005.970:418): avc: denied { listen } for pid=7629 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.336689][ T30] audit: type=1400 audit(2000000008.310:419): avc: denied { setopt } for pid=7641 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 170.356243][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.365921][ T7655] syz.4.559: attempt to access beyond end of device [ 170.365921][ T7655] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 170.418104][ T7655] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 170.467607][ T7659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.743278][ T30] audit: type=1400 audit(2000000008.720:420): avc: denied { ioctl } for pid=7667 comm="syz.1.564" path="socket:[13019]" dev="sockfs" ino=13019 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.817644][ T30] audit: type=1400 audit(2000000008.800:421): avc: denied { name_connect } for pid=7669 comm="syz.1.565" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 171.251491][ T7670] syz.1.565 (7670) used greatest stack depth: 20328 bytes left [ 172.880600][ T30] audit: type=1400 audit(2000000010.860:422): avc: denied { write } for pid=7717 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 172.900017][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.476022][ T30] audit: type=1400 audit(2000000012.360:423): avc: denied { read } for pid=7749 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.510821][ T30] audit: type=1400 audit(2000000012.370:424): avc: denied { open } for pid=7749 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.612024][ T30] audit: type=1400 audit(2000000012.370:425): avc: denied { getattr } for pid=7749 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.637293][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.986600][ T30] audit: type=1400 audit(2000000012.770:426): avc: denied { sqpoll } for pid=7747 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 175.582424][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 175.677917][ T30] audit: type=1400 audit(2000000013.650:427): avc: denied { write } for pid=7743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.711142][ T30] audit: type=1400 audit(2000000013.660:428): avc: denied { add_name } for pid=7743 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.762128][ T7782] tun0: tun_chr_ioctl cmd 2147767519 [ 175.767105][ T30] audit: type=1400 audit(2000000013.660:429): avc: denied { create } for pid=7743 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.792580][ T30] audit: type=1400 audit(2000000013.660:430): avc: denied { write } for pid=7743 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=4028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.979622][ T30] audit: type=1400 audit(2000000013.660:431): avc: denied { append } for pid=7743 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=4028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.995691][ T7793] netlink: 68 bytes leftover after parsing attributes in process `syz.0.608'. [ 178.906190][ T7842] tty tty1: ldisc open failed (-12), clearing slot 0 [ 179.228752][ T7849] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 179.477886][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 179.477915][ T30] audit: type=1400 audit(2000000017.370:440): avc: denied { audit_read } for pid=7851 comm="syz.4.625" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.797241][ T7873] netlink: 60 bytes leftover after parsing attributes in process `syz.3.629'. [ 179.811064][ T7870] netlink: 60 bytes leftover after parsing attributes in process `syz.3.629'. [ 179.903702][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 179.974633][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 179.985128][ T7882] bridge: RTM_NEWNEIGH with invalid ether address [ 181.211657][ T30] audit: type=1400 audit(2000000019.120:441): avc: denied { mount } for pid=7884 comm="syz.1.635" name="/" dev="rpc_pipefs" ino=14401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 181.234651][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.134948][ T5870] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 182.142575][ T5913] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.315153][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 182.333304][ T5913] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 182.349315][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 182.363031][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.374905][ T5870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.385950][ T7918] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 182.388330][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 182.388445][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.393177][ T7918] cramfs: wrong magic [ 182.424013][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.433361][ T5870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 182.449920][ T5913] usb 2-1: Product: syz [ 182.454418][ T5913] usb 2-1: Manufacturer: syz [ 182.459392][ T5913] usb 2-1: SerialNumber: syz [ 182.464045][ T5870] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 182.478625][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.487798][ T7906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.506803][ T5870] usb 5-1: config 0 descriptor?? [ 182.514854][ T7908] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 182.704464][ T5913] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 182.909197][ T30] audit: type=1400 audit(2000000020.890:442): avc: denied { read write } for pid=7904 comm="syz.1.643" name="lp0" dev="devtmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 182.921592][ C0] usblp0: nonzero read bulk status received: -71 [ 182.939157][ T30] audit: type=1400 audit(2000000020.890:443): avc: denied { open } for pid=7904 comm="syz.1.643" path="/dev/usb/lp0" dev="devtmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 182.940950][ T5913] usb 2-1: USB disconnect, device number 5 [ 183.069572][ T7906] usblp0: removed [ 183.171598][ T5913] usb 5-1: USB disconnect, device number 13 [ 183.211005][ T5834] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 183.260652][ T7924] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 183.268987][ T7924] cramfs: wrong magic [ 183.372548][ T30] audit: type=1400 audit(2000000021.350:444): avc: denied { connect } for pid=7928 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.392549][ T30] audit: type=1400 audit(2000000021.360:445): avc: denied { read } for pid=7928 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.858530][ T7941] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 184.715040][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.039876][ T5913] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 185.056135][ T5913] usb 4-1: config 0 has no interface number 0 [ 185.334338][ T5913] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 185.343606][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.351748][ T5913] usb 4-1: Product: syz [ 185.356014][ T5913] usb 4-1: Manufacturer: syz [ 185.360669][ T5913] usb 4-1: SerialNumber: syz [ 185.371035][ T5913] usb 4-1: config 0 descriptor?? [ 185.381632][ T5913] usb-storage 4-1:0.21: USB Mass Storage device detected [ 185.404629][ T5913] usb-storage 4-1:0.21: device ignored [ 185.583718][ T5933] usb 4-1: USB disconnect, device number 6 [ 186.218900][ T7977] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 186.228296][ T7977] cramfs: wrong magic [ 188.504617][ T8008] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 189.514929][ T5913] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.726462][ T5913] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.736341][ T5913] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 189.747096][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.757158][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 189.775514][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 189.802242][ T5913] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.815950][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.824892][ T5913] usb 1-1: Product: syz [ 189.830426][ T5913] usb 1-1: Manufacturer: syz [ 189.850940][ T5913] cdc_wdm 1-1:1.0: skipping garbage [ 189.860675][ T5913] cdc_wdm 1-1:1.0: skipping garbage [ 