last executing test programs: 16.02837515s ago: executing program 2 (id=1118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 14.811016008s ago: executing program 0 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff6, 0x0, 0x0, 0x200004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic}) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r8, 0xee01, r9) keyctl$setperm(0x5, r8, 0x30925) keyctl$KEYCTL_MOVE(0x3, r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000f7ffffff00000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000fe0000068500000083000000bf0900000000000055090100000000009500000000000000470900001000f8a4bf93000000000000b7030000000000008500000085000000b700"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5}, 0x94) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) 13.797143977s ago: executing program 2 (id=1127): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x200, 0x98, 0x98, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0xc]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c0000000b0a010400000000000000000500000608000340000000830900020073797a3200000000080007400000001f08000340000000000900020073797a3100000000080007400000000cf0000000120a0101000000000000000001000003dc0004802b00010073797374656d5f753a6f626a6563745f723a7472616365726f7574655f657865635f743a733000002b00010073797374656d5f753a6f626a6563745f723a7472616365726f7574655f657865635f743a733000002500010073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a7330000000002f00010073797374656d5f753a6f626a6563745f723a73656d616e6167655f7472616e735f6c6f636b5f743a733000002800010073797374656d5f753a6f626a6563745f723a706f7765725f6465766963655f743a73300020000000120a05000000000000000000050000070c00064000000000000000026c010000140a0300000000000000000005000009080003400000000475000800a849e85dffd2215559e0c84f5c902abedfdcc9ac25f5e241ba7b75f1120acec0294773cf0e0233032c90e261a3ce5bbc19903b1a8dc25a89858be960d132a2eac2986ab2e5cb84198d6f4ebd09d0c65d1c35b26b9099f0726d37d14990a58d53885d8f37fa918e5c9734408b59cd034a73ef0000000900010073797a31000000000c00064000000000000000059a00080080644f66bf5eff69d571cb71e30de78c0e0268ac82a11dc56c2ed484359df584e209d876753fc79b3ed8fcfe807674bb19212b4d9ccc9809e368ac15377b33845fca8ef0caf944de710ad28fbbcd1f6376dec0f88ede993d4503267a622178abc16ba26c40399d62ccce473842b9b30d8636f480be5c877e9b36fcbb0c10bebb9f0abfee1f69a136898b50d022aee50db7f1b6db8dc800000900010073797a31000000000c00064000000000000000030c000640000000000000000220000000160a010300000000000000000700000a0900020073797a300000000048000000030a01020000000000000000050000070900010073797a310000000008000a40000000040900030073797a310000000011000c00a2c150bfcff7bfcf039a"], 0x358}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x9, 0xef6, 0x1, @remote, @private1, 0x0, 0x20, 0xc, 0x1}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e0373", 0x61}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="55275006ed747229311198ab94c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992ecb170f216f71336253a3be1833a25eb1fb2ba3913dd437e30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x5d}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.623230118s ago: executing program 0 (id=1128): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf2502000000", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, 0x0, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 12.622066925s ago: executing program 2 (id=1129): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) 12.544438595s ago: executing program 4 (id=1130): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@caif=@dgm={0x25, 0x2, 0x6}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb", 0x8a}, {&(0x7f0000000500)="d1fb383c69fd", 0x6}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000640)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000300)="869dfc51939f60eb3c7307dd0362ee283b18030ecfd61ceca6c5f1ac59933bef13e32a57591867dfdacd5251fc0f4a022ed933e9819d151e6145bb364358cae9e00300d2b161ea367aed6d17000000000000000000", 0x55}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.376470626s ago: executing program 4 (id=1132): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x800000, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 11.24146256s ago: executing program 4 (id=1133): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 11.202851729s ago: executing program 1 (id=1134): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x660980, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) pselect6(0x40, &(0x7f0000000240)={0xc, 0xf55a, 0x20001ff, 0x7d, 0x3, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3fb, 0x7fff, 0x3, 0xfffffffffffffff7, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000ac0)={0x28, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x2000000000b092, 0x7}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x0, 0x0, 0x0, 0x9}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) getsockopt$bt_hci(r4, 0x0, 0x2, 0x0, &(0x7f00000031c0)) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c20000008100000008004508005c0068000000119078ac1e020003000000711127ecaab8c12a56c8731a33b4deaa5dad25b928f8ec6496bea14dcf55fe6bee99c78d7af7e6442c71ae0a4015005d42ca87782799a23800"/110], 0x6e) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000080)="1ee53775", 0x4}], 0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 11.12834656s ago: executing program 3 (id=1135): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) socket(0xf, 0x5, 0x2000000) r1 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.926764156s ago: executing program 3 (id=1136): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x660980, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) pselect6(0x40, &(0x7f0000000240)={0xc, 0xf55a, 0x20001ff, 0x7d, 0x3, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3fb, 0x7fff, 0x3, 0xfffffffffffffff7, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000ac0)={0x28, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x2000000000b092, 0x7}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x0, 0x0, 0x0, 0x9}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) getsockopt$bt_hci(r4, 0x0, 0x2, 0x0, &(0x7f00000031c0)) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c20000008100000008004508005c0068000000119078ac1e020003000000711127ecaab8c12a56c8731a33b4deaa5dad25b928f8ec6496bea14dcf55fe6bee99c78d7af7e6442c71ae0a4015005d42ca87782799a23800"/110], 