189.874352][ T5913] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 190.052798][ T30] audit: type=1400 audit(2000000028.030:446): avc: denied { write } for pid=8026 comm="syz.3.673" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.080290][ T8027] ipt_REJECT: TCP_RESET invalid for non-tcp [ 190.187883][ T8030] program syz.3.675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.194168][ T30] audit: type=1400 audit(2000000028.170:447): avc: denied { read write } for pid=8029 comm="syz.3.675" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.198200][ T8030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 190.221511][ T30] audit: type=1400 audit(2000000028.170:448): avc: denied { open } for pid=8029 comm="syz.3.675" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.258757][ T8032] FAULT_INJECTION: forcing a failure. [ 190.258757][ T8032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.259701][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 190.272638][ T8032] CPU: 1 UID: 0 PID: 8032 Comm: syz.3.675 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 190.272658][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.272666][ T8032] Call Trace: [ 190.272671][ T8032] [ 190.272677][ T8032] dump_stack_lvl+0x16c/0x1f0 [ 190.272700][ T8032] should_fail_ex+0x512/0x640 [ 190.272718][ T8032] _copy_from_user+0x2e/0xd0 [ 190.272734][ T8032] copy_msghdr_from_user+0x98/0x160 [ 190.272751][ T8032] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 190.272771][ T8032] ? kfree+0x252/0x4d0 [ 190.272790][ T8032] ? __lock_acquire+0x5ca/0x1ba0 [ 190.272808][ T8032] ___sys_recvmsg+0xdb/0x1a0 [ 190.272825][ T8032] ? __pfx____sys_recvmsg+0x10/0x10 [ 190.272852][ T8032] ? __pfx___might_resched+0x10/0x10 [ 190.272875][ T8032] do_recvmmsg+0x2fe/0x740 [ 190.272894][ T8032] ? __pfx_do_recvmmsg+0x10/0x10 [ 190.272915][ T8032] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 190.272940][ T8032] ? __fget_files+0x20e/0x3c0 [ 190.272958][ T8032] __x64_sys_recvmmsg+0x22a/0x280 [ 190.272976][ T8032] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 190.272992][ T8032] ? rcu_is_watching+0x12/0xc0 [ 190.273016][ T8032] do_syscall_64+0xcd/0x260 [ 190.273036][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.273049][ T8032] RIP: 0033:0x7f14c498d169 [ 190.273061][ T8032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.273074][ T8032] RSP: 002b:00007f14c27f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 190.273088][ T8032] RAX: ffffffffffffffda RBX: 00007f14c4ba6080 RCX: 00007f14c498d169 [ 190.273097][ T8032] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 000000000000000b [ 190.273105][ T8032] RBP: 00007f14c27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.273113][ T8032] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 190.273122][ T8032] R13: 0000000000000000 R14: 00007f14c4ba6080 R15: 00007ffd18abb7c8 [ 190.273141][ T8032] [ 190.518318][ T30] audit: type=1400 audit(2000000028.170:449): avc: denied { ioctl } for pid=8029 comm="syz.3.675" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.819981][ T5913] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 190.840089][ T5913] usb 5-1: config 0 has no interface number 0 [ 190.862484][ T5913] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 190.883227][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.918093][ T5913] usb 5-1: Product: syz [ 190.922416][ T5913] usb 5-1: Manufacturer: syz [ 190.939149][ T5913] usb 5-1: SerialNumber: syz [ 191.032361][ T5913] usb 5-1: config 0 descriptor?? [ 191.091324][ T5913] usb-storage 5-1:0.21: USB Mass Storage device detected [ 191.171599][ T5913] usb-storage 5-1:0.21: device ignored [ 191.284384][ T5913] usb 5-1: USB disconnect, device number 14 [ 191.505510][ T30] audit: type=1400 audit(2000000029.490:450): avc: denied { listen } for pid=8046 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.538739][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.551629][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.558710][ T8051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.244556][ T8061] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 192.657375][ T5913] usb 1-1: USB disconnect, device number 7 [ 193.429328][ T8076] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 193.440888][ T8076] cramfs: wrong magic [ 193.868001][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.874655][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.155342][ T5872] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 195.328263][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 195.365518][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 195.387972][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.427678][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.489506][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 195.620557][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 195.631341][ T5872] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 195.640895][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.665488][ T5872] usb 5-1: config 0 descriptor?? [ 195.674042][ T8096] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 196.201848][ T8105] trusted_key: syz.0.695 sent an empty control message without MSG_MORE. [ 196.892382][ T8111] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 197.074822][ T5913] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 197.246376][ T5913] usb 1-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 197.316700][ T5913] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 197.342648][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=233 [ 197.406782][ T5913] usb 1-1: Product: syz [ 197.419989][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.440868][ T5913] usb 1-1: Manufacturer: syz [ 197.460086][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.467223][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.483001][ T5913] usb 1-1: SerialNumber: syz [ 197.489982][ T5913] usb 1-1: config 0 descriptor?? [ 197.512840][ T5913] rndis_host 1-1:0.0: skipping garbage [ 197.520610][ T5913] usb 1-1: bad CDC descriptors [ 197.540122][ T5913] cdc_acm 1-1:0.0: skipping garbage [ 198.357368][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 198.499196][ T5913] usb 5-1: USB disconnect, device number 15 [ 199.320462][ T5933] usb 1-1: USB disconnect, device number 8 [ 200.115183][ T973] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 200.300689][ T8149] openvswitch: netlink: Missing key (keys=40, expected=100) [ 200.301193][ T973] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 200.386435][ T973] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.400398][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.409418][ T973] usb 2-1: Product: syz [ 200.413643][ T973] usb 2-1: Manufacturer: syz [ 200.423673][ T973] usb 2-1: SerialNumber: syz [ 200.480615][ T8139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.924083][ T973] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 200.938497][ T8156] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 200.947171][ T8156] cramfs: wrong magic [ 201.022041][ T8159] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 201.029839][ T8159] cramfs: wrong magic [ 201.596904][ T973] usb 2-1: USB disconnect, device number 6 [ 202.063221][ T973] usblp0: removed [ 202.439437][ T5854] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.775105][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 202.847968][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 202.915256][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.945256][ T5854] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.991577][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 203.013960][ T5854] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 203.039004][ T5854] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 203.058546][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.093263][ T5854] usb 1-1: config 0 descriptor?? [ 203.122465][ T8169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.345573][ T8193] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 203.352675][ T8193] cramfs: wrong magic [ 203.389337][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.396494][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.404967][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.411790][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.418789][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.425817][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.433143][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.441241][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.448281][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.455103][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.462009][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.468829][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.475754][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.482547][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.489467][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.496276][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.503177][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.510714][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.517602][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.524431][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.531443][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.538392][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.545301][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.552099][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.559246][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.566906][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.573933][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.580768][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 203.588564][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 204.209297][ T8207] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 204.217243][ T8207] cramfs: wrong magic [ 205.218754][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 205.861120][ T5913] usb 1-1: USB disconnect, device number 9 [ 206.384881][ T5913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 206.941676][ T5913] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 206.971018][ T5913] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 206.983154][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.003785][ T5913] usb 1-1: Product: syz [ 207.015077][ T5913] usb 1-1: Manufacturer: syz [ 207.020932][ T5913] usb 1-1: SerialNumber: syz [ 207.034299][ T8227] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.515185][ T5913] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 207.576361][ T5874] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 207.653984][ T973] usb 1-1: USB disconnect, device number 10 [ 207.763878][ T973] usblp0: removed [ 207.820760][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 207.843823][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 207.864131][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.875308][ T5874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.887512][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 207.898722][ T5874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 207.912813][ T5874] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.934114][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.011560][ T5874] usb 3-1: config 0 descriptor?? [ 208.030192][ T8237] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.263812][ T8251] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 208.273531][ T8251] cramfs: wrong magic [ 208.936971][ T8260] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 208.944155][ T8260] cramfs: wrong magic [ 209.858706][ T5854] usb 3-1: USB disconnect, device number 8 [ 209.861522][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 210.082542][ T8276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.090257][ T8276] IPv6: NLM_F_CREATE should be set when creating new route [ 210.097598][ T8276] IPv6: NLM_F_CREATE should be set when creating new route [ 210.205268][ T8277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=8277 comm=syz.4.741 [ 211.835399][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 212.000105][ T5872] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 212.013694][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.027544][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.041877][ T5872] usb 3-1: Product: syz [ 212.048860][ T5872] usb 3-1: Manufacturer: syz [ 212.058571][ T5872] usb 3-1: SerialNumber: syz [ 212.084621][ T8291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.300161][ T5872] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 212.750111][ C0] usblp0: nonzero read bulk status received: -71 [ 212.751576][ T5872] usb 3-1: USB disconnect, device number 9 [ 212.938051][ T8291] usblp0: removed [ 213.067973][ T8314] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 213.075195][ T8314] cramfs: wrong magic [ 215.185495][ T973] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 215.356736][ T973] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 215.372581][ T973] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 215.385933][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.402771][ T973] usb 1-1: Product: syz [ 215.407898][ T973] usb 1-1: Manufacturer: syz [ 215.412816][ T973] usb 1-1: SerialNumber: syz [ 215.427373][ T8344] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.461470][ T5933] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 215.608193][ T8360] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 215.616486][ T8360] cramfs: wrong magic [ 215.629080][ T5933] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 215.642135][ T5933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 215.651790][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.665322][ T5933] usb 2-1: Product: syz [ 215.667317][ T973] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 215.669961][ T5933] usb 2-1: Manufacturer: syz [ 215.697558][ T5933] usb 2-1: SerialNumber: syz [ 215.709726][ T8351] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 215.914012][ C0] usblp0: nonzero read bulk status received: -71 [ 215.920940][ T5874] usb 1-1: USB disconnect, device number 11 [ 215.930547][ T5874] usblp0: removed [ 215.936117][ T5933] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 216.292286][ C0] usblp0: nonzero read bulk status received: -71 [ 216.299511][ T5874] usb 2-1: USB disconnect, device number 7 [ 216.409330][ T5874] usblp0: removed [ 218.068568][ T8394] openvswitch: netlink: Missing key (keys=40, expected=100) [ 219.555942][ T8413] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 219.562933][ T8413] cramfs: wrong magic [ 219.575019][ T5913] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 219.767254][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.784837][ T5933] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 219.804427][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.828688][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.868225][ T5913] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.883376][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.899361][ T5913] usb 3-1: config 0 descriptor?? [ 219.967375][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 219.976324][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 219.987750][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.999122][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.009029][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 220.135626][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 220.637269][ T5933] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 220.649876][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.660345][ T5933] usb 2-1: config 0 descriptor?? [ 220.667688][ T8415] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.137612][ T5913] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 221.939404][ T5913] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 222.066822][ T5913] usb 3-1: USB disconnect, device number 10 [ 