0x6e) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000080)="1ee53775", 0x4}], 0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 8.191911262s ago: executing program 2 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x10000f, @mcast2, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) ftruncate(r4, 0x2000009) sendfile(0xffffffffffffffff, r4, 0x0, 0x7ffff000) getresuid(&(0x7f0000000040), 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, 0x0, 0x0, r7, 0x1000) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) 8.132101397s ago: executing program 1 (id=1138): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) 8.117834956s ago: executing program 4 (id=1139): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) 8.106143911s ago: executing program 3 (id=1140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45", 0xc}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 8.056696315s ago: executing program 0 (id=1141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$FIBMAP(r4, 0x2284, 0xfffffffffffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x64000600) r5 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000001a7c867500ee0f6ef60000000000000000000b0000000009973ce3e723077ae63297fd132dcbf9f8e06a88f8d044e8cc73bcb6304d9cd74e8b3d2d6f376a2bccd4947402b53e3fc33829aaeab43029bff3bbd1c94cf1017efe18abc92c5cd1d76dbf3a754971cc5d94d7ffe9e40e661ff7d34bea783a169bd15917dc31d4624021f255640741895ee936e0f57f8bc3cf77c47ae66555d1f7b75604b81e43c30aebe257830d29401fd0268ae32f26d55f214624284ebc0238983d3db65f1ff45c4933f3efdd5e4d74d0c9fc6e0edfede917922c8622ceefc592cccb0d81a5b64454e2fd06df09e67fa538851dfe184d444e083dc553c1a8e25e527138b96cf849070d2e672e0cf74e2093f36c4b0e762fd09e3169d70fdfd8f7c4ca8e1594d85b19ce5dc02136e26a825664666fba4f2a28ce327a1f97913c1559aa4a7348d38cc798d884f5f7c67b85eacf2094b05178bb964e8c57e2d97a28b0fd2c1e06520c07477189cf8fe091a0e5b4abd5883ca458a29f2f99beb00e28962dce5363cd039a4dccbc218c4889365ecc6d2295dbec5746b28817ab3e0bed253b2cf4c000000000000000"], &(0x7f0000000080)=0x2c) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYRES16=r5], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 6.940470561s ago: executing program 1 (id=1142): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@caif=@dgm={0x25, 0x2, 0x6}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb", 0x8a}, {&(0x7f0000000500)="d1fb383c69fd", 0x6}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000640)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000300)="869dfc51939f60eb3c7307dd0362ee283b18030ecfd61ceca6c5f1ac59933bef13e32a57591867dfdacd5251fc0f4a022ed933e9819d151e6145bb364358cae9e00300d2b161ea367aed6d17000000000000000000", 0x55}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.743076649s ago: executing program 1 (id=1143): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x800000, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.317487292s ago: executing program 4 (id=1144): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff6, 0x0, 0x0, 0x200004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic}) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r8, 0xee01, r9) keyctl$setperm(0x5, r8, 0x30925) keyctl$KEYCTL_MOVE(0x3, r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5}, 0x94) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) 3.242734175s ago: executing program 3 (id=1145): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close(0x3) 3.230339853s ago: executing program 0 (id=1146): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) socket(0xf, 0x5, 0x2000000) r1 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r1, 0x4) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.050996969s ago: executing program 1 (id=1147): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, 0x0, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 2.925850174s ago: executing program 2 (id=1148): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) 2.368730746s ago: executing program 3 (id=1149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b00000000000800290041010000bf94536a2fbafff10f3e091ebd5ee018b3900433aae8bc5626bf63d991000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd60b1ac607c5fa7ce2868b36bfd60d3ffff00403a00fe880000000000000000000000000001ff02000000000008000000000000000102009078000005026050835900000000"], 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@remote, @rand_addr=' \x01\x00', @empty, 0x7, 0xc6, 0x9, 0x400, 0x80004, 0x1000040}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10000, 0x200070}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe8) userfaultfd(0x801) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r8, 0xfffffe4d}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 2.060420466s ago: executing program 0 (id=1150): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, 0x0, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 1.69832619s ago: executing program 4 (id=1151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x2a000) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) 88.174688ms ago: executing program 3 (id=1152): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 67.729972ms ago: executing program 2 (id=1153): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff6, 0x0, 0x0, 0x200004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic}) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r8, 0xee01, r9) keyctl$setperm(0x5, r8, 0x30925) keyctl$KEYCTL_MOVE(0x3, r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000f7ffffff00000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000fe0000068500000083000000bf0900000000000055090100000000009500000000000000470900001000f8a4bf93000000000000b7030000000000008500000085000000b700"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5}, 0x94) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) 44.142481ms ago: executing program 0 (id=1154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0xa3, &(0x7f0000000300)={0x0, 0x14b6, 0x8, 0x1, 0x133}, &(0x7f00000001c0), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\"\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 0s ago: executing program 1 (id=1155): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): device_t tclass=blk_file permissive=1 [ 182.255626][ T7663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'. [ 182.555191][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 182.611458][ T5831] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 182.771489][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 182.789187][ T5831] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 182.823168][ T5831] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.862884][ T5831] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.908316][ T5831] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 182.961304][ T5831] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.982648][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.029752][ T5831] usbtmc 2-1:16.0: bulk endpoints not found [ 185.458441][ T29] usb 2-1: USB disconnect, device number 18 [ 185.627142][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 185.630221][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 185.641196][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 185.649108][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 185.655293][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 186.194637][ T7721] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 186.212783][ T7721] PKCS7: Only support pkcs7_signedData type [ 186.365129][ T30] audit: type=1400 audit(1777009955.533:337): avc: denied { append } for pid=7725 comm="syz.2.520" name="cec2" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.413434][ T30] audit: type=1400 audit(1777009955.563:338): avc: denied { mounton } for pid=7725 comm="syz.2.520" path="/100/file0" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 186.451676][ T30] audit: type=1400 audit(1777009955.603:339): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.778276][ T7731] syzkaller0: entered promiscuous mode [ 186.806439][ T7731] syzkaller0: entered allmulticast mode [ 187.495752][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 188.680160][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.694805][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.728924][ T5941] IPVS: starting estimator thread 0... [ 188.825271][ T7755] IPVS: using max 78 ests per chain, 187200 per kthread [ 189.325857][ T30] audit: type=1800 audit(1777009958.493:340): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.527" name="bus" dev="ramfs" ino=19446 res=0 errno=0 [ 190.810486][ T5831] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 190.971463][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 190.988088][ T5831] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 191.011498][ T5831] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.048156][ T5831] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.087366][ T5831] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.121274][ T5831] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.161047][ T5831] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.192958][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.450083][ T5831] usb 3-1: usb_control_msg returned -32 [ 191.467053][ T5831] usbtmc 3-1:16.0: can't read capabilities [ 191.662152][ T5831] usb 3-1: USB disconnect, device number 19 [ 192.121497][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 192.275171][ T5831] IPVS: starting estimator thread 0... [ 192.309452][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 192.339950][ T5899] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 192.348949][ T5899] usb 3-1: config 0 has no interface number 0 [ 192.355123][ T5899] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.366542][ T5899] usb 3-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.381505][ T7790] IPVS: using max 46 ests per chain, 110400 per kthread [ 192.384075][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 192.412899][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.452641][ T5899] usb 3-1: config 0 descriptor?? [ 192.618178][ T7809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7809 comm=syz.3.545 [ 192.881700][ T5899] logitech-djreceiver 0003:046D:C537.0011: unknown main item tag 0x0 [ 192.926251][ T5899] logitech-djreceiver 0003:046D:C537.0011: unknown main item tag 0x0 [ 192.980848][ T5899] logitech-djreceiver 0003:046D:C537.0011: unknown main item tag 0x0 [ 193.032860][ T5899] logitech-djreceiver 0003:046D:C537.0011: unknown main item tag 0x0 [ 193.079002][ T5899] logitech-djreceiver 0003:046D:C537.0011: unknown main item tag 0x0 [ 193.106890][ T5899] logitech-djreceiver 0003:046D:C537.0011: unknown main item tag 0x0 [ 193.178075][ T5899] logitech-djreceiver 0003:046D:C537.0011: unknown main item tag 0x0 [ 193.217238][ T5899] logitech-djreceiver 0003:046D:C537.0011: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.2-1/input4 [ 193.302092][ T5899] usb 3-1: USB disconnect, device number 20 [ 193.375557][ T7819] fido_id[7819]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 194.164820][ T7827] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 194.179709][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 194.210219][ T7827] PKCS7: Only support pkcs7_signedData type [ 196.832242][ T1227] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 196.991449][ T1227] usb 5-1: Using ep0 maxpacket: 8 [ 197.003307][ T1227] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.015022][ T1227] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.025210][ T1227] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.036157][ T1227] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.049647][ T1227] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.059092][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.294107][ T1227] usb 5-1: GET_CAPABILITIES returned 0 [ 197.311510][ T1227] usbtmc 5-1:16.0: can't read capabilities [ 197.601472][ T1227] usb 5-1: USB disconnect, device number 20 [ 198.028164][ T7877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.597985][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 199.241596][ T5831] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 200.141449][ T5831] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.207254][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.231494][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.254987][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.283622][ T5831] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.311890][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.344854][ T5831] usb 4-1: Product: syz [ 200.362941][ T5831] usb 4-1: Manufacturer: syz [ 200.370181][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 200.396925][ T5831] cdc_wdm 4-1:1.0: skipping garbage [ 200.420373][ T5831] cdc_wdm 4-1:1.0: skipping garbage [ 200.456844][ T7912] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 200.480714][ T5831] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 200.507073][ T5831] cdc_wdm 4-1:1.0: Unknown control protocol [ 200.625692][ T5831] usb 4-1: USB disconnect, device number 20 [ 201.171914][ T29] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 201.364881][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 201.380294][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 201.411104][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.425377][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 201.446074][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 201.475638][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 201.486791][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 201.498694][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.526259][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 201.538451][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 201.559035][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 201.576940][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 201.601351][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.636890][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 201.661024][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 201.697754][ T29] usb 1-1: string descriptor 0 read error: -22 [ 201.709681][ T29] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 201.736149][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.777214][ T29] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 202.116875][ T7950] netlink: 'syz.0.576': attribute type 64 has an invalid length. [ 202.138116][ T7950] netlink: 5 bytes leftover after parsing attributes in process `syz.0.576'. [ 202.231937][ T29] usb 1-1: USB disconnect, device number 25 [ 203.258985][ T30] audit: type=1326 audit(1777009972.353:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.585986][ T30] audit: type=1326 audit(1777009972.353:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.616048][ T30] audit: type=1326 audit(1777009972.353:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.657525][ T30] audit: type=1326 audit(1777009972.353:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.740097][ T30] audit: type=1326 audit(1777009972.353:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.781753][ T29] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 203.817020][ T30] audit: type=1326 audit(1777009972.353:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.847906][ T30] audit: type=1326 audit(1777009972.363:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.877565][ T30] audit: type=1326 audit(1777009972.363:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.900940][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 203.909672][ T30] audit: type=1326 audit(1777009972.363:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.951775][ T30] audit: type=1326 audit(1777009972.363:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.0.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ec99cdd9 code=0x7ffc0000 [ 203.994323][ T29] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 204.027359][ T29] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 204.046077][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.056883][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.068751][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.080104][ T29] usb 1-1: Product: syz [ 204.089938][ T29] usb 1-1: Manufacturer: syz [ 204.096294][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.107613][ T29] usb 1-1: SerialNumber: syz [ 204.126178][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.148085][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.157403][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.172041][ T24] usb 2-1: Product: syz [ 204.186435][ T29] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 204.194263][ T24] usb 2-1: Manufacturer: syz [ 204.208681][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 204.218905][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 204.227929][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 204.247341][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 204.260530][ T29] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 204.272866][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 204.302253][ T29] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 204.319973][ T29] dvb_usb_umt_010 1-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 204.439978][ C1] wdm_int_callback: 1 callbacks suppressed [ 204.439999][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 204.452383][ C1] wdm_int_callback: 1 callbacks suppressed [ 204.452395][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 204.464481][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 204.471489][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 204.477717][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 204.484285][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 204.490848][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 204.497427][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 204.504046][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 204.517718][ T29] usb 2-1: USB disconnect, device number 19 [ 205.788948][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 205.973814][ T24] usb 1-1: USB disconnect, device number 26 [ 207.244497][ T8020] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 207.288911][ T8020] PKCS7: Only support pkcs7_signedData type [ 209.027238][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 209.027253][ T30] audit: type=1800 audit(1777009978.193:412): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.611" name="bus" dev="ramfs" ino=21071 res=0 errno=0 [ 209.500804][ T8066] warning: `syz.2.617' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 209.551492][ T5941] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 209.652703][ T8072] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 209.662759][ T8072] PKCS7: Only support pkcs7_signedData type [ 209.713843][ T5941] usb 4-1: config 0 has no interfaces? [ 209.725493][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.746392][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 