222.171904][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.180390][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.187731][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.194585][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.202985][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.210395][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.217799][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.224653][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.232324][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.240574][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.249457][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.257933][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.265336][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.272186][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.279505][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.287580][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.294388][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.301772][ T5854] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 222.309872][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.317475][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.324336][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.375698][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.382545][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.390505][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.397904][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.405376][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.412187][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.419564][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.426937][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.434651][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.594744][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 222.724858][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 222.761905][ T5854] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.897092][ T5854] usb 5-1: config 179 has no interface number 0 [ 222.903404][ T5854] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 222.931006][ T5854] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 223.034415][ T5854] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 223.054542][ T5854] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 223.067351][ T5854] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.081386][ T5854] usb 5-1: config 179 interface 65 has no altsetting 0 [ 223.088669][ T5854] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 223.150187][ T8453] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 223.159272][ T8453] cramfs: wrong magic [ 223.497977][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.547653][ T5854] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input18 [ 223.748062][ T5854] usb 5-1: USB disconnect, device number 16 [ 223.841656][ T5854] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 224.000196][ T973] usb 2-1: USB disconnect, device number 8 [ 225.950321][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.006125][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.095284][ T5854] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 226.165547][ T5872] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 226.247709][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.305139][ T5872] usb 5-1: device descriptor read/64, error -71 [ 226.315192][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.341657][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.363121][ T5854] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.379428][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.399251][ T5854] usb 4-1: config 0 descriptor?? [ 226.503418][ T8510] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 226.595284][ T5872] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 226.725479][ T5872] usb 5-1: device descriptor read/64, error -71 [ 226.818905][ T5854] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 226.920048][ T5872] usb usb5-port1: attempt power cycle [ 226.998966][ T5854] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 228.075648][ T5872] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.156021][ T5872] usb 5-1: device descriptor read/8, error -71 [ 228.294839][ T5913] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 228.482909][ T5872] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 228.563159][ T5872] usb 5-1: device descriptor read/8, error -71 [ 228.689913][ T5872] usb usb5-port1: unable to enumerate USB device [ 229.719643][ T5933] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 229.728485][ T8554] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 230.252529][ T8556] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 230.305896][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 230.312503][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 230.330596][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.347886][ T5870] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 230.357022][ T5933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.373124][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 230.405755][ T5933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 230.433726][ T5933] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 230.516025][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.526220][ T5870] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 230.534614][ T5870] usb 3-1: config 0 has no interface number 0 [ 230.562876][ T5870] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 230.636944][ T5874] usb 4-1: USB disconnect, device number 7 [ 230.735208][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.746040][ T5933] usb 5-1: config 0 descriptor?? [ 230.752145][ T8536] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.792103][ T5870] usb 3-1: Product: syz [ 230.813592][ T5870] usb 3-1: Manufacturer: syz [ 230.917375][ T5870] usb 3-1: SerialNumber: syz [ 230.990190][ T8563] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 230.997594][ T8563] cramfs: wrong magic [ 231.378255][ T5870] usb 3-1: config 0 descriptor?? [ 231.397353][ T5870] usb-storage 3-1:0.21: USB Mass Storage device detected [ 231.418838][ T5870] usb-storage 3-1:0.21: device ignored [ 231.969865][ T5870] usb 3-1: USB disconnect, device number 11 [ 232.489906][ T5870] usb 5-1: USB disconnect, device number 21 [ 232.496436][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 232.675277][ T973] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 233.014486][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.052320][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.066087][ T973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.079861][ T973] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.105265][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.133064][ T973] usb 2-1: config 0 descriptor?? [ 233.151674][ T8603] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 233.405074][ T8612] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 233.413940][ T8612] cramfs: wrong magic [ 233.886555][ T5933] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 234.062337][ T5933] usb 4-1: device descriptor read/64, error -71 [ 234.084875][ T973] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 234.465077][ T5933] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 234.781791][ T973] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 234.783190][ T8623] openvswitch: netlink: Missing key (keys=40, expected=100) [ 235.155526][ T5933] usb 4-1: device descriptor read/64, error -71 [ 235.295668][ T5933] usb usb4-port1: attempt power cycle [ 235.784884][ T5933] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 235.816877][ T5933] usb 4-1: device descriptor read/8, error -71 [ 236.005266][ T973] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 236.160310][ T5933] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 236.294889][ T5870] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 236.302473][ T973] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 236.316678][ T973] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.326602][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.335605][ T973] usb 3-1: Product: syz [ 236.342214][ T973] usb 3-1: Manufacturer: syz [ 236.347340][ T973] usb 3-1: SerialNumber: syz [ 236.354279][ T8645] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 236.384842][ T5933] usb 4-1: device not accepting address 11, error -71 [ 236.393816][ T5933] usb usb4-port1: unable to enumerate USB device [ 236.464741][ T5874] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 236.570818][ T973] usblp 3-1:1.0: usblp1: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 236.614805][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 236.621442][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 236.633025][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.643290][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.653062][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 236.664315][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 236.674405][ T5874] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 236.684853][ T5933] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 236.694070][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.704301][ T5874] usb 5-1: config 0 descriptor?? [ 236.710065][ T8650] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 236.782391][ T5874] usb 3-1: USB disconnect, device number 12 [ 236.812623][ T5874] usblp1: removed [ 236.850121][ T5933] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 236.870736][ T5933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.884132][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.894162][ T5933] usb 4-1: Product: syz [ 236.900512][ T5933] usb 4-1: Manufacturer: syz [ 236.908931][ T5933] usb 4-1: SerialNumber: syz [ 236.943830][ T8652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.185306][ T973] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 237.186617][ T5933] usblp 4-1:1.0: usblp1: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 237.367593][ T973] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 237.405422][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.445045][ T5870] usb 2-1: device descriptor read/64, error -71 [ 237.482344][ T973] usb 1-1: config 0 descriptor?? [ 237.513556][ T973] cp210x 1-1:0.0: cp210x converter detected [ 237.679317][ T5872] usb 5-1: USB disconnect, device number 22 [ 237.679507][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 237.701809][ T5933] usb 4-1: USB disconnect, device number 12 [ 237.765396][ T5933] usblp1: removed [ 237.834763][ T5870] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 237.855442][ T5870] usb 2-1: device reset changed ep0 maxpacket size! [ 237.901986][ T5913] usb 2-1: USB disconnect, device number 9 [ 238.064745][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 238.224884][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 238.235836][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 238.246930][ T5874] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 238.260165][ T30] audit: type=1400 audit(2000000076.240:451): avc: denied { append } for pid=8658 comm="syz.0.858" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.284921][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.294626][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.306111][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 238.317318][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 238.321275][ T973] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 238.329823][ T5913] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 238.349906][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.376653][ T973] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 238.382615][ T5913] usb 2-1: config 0 descriptor?? [ 238.393656][ T8661] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 238.402090][ T973] usb 1-1: cp210x converter now attached to ttyUSB0 [ 238.435725][ T973] usb 1-1: USB disconnect, device number 12 [ 238.459502][ T5874] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 238.477906][ T5874] usb 3-1: config 0 has no interface number 0 [ 238.529588][ T5874] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 238.548891][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.583023][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 238.583306][ T5874] usb 3-1: Product: syz [ 238.592438][ T973] cp210x 1-1:0.0: device disconnected [ 238.631715][ T5874] usb 3-1: Manufacturer: syz [ 238.637705][ T5874] usb 3-1: SerialNumber: syz [ 238.646386][ T5874] usb 3-1: config 0 descriptor?? [ 238.648954][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 238.659742][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.200166][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.207913][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.215269][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.222846][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.230291][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.237719][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.245596][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.252554][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.259981][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.267173][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.274052][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.429010][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.444050][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.452062][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.455431][ T5874] usb-storage 3-1:0.21: USB Mass Storage device detected [ 239.460527][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.483328][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.491047][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.498456][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.511579][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.519080][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.526974][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.533778][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.540742][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.547942][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.558226][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.566291][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.573862][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 239.576609][ T5874] usb-storage 3-1:0.21: device ignored [ 239.661700][ T5874] usb 3-1: USB disconnect, device number 13 [ 239.751001][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.781254][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.788338][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.525392][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 240.861017][ T5922] usb 2-1: USB disconnect, device number 10 [ 244.805164][ T5872] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 244.973048][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 244.995732][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 245.007680][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.024303][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.073242][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 245.921581][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 246.009016][ T5872] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 246.020865][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.050015][ T5872] usb 3-1: config 0 descriptor?? [ 246.060154][ T8751] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.530108][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.537740][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.544628][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.553389][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.563062][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.574793][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.584144][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.594734][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.605273][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.612266][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.619997][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.627720][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.634634][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.643089][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.650617][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.658092][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.665586][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.672489][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.681267][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.688702][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.696111][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.702957][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.710386][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.718286][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.726956][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.733856][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.909659][ T5913] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 246.917451][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.925090][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 246.931962][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 247.576007][ T5913] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 247.594475][ T5913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.625407][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.644100][ T5913] usb 4-1: Product: syz [ 247.665277][ T5913] usb 4-1: Manufacturer: syz [ 247.680737][ T5913] usb 4-1: SerialNumber: syz [ 247.694975][ T8781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.164791][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 248.294406][ T5913] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 249.085845][ T5872] usb 3-1: USB disconnect, device number 14 [ 249.168489][ C0] usblp0: nonzero read bulk status received: -71 [ 249.168854][ T5922] usb 4-1: USB disconnect, device number 13 [ 249.600310][ T8781] usblp0: removed [ 250.465537][ T5913] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.696296][ T5913] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.707396][ T5913] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 251.198103][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.207711][ T5913] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.269054][ T5913] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.279524][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.290860][ T5913] usb 2-1: Product: syz [ 251.300943][ T5913] usb 2-1: Manufacturer: syz [ 251.418131][ T5913] cdc_wdm 2-1:1.0: skipping garbage [ 251.428560][ T5913] cdc_wdm 2-1:1.0: skipping garbage [ 251.443518][ T5913] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 252.465087][ T5913] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.654881][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 252.662220][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 252.675281][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.696202][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.724046][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 252.742405][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 252.773935][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 252.808988][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.999334][ T5913] usb 5-1: config 0 descriptor?? [ 253.117234][ T8845] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 253.161468][ T5854] usb 2-1: USB disconnect, device number 11 [ 253.348294][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.356188][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.363040][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.370724][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.378013][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.384896][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.392548][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.399587][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.408403][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.415694][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.422927][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.431503][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.438786][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.446613][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.453875][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.460878][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.520230][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.527278][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.534402][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.541927][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.549158][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.556276][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.563414][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.570913][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.579189][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.586501][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.593553][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.600670][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.607933][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 253.904752][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 255.230554][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 255.327871][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.334308][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.640122][ T8880] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 255.647952][ T8880] cramfs: wrong magic [ 255.921024][ T5854] usb 5-1: USB disconnect, device number 23 [ 256.096959][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 257.104897][ T5913] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 257.288629][ T5913] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.297665][ T5913] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 257.309491][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.318932][ T5913] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.403816][ T8909] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 257.416562][ T8909] cramfs: wrong magic [ 257.790967][ T5913] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.801787][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.811401][ T5913] usb 5-1: Product: syz [ 257.829660][ T5913] usb 5-1: Manufacturer: syz [ 257.849526][ T5913] cdc_wdm 5-1:1.0: skipping garbage [ 257.915541][ T5913] cdc_wdm 5-1:1.0: skipping garbage [ 257.929822][ T5913] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 259.354434][ T5933] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 259.669532][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 259.692368][ T973] usb 5-1: USB disconnect, device number 24 [ 259.715905][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 259.875278][ T8932] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 259.882456][ T8932] cramfs: wrong magic [ 260.081104][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.564499][ T5933] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.603595][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 260.711292][ T5933] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 260.762257][ T5933] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 260.791732][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 260.803525][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.894017][ T8945] openvswitch: netlink: Missing key (keys=40, expected=100) [ 261.105434][ T5933] usb 3-1: config 0 descriptor?? [ 261.128244][ T8924] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.403075][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.410997][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.418070][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.428275][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.435502][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.442735][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.449967][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.457255][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.467428][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.474359][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.598158][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.613022][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.953537][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.960846][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.969793][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.978430][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.985641][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 