209.764256][ T5941] usb 4-1: SerialNumber: syz [ 209.778103][ T5941] usb 4-1: config 0 descriptor?? [ 210.015688][ T5941] usb 4-1: USB disconnect, device number 21 [ 210.525166][ T30] audit: type=1400 audit(1777009979.683:413): avc: denied { read } for pid=8093 comm="syz.0.626" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.580019][ T8094] binder: BINDER_SET_CONTEXT_MGR already set [ 210.594816][ T8094] binder: 8093:8094 ioctl 4018620d 200000000040 returned -16 [ 210.656057][ T30] audit: type=1400 audit(1777009979.683:414): avc: denied { open } for pid=8093 comm="syz.0.626" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.712321][ T8097] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 210.715956][ T30] audit: type=1400 audit(1777009979.723:415): avc: denied { ioctl } for pid=8093 comm="syz.0.626" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.782950][ T30] audit: type=1400 audit(1777009979.723:416): avc: denied { set_context_mgr } for pid=8093 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 210.803573][ T30] audit: type=1400 audit(1777009979.743:417): avc: denied { write } for pid=8093 comm="syz.0.626" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.804490][ T8097] PKCS7: Only support pkcs7_signedData type [ 210.826568][ T30] audit: type=1400 audit(1777009979.743:418): avc: denied { map } for pid=8093 comm="syz.0.626" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 211.116150][ T30] audit: type=1400 audit(1777009980.283:419): avc: denied { append } for pid=8111 comm="syz.1.632" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 212.125929][ T8126] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 212.179358][ T8126] PKCS7: Only support pkcs7_signedData type [ 212.813621][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 212.836775][ T804] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 213.036858][ T804] usb 3-1: config 0 has no interfaces? [ 213.063804][ T804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.117066][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.163683][ T804] usb 3-1: SerialNumber: syz [ 213.190401][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 213.216882][ T804] usb 3-1: config 0 descriptor?? [ 213.453097][ T804] usb 3-1: USB disconnect, device number 21 [ 213.862062][ T30] audit: type=1400 audit(1777009983.033:420): avc: denied { open } for pid=8166 comm="syz.4.646" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 213.953612][ T30] audit: type=1400 audit(1777009983.083:421): avc: denied { ioctl } for pid=8166 comm="syz.4.646" path="/dev/ttyqd" dev="devtmpfs" ino=388 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 214.036757][ T30] audit: type=1400 audit(1777009983.203:422): avc: denied { search } for pid=5491 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.115007][ T30] audit: type=1400 audit(1777009983.203:423): avc: denied { search } for pid=5491 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.169544][ T30] audit: type=1400 audit(1777009983.203:424): avc: denied { search } for pid=5491 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.245079][ T30] audit: type=1400 audit(1777009983.213:425): avc: denied { read } for pid=5491 comm="dhcpcd" name="n100" dev="tmpfs" ino=5386 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.248567][ T8174] syzkaller0: entered promiscuous mode [ 214.312965][ T30] audit: type=1400 audit(1777009983.213:426): avc: denied { open } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=5386 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.318266][ T8174] syzkaller0: entered allmulticast mode [ 214.348810][ T30] audit: type=1400 audit(1777009983.213:427): avc: denied { getattr } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=5386 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.444800][ T8182] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.651'. [ 214.494451][ T8184] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.651'. [ 214.541942][ T30] audit: type=1400 audit(1777009983.703:428): avc: denied { read open } for pid=8187 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.657642][ T30] audit: type=1400 audit(1777009983.703:429): avc: denied { getattr } for pid=8187 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.735346][ T30] audit: type=1400 audit(1777009983.743:430): avc: denied { create } for pid=8181 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.822546][ T30] audit: type=1400 audit(1777009983.743:431): avc: denied { setopt } for pid=8181 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.724909][ T29] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 215.933525][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 215.965778][ T29] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 215.988860][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.028631][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.065512][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 216.102810][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.129038][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.181840][ T29] usbtmc 4-1:16.0: bulk endpoints not found [ 216.396032][ T29] usb 4-1: USB disconnect, device number 22 [ 217.108120][ T8233] Bluetooth: MGMT ver 1.23 [ 217.155639][ T8235] evm: overlay not supported [ 217.828508][ T8251] syzkaller0: entered promiscuous mode [ 217.834069][ T8251] syzkaller0: entered allmulticast mode [ 218.403075][ T29] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 218.580041][ T29] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.589139][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.607446][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.626053][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.658156][ T29] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.670858][ T29] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.683154][ T29] usb 1-1: Product: syz [ 218.687354][ T29] usb 1-1: Manufacturer: syz [ 218.897720][ T8272] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 218.912739][ T8272] SELinux: failed to load policy [ 219.911406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 220.702219][ T8282] syzkaller0: entered promiscuous mode [ 220.711659][ T8282] syzkaller0: entered allmulticast mode [ 221.127914][ T29] usb 1-1: USB disconnect, device number 27 [ 221.233134][ T8301] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.680'. [ 221.252687][ T8301] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.680'. [ 222.228645][ T8313] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.683'. [ 223.706709][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 223.706723][ T30] audit: type=1400 audit(1777009992.873:446): avc: denied { append } for pid=8337 comm="syz.2.691" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 223.777658][ T8345] netlink: 68 bytes leftover after parsing attributes in process `syz.3.693'. [ 223.810116][ T8345] netlink: 68 bytes leftover after parsing attributes in process `syz.3.693'. [ 223.881186][ T8349] netlink: 68 bytes leftover after parsing attributes in process `syz.4.694'. [ 224.147787][ T8356] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.697'. [ 225.178481][ T30] audit: type=1400 audit(1777009994.333:447): avc: denied { name_bind } for pid=8377 comm="syz.0.704" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 225.242948][ T30] audit: type=1400 audit(1777009994.363:448): avc: denied { node_bind } for pid=8377 comm="syz.0.704" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 225.390437][ T8384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.706'. [ 225.487362][ T8384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.706'. [ 226.091548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 226.187743][ T30] audit: type=1400 audit(1777009995.353:449): avc: denied { ioctl } for pid=8391 comm="syz.0.709" path="socket:[22884]" dev="sockfs" ino=22884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.391710][ T805] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 226.563895][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.590954][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.624061][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.662993][ T805] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.693909][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.721786][ T805] usb 2-1: config 0 descriptor?? [ 227.173501][ T805] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 227.660363][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 227.754277][ T8418] netlink: 68 bytes leftover after parsing attributes in process `syz.4.715'. [ 227.770310][ T8418] netlink: 68 bytes leftover after parsing attributes in process `syz.4.715'. [ 228.511519][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 228.541600][ T805] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 228.555812][ C0] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 228.661491][ T24] usb 4-1: device descriptor read/64, error -71 [ 228.722540][ T805] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.731341][ T805] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.741636][ T805] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.750614][ T805] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.761944][ T805] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.773383][ T805] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.782701][ T805] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.790701][ T805] usb 5-1: Product: syz [ 228.795026][ T805] usb 5-1: Manufacturer: syz [ 228.805444][ T805] cdc_wdm 5-1:1.0: skipping garbage [ 228.810717][ T805] cdc_wdm 5-1:1.0: skipping garbage [ 228.817292][ T805] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 228.823260][ T805] cdc_wdm 5-1:1.0: Unknown control protocol [ 228.911600][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 229.062068][ T24] usb 4-1: device descriptor read/64, error -71 [ 229.077085][ T5970] usb 5-1: USB disconnect, device number 21 [ 229.184138][ T24] usb usb4-port1: attempt power cycle [ 229.294102][ T8449] syzkaller0: entered promiscuous mode [ 229.309071][ T8449] syzkaller0: entered allmulticast mode [ 229.353374][ T29] usb 2-1: USB disconnect, device number 20 [ 229.510122][ T8463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8463 comm=syz.1.733 [ 229.551476][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 229.582123][ T24] usb 4-1: device descriptor read/8, error -71 [ 229.831935][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 229.862476][ T24] usb 4-1: device descriptor read/8, error -71 [ 229.972870][ T24] usb usb4-port1: unable to enumerate USB device [ 231.341724][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 231.501455][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 231.514489][ T24] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 231.531778][ T24] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 231.552228][ T24] usb 2-1: config 0 has no interface number 0 [ 231.565167][ T24] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.590333][ T24] usb 2-1: config 0 interface 52 has no altsetting 0 [ 231.607555][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 231.633330][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.650764][ T24] usb 2-1: config 0 descriptor?? [ 232.531493][ T29] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 232.703151][ T29] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 232.713983][ T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 232.714688][ T8523] syzkaller0: entered promiscuous mode [ 232.725296][ T29] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.785137][ T29] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 232.796235][ T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 232.807396][ T29] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.807603][ T8523] syzkaller0: entered allmulticast mode [ 232.821470][ T29] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 232.914882][ T29] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 232.946201][ T29] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.985410][ T29] usb 4-1: string descriptor 0 read error: -22 [ 232.996876][ T29] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 233.018326][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.031879][ T29] adutux 4-1:168.0: interrupt endpoints not found [ 233.231532][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 233.240343][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 233.285996][ T8520] netlink: 'syz.3.752': attribute type 64 has an invalid length. [ 233.294045][ T8520] netlink: 5 bytes leftover after parsing attributes in process `syz.3.752'. [ 233.359248][ T805] usb 4-1: USB disconnect, device number 27 [ 233.406498][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 