261.995950][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.008198][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.017566][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.024985][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.031862][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.038729][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.045600][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.052436][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.059341][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.066186][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.073054][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.080465][ T5834] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 262.402551][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.437236][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.444392][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.547888][ T8974] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 263.555100][ T8974] cramfs: wrong magic [ 263.589953][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 263.959896][ T5933] usb 3-1: USB disconnect, device number 15 [ 264.134861][ T5913] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 264.237094][ T8980] FAULT_INJECTION: forcing a failure. [ 264.237094][ T8980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.442992][ T8982] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 264.452211][ T8982] cramfs: wrong magic [ 264.776144][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.2.946 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 264.776169][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.776178][ T8980] Call Trace: [ 264.776184][ T8980] [ 264.776190][ T8980] dump_stack_lvl+0x16c/0x1f0 [ 264.776217][ T8980] should_fail_ex+0x512/0x640 [ 264.776238][ T8980] _copy_from_user+0x2e/0xd0 [ 264.776264][ T8980] do_fb_ioctl+0x290/0x7e0 [ 264.776284][ T8980] ? __pfx_do_fb_ioctl+0x10/0x10 [ 264.776307][ T8980] ? do_vfs_ioctl+0x512/0x1990 [ 264.776359][ T8980] ? selinux_file_ioctl+0x180/0x270 [ 264.776386][ T8980] fb_ioctl+0xe5/0x150 [ 264.776402][ T8980] ? __pfx_fb_ioctl+0x10/0x10 [ 264.776419][ T8980] __x64_sys_ioctl+0x190/0x200 [ 264.776443][ T8980] do_syscall_64+0xcd/0x260 [ 264.776467][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.776484][ T8980] RIP: 0033:0x7f098a98d169 [ 264.776497][ T8980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.776513][ T8980] RSP: 002b:00007f098b874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.776529][ T8980] RAX: ffffffffffffffda RBX: 00007f098aba5fa0 RCX: 00007f098a98d169 [ 264.776539][ T8980] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 264.776549][ T8980] RBP: 00007f098b874090 R08: 0000000000000000 R09: 0000000000000000 [ 264.776558][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.776567][ T8980] R13: 0000000000000000 R14: 00007f098aba5fa0 R15: 00007fffc7b63038 [ 264.776590][ T8980] [ 264.778047][ T5913] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.019983][ T5913] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 265.043868][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.312659][ T8988] FAULT_INJECTION: forcing a failure. [ 265.312659][ T8988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.326526][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.2.947 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 265.326549][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.326559][ T8988] Call Trace: [ 265.326565][ T8988] [ 265.326572][ T8988] dump_stack_lvl+0x16c/0x1f0 [ 265.326601][ T8988] should_fail_ex+0x512/0x640 [ 265.326623][ T8988] _copy_to_user+0x32/0xd0 [ 265.326644][ T8988] simple_read_from_buffer+0xcb/0x170 [ 265.326672][ T8988] proc_fail_nth_read+0x197/0x270 [ 265.326698][ T8988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.326725][ T8988] ? rw_verify_area+0xcf/0x680 [ 265.326747][ T8988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.326772][ T8988] vfs_read+0x1de/0xc70 [ 265.326801][ T8988] ? __pfx___mutex_lock+0x10/0x10 [ 265.326823][ T8988] ? __pfx_vfs_read+0x10/0x10 [ 265.326855][ T8988] ? __fget_files+0x20e/0x3c0 [ 265.326880][ T8988] ksys_read+0x12a/0x240 [ 265.326895][ T8988] ? __pfx_ksys_read+0x10/0x10 [ 265.326910][ T8988] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 265.326935][ T8988] do_syscall_64+0xcd/0x260 [ 265.326959][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.326975][ T8988] RIP: 0033:0x7f098a98bb7c [ 265.326989][ T8988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 265.327004][ T8988] RSP: 002b:00007f098b832030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.327020][ T8988] RAX: ffffffffffffffda RBX: 00007f098aba6160 RCX: 00007f098a98bb7c [ 265.327031][ T8988] RDX: 000000000000000f RSI: 00007f098b8320a0 RDI: 0000000000000006 [ 265.327040][ T8988] RBP: 00007f098b832090 R08: 0000000000000000 R09: 0000000000000000 [ 265.327049][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.327058][ T8988] R13: 0000000000000000 R14: 00007f098aba6160 R15: 00007fffc7b63038 [ 265.327079][ T8988] [ 265.554866][ T5913] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.570152][ T5913] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.579391][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.640942][ T5913] usb 5-1: Product: syz [ 265.650623][ T5913] usb 5-1: Manufacturer: syz [ 265.723462][ T5913] cdc_wdm 5-1:1.0: skipping garbage [ 266.173024][ T5913] cdc_wdm 5-1:1.0: skipping garbage [ 266.235296][ T5913] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 266.657251][ T5834] ================================================================== [ 266.665348][ T5834] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80 [ 266.673249][ T5834] Read of size 8 at addr ffff8880595ea480 by task kworker/u9:8/5834 [ 266.681245][ T5834] [ 266.683566][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:8 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 266.683589][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.683601][ T5834] Workqueue: hci4 hci_rx_work [ 266.683623][ T5834] Call Trace: [ 266.683628][ T5834] [ 266.683636][ T5834] dump_stack_lvl+0x116/0x1f0 [ 266.683660][ T5834] print_report+0xc3/0x670 [ 266.683680][ T5834] ? __virt_addr_valid+0x5e/0x590 [ 266.683705][ T5834] ? __phys_addr+0xc6/0x150 [ 266.683731][ T5834] ? l2cap_connect_cfm+0xdb9/0xf80 [ 266.683758][ T5834] kasan_report+0xe0/0x110 [ 266.683778][ T5834] ? l2cap_connect_cfm+0xdb9/0xf80 [ 266.683808][ T5834] l2cap_connect_cfm+0xdb9/0xf80 [ 266.683838][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 266.683866][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 266.683892][ T5834] le_conn_complete_evt+0x1662/0x1d70 [ 266.683921][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 266.683948][ T5834] ? hci_event_packet+0x43c/0x1190 [ 266.683966][ T5834] hci_le_conn_complete_evt+0x23c/0x370 [ 266.683996][ T5834] hci_le_meta_evt+0x2f3/0x5e0 [ 266.684013][ T5834] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 266.684042][ T5834] hci_event_packet+0x669/0x1190 [ 266.684057][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 266.684075][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 266.684093][ T5834] ? kcov_remote_start+0x3d9/0x6d0 [ 266.684112][ T5834] hci_rx_work+0x2c5/0x16b0 [ 266.684130][ T5834] ? rcu_is_watching+0x12/0xc0 [ 266.684153][ T5834] process_one_work+0x9cc/0x1b70 [ 266.684176][ T5834] ? __pfx_hci_cmd_work+0x10/0x10 [ 266.684193][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 266.684215][ T5834] ? assign_work+0x1a0/0x250 [ 266.684232][ T5834] worker_thread+0x6c8/0xf10 [ 266.684256][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 266.684275][ T5834] kthread+0x3c2/0x780 [ 266.684292][ T5834] ? __pfx_kthread+0x10/0x10 [ 266.684313][ T5834] ? __pfx_kthread+0x10/0x10 [ 266.684329][ T5834] ? __pfx_kthread+0x10/0x10 [ 266.684344][ T5834] ? __pfx_kthread+0x10/0x10 [ 266.684360][ T5834] ? rcu_is_watching+0x12/0xc0 [ 266.684381][ T5834] ? __pfx_kthread+0x10/0x10 [ 266.684398][ T5834] ret_from_fork+0x45/0x80 [ 266.684416][ T5834] ? __pfx_kthread+0x10/0x10 [ 266.684432][ T5834] ret_from_fork_asm+0x1a/0x30 [ 266.684462][ T5834] [ 266.684469][ T5834] [ 266.908048][ T5834] Allocated by task 5834: [ 266.912354][ T5834] kasan_save_stack+0x33/0x60 [ 266.917019][ T5834] kasan_save_track+0x14/0x30 [ 266.921679][ T5834] __kasan_kmalloc+0xaa/0xb0 [ 266.926243][ T5834] l2cap_chan_create+0x44/0x920 [ 266.931076][ T5834] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 266.936860][ T5834] l2cap_sock_new_connection_cb+0x101/0x240 [ 266.942731][ T5834] l2cap_connect_cfm+0x4c4/0xf80 [ 266.947653][ T5834] le_conn_complete_evt+0x1662/0x1d70 [ 266.953012][ T5834] hci_le_conn_complete_evt+0x23c/0x370 [ 266.958541][ T5834] hci_le_meta_evt+0x2f3/0x5e0 [ 266.963286][ T5834] hci_event_packet+0x669/0x1190 [ 266.968201][ T5834] hci_rx_work+0x2c5/0x16b0 [ 266.972685][ T5834] process_one_work+0x9cc/0x1b70 [ 266.977601][ T5834] worker_thread+0x6c8/0xf10 [ 266.982184][ T5834] kthread+0x3c2/0x780 [ 266.986235][ T5834] ret_from_fork+0x45/0x80 [ 266.990643][ T5834] ret_from_fork_asm+0x1a/0x30 [ 266.995414][ T5834] [ 266.997717][ T5834] Freed by task 8994: [ 267.001696][ T5834] kasan_save_stack+0x33/0x60 [ 267.006352][ T5834] kasan_save_track+0x14/0x30 [ 267.011006][ T5834] kasan_save_free_info+0x3b/0x60 [ 267.016028][ T5834] __kasan_slab_free+0x51/0x70 [ 267.020768][ T5834] kfree+0x2b6/0x4d0 [ 267.024662][ T5834] l2cap_chan_put+0x216/0x2c0 [ 267.029325][ T5834] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 267.034852][ T5834] l2cap_sock_release+0x5c/0x210 [ 267.039767][ T5834] __sock_release+0xb0/0x270 [ 267.044336][ T5834] sock_close+0x1c/0x30 [ 267.048484][ T5834] __fput+0x3ff/0xb70 [ 267.052444][ T5834] task_work_run+0x14d/0x240 [ 267.057013][ T5834] get_signal+0x1d1/0x26d0 [ 267.061425][ T5834] arch_do_signal_or_restart+0x8f/0x7d0 [ 267.066956][ T5834] syscall_exit_to_user_mode+0x150/0x2a0 [ 267.072582][ T5834] do_syscall_64+0xda/0x260 [ 267.077066][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.082937][ T5834] [ 267.085240][ T5834] The buggy address belongs to the object at ffff8880595ea000 [ 267.085240][ T5834] which belongs to the cache kmalloc-2k of size 2048 [ 267.099270][ T5834] The buggy address is located 1152 bytes inside of [ 267.099270][ T5834] freed 2048-byte region [ffff8880595ea000, ffff8880595ea800) [ 267.113231][ T5834] [ 267.115533][ T5834] The buggy address belongs to the physical page: [ 267.121919][ T5834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x595e8 [ 267.130653][ T5834] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 267.139124][ T5834] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 267.146644][ T5834] page_type: f5(slab) [ 267.150608][ T5834] raw: 00fff00000000040 ffff88801b442000 dead000000000100 dead000000000122 [ 267.159185][ T5834] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 267.167751][ T5834] head: 00fff00000000040 ffff88801b442000 dead000000000100 dead000000000122 [ 267.176398][ T5834] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 267.185046][ T5834] head: 00fff00000000003 ffffea0001657a01 00000000ffffffff 00000000ffffffff [ 267.193691][ T5834] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 267.202333][ T5834] page dumped because: kasan: bad access detected [ 267.208719][ T5834] page_owner tracks the page as allocated [ 267.214409][ T5834] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 873, tgid 873 (kworker/0:2), ts 63306858924, free_ts 13659578377 [ 267.235483][ T5834] post_alloc_hook+0x181/0x1b0 [ 267.240234][ T5834] get_page_from_freelist+0x1193/0x39b0 [ 267.245758][ T5834] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 267.251715][ T5834] alloc_pages_mpol+0x1fb/0x550 [ 267.256558][ T5834] new_slab+0x23c/0x330 [ 267.260697][ T5834] ___slab_alloc+0xd9c/0x1940 [ 267.265369][ T5834] __slab_alloc.constprop.0+0x56/0xb0 [ 267.270737][ T5834] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 267.277142][ T5834] kmalloc_reserve+0xef/0x2c0 [ 267.281913][ T5834] __alloc_skb+0x166/0x380 [ 267.286310][ T5834] mld_newpack.isra.0+0x18e/0xa20 [ 267.291317][ T5834] add_grhead+0x299/0x340 [ 267.295649][ T5834] add_grec+0x112a/0x1680 [ 267.299976][ T5834] mld_ifc_work+0x41f/0xca0 [ 267.304456][ T5834] process_one_work+0x9cc/0x1b70 [ 267.309373][ T5834] worker_thread+0x6c8/0xf10 [ 267.313941][ T5834] page last free pid 1 tgid 1 stack trace: [ 267.319724][ T5834] __free_frozen_pages+0x69d/0xff0 [ 267.324818][ T5834] free_contig_range+0x135/0x3f0 [ 267.329740][ T5834] destroy_args+0x66f/0x830 [ 267.334228][ T5834] debug_vm_pgtable+0x130e/0x2d50 [ 267.339227][ T5834] do_one_initcall+0x120/0x6e0 [ 267.343974][ T5834] kernel_init_freeable+0x5c2/0x900 [ 267.349154][ T5834] kernel_init+0x1c/0x2b0 [ 267.353456][ T5834] ret_from_fork+0x45/0x80 [ 267.357850][ T5834] ret_from_fork_asm+0x1a/0x30 [ 267.362595][ T5834] [ 267.364897][ T5834] Memory state around the buggy address: [ 267.370499][ T5834] ffff8880595ea380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.378540][ T5834] ffff8880595ea400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.386575][ T5834] >ffff8880595ea480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.394608][ T5834] ^ [ 267.398646][ T5834] ffff8880595ea500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.406681][ T5834] ffff8880595ea580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.414714][ T5834] ================================================================== [ 267.428198][ T5834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 267.435408][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:8 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 267.447212][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.457269][ T5834] Workqueue: hci4 hci_rx_work [ 267.461954][ T5834] Call Trace: [ 267.465232][ T5834] [ 267.468159][ T5834] dump_stack_lvl+0x3d/0x1f0 [ 267.472761][ T5834] panic+0x71c/0x800 [ 267.476655][ T5834] ? __pfx_panic+0x10/0x10 [ 267.481069][ T5834] ? irqentry_exit+0x3b/0x90 [ 267.485654][ T5834] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.490833][ T5834] ? preempt_schedule_thunk+0x16/0x30 [ 267.496185][ T5834] ? l2cap_connect_cfm+0xdb9/0xf80 [ 267.501285][ T5834] ? preempt_schedule_common+0x44/0xc0 [ 267.506746][ T5834] ? l2cap_connect_cfm+0xdb9/0xf80 [ 267.511841][ T5834] check_panic_on_warn+0xab/0xb0 [ 267.516758][ T5834] end_report+0x107/0x170 [ 267.521076][ T5834] kasan_report+0xee/0x110 [ 267.525473][ T5834] ? l2cap_connect_cfm+0xdb9/0xf80 [ 267.530569][ T5834] l2cap_connect_cfm+0xdb9/0xf80 [ 267.535494][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 267.540937][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 267.546379][ T5834] le_conn_complete_evt+0x1662/0x1d70 [ 267.551739][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 267.557452][ T5834] ? hci_event_packet+0x43c/0x1190 [ 267.562542][ T5834] hci_le_conn_complete_evt+0x23c/0x370 [ 267.568075][ T5834] hci_le_meta_evt+0x2f3/0x5e0 [ 267.572817][ T5834] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 267.578870][ T5834] hci_event_packet+0x669/0x1190 [ 267.583782][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 267.589045][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 267.594393][ T5834] ? kcov_remote_start+0x3d9/0x6d0 [ 267.599485][ T5834] hci_rx_work+0x2c5/0x16b0 [ 267.603966][ T5834] ? rcu_is_watching+0x12/0xc0 [ 267.608710][ T5834] process_one_work+0x9cc/0x1b70 [ 267.613632][ T5834] ? __pfx_hci_cmd_work+0x10/0x10 [ 267.618634][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 267.623985][ T5834] ? assign_work+0x1a0/0x250 [ 267.628552][ T5834] worker_thread+0x6c8/0xf10 [ 267.633125][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 267.638220][ T5834] kthread+0x3c2/0x780 [ 267.642278][ T5834] ? __pfx_kthread+0x10/0x10 [ 267.646845][ T5834] ? __pfx_kthread+0x10/0x10 [ 267.651413][ T5834] ? __pfx_kthread+0x10/0x10 [ 267.655980][ T5834] ? __pfx_kthread+0x10/0x10 [ 267.660547][ T5834] ? rcu_is_watching+0x12/0xc0 [ 267.665290][ T5834] ? __pfx_kthread+0x10/0x10 [ 267.669857][ T5834] ret_from_fork+0x45/0x80 [ 267.674251][ T5834] ? __pfx_kthread+0x10/0x10 [ 267.678819][ T5834] ret_from_fork_asm+0x1a/0x30 [ 267.683572][ T5834] [ 267.686755][ T5834] Kernel Offset: disabled [ 267.691053][ T5834] Rebooting in 86400 seconds..