233.413375][ T10] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 233.423144][ T10] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 233.437622][ T10] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 233.446767][ T10] usb 3-1: config 250 has no interface number 0 [ 233.458585][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 233.472692][ T10] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 233.483434][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.493965][ T10] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 233.504329][ T10] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 233.518072][ T10] usb 3-1: config 250 interface 228 has no altsetting 0 [ 233.526532][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 233.536268][ T10] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 233.544678][ T10] usb 3-1: Product: syz [ 233.548861][ T10] usb 3-1: SerialNumber: syz [ 233.558730][ T10] hub 3-1:250.228: bad descriptor, ignoring hub [ 233.565296][ T10] hub 3-1:250.228: probe with driver hub failed with error -5 [ 233.603669][ T24] usb 2-1: Can not set alternate setting to 1, error: -71 [ 233.615534][ T24] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 233.639243][ T24] usb 2-1: USB disconnect, device number 21 [ 233.856271][ T30] audit: type=1400 audit(1777010002.963:450): avc: denied { read write } for pid=8530 comm="syz.1.755" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 233.915948][ T30] audit: type=1400 audit(1777010002.963:451): avc: denied { open } for pid=8530 comm="syz.1.755" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 234.657760][ T10] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 234.695081][ T10] usb 3-1: USB disconnect, device number 22 [ 234.720038][ T10] usblp0: removed [ 238.280613][ T8580] syzkaller0: entered promiscuous mode [ 238.288256][ T8580] syzkaller0: entered allmulticast mode [ 238.405319][ T30] audit: type=1800 audit(1777010007.573:452): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.764" name="bus" dev="ramfs" ino=24601 res=0 errno=0 [ 238.451952][ T29] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 238.602948][ T29] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 238.620209][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.631902][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.643485][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.657255][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.676226][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.701028][ T29] usb 5-1: config 0 descriptor?? [ 238.901517][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 238.908641][ T5839] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 239.045617][ T8591] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 239.061568][ T8591] PKCS7: Only support pkcs7_signedData type [ 239.134236][ T29] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 239.160625][ T29] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 239.426737][ T29] usb 5-1: USB disconnect, device number 22 [ 241.673110][ T10] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 241.811458][ T29] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 241.852758][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 241.865674][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 241.889996][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.921629][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 241.943538][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 241.964787][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.983705][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 241.992714][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 241.996348][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.025140][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.027984][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.038307][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.065201][ T805] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 242.086941][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.104044][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.128581][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 242.133614][ T29] usb 3-1: config 0 descriptor?? [ 242.181637][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 242.194588][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 242.219633][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.251449][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 242.258124][ T805] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 242.266543][ T805] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 242.277801][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.299642][ T805] usb 5-1: config 0 has no interface number 0 [ 242.307071][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 242.319985][ T805] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.333910][ T805] usb 5-1: config 0 interface 52 has no altsetting 0 [ 242.342732][ T805] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 242.352267][ T10] usb 1-1: string descriptor 0 read error: -22 [ 242.358654][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.369114][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.377487][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.395253][ T805] usb 5-1: config 0 descriptor?? [ 242.401000][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 242.584916][ T29] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 242.749932][ T8605] netlink: 'syz.0.774': attribute type 64 has an invalid length. [ 242.773933][ T8605] netlink: 5 bytes leftover after parsing attributes in process `syz.0.774'. [ 242.798895][ T10] usb 1-1: USB disconnect, device number 28 [ 242.921809][ T29] usb 3-1: USB disconnect, device number 23 [ 243.111314][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 243.192615][ T8646] SELinux: Context 줨 is not valid (left unmapped). [ 243.200750][ T30] audit: type=1400 audit(1777010012.363:453): avc: denied { create } for pid=8642 comm="syz.3.786" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 243.222992][ T30] audit: type=1400 audit(1777010012.363:454): avc: denied { associate } for pid=8642 comm="syz.3.786" name="file2" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 244.894676][ T805] usb 5-1: Can not set alternate setting to 1, error: -71 [ 244.915342][ T805] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 244.942686][ T805] usb 5-1: USB disconnect, device number 23 [ 244.994947][ T30] audit: type=1400 audit(1777010014.153:455): avc: denied { rmdir } for pid=5823 comm="syz-executor" name="file2" dev="tmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 245.151761][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 245.281445][ T5941] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 245.351437][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 246.180347][ T24] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 246.188451][ T30] audit: type=1400 audit(1777010014.473:456): avc: denied { read append } for pid=8666 comm="syz.3.794" name="sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.189135][ T24] usb 3-1: config 0 has no interface number 0 [ 246.219821][ T24] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.332201][ T30] audit: type=1400 audit(1777010014.483:457): avc: denied { open } for pid=8666 comm="syz.3.794" path="/dev/sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.356289][ T24] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.527408][ T5941] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 246.544098][ T24] usb 3-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.559315][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 246.574068][ T5941] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.577752][ T805] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 246.588547][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 246.604432][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 246.605451][ T30] audit: type=1400 audit(1777010014.493:458): avc: denied { ioctl } for pid=8666 comm="syz.3.794" path="/dev/sg0" dev="devtmpfs" ino=786 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.615705][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.667093][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 246.701860][ T5941] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 246.719955][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 246.756511][ T5941] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.773514][ T24] usb 3-1: config 0 descriptor?? [ 246.786057][ T24] usb 3-1: can't set config #0, error -71 [ 246.800487][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 246.814252][ T24] usb 3-1: USB disconnect, device number 24 [ 246.826923][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 246.850648][ T5941] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 246.851437][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 246.858614][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 246.901150][ T5941] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.954549][ T805] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.959039][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 247.021491][ T5941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 247.045340][ T805] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.046907][ T5941] usb 1-1: string descriptor 0 read error: -22 [ 247.091563][ T5941] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 247.112956][ T805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 247.119592][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.162975][ T805] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 247.180081][ T5941] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 247.203227][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.234010][ T805] usb 2-1: config 0 descriptor?? [ 247.412469][ T8662] netlink: 'syz.0.792': attribute type 64 has an invalid length. [ 247.434136][ T8662] netlink: 5 bytes leftover after parsing attributes in process `syz.0.792'. [ 247.492683][ T10] usb 1-1: USB disconnect, device number 29 [ 248.627868][ T805] usbhid 2-1:0.0: can't add hid device: -71 [ 248.638242][ T805] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 248.664156][ T805] usb 2-1: USB disconnect, device number 22 [ 250.105279][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.111708][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.551130][ T8732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.810'. [ 254.750442][ T30] audit: type=1400 audit(1777010023.913:459): avc: denied { append } for pid=8762 comm="syz.4.819" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.867686][ T8787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8787 comm=syz.1.826 [ 258.091582][ T8795] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 258.108288][ T8795] PKCS7: Only support pkcs7_signedData type [ 258.991443][ T29] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 259.161497][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 259.186135][ T29] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 259.204790][ T29] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 259.248603][ T29] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 259.258013][ T29] usb 4-1: config 250 has no interface number 0 [ 259.274557][ T29] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 259.289148][ T29] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 259.301122][ T29] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 259.311751][ T29] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 259.322808][ T29] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 259.362337][ T29] usb 4-1: config 250 interface 228 has no altsetting 0 [ 259.394241][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 259.405418][ T29] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 259.431550][ T29] usb 4-1: Product: syz [ 259.441647][ T29] usb 4-1: SerialNumber: syz [ 259.450129][ T29] hub 4-1:250.228: bad descriptor, ignoring hub [ 259.459222][ T29] hub 4-1:250.228: probe with driver hub failed with error -5 [ 259.622336][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 259.719377][ T29] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 259.761647][ T8812] tipc: Enabled bearer , priority 0 [ 259.795085][ T8812] tipc: Resetting bearer [ 259.830944][ T8811] tipc: Disabling bearer [ 259.878927][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.892765][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.111633][ T29] usb 4-1: USB disconnect, device number 28 [ 260.140046][ T29] usblp0: removed [ 262.087788][ T8830] netlink: 68 bytes leftover after parsing attributes in process `syz.0.840'. [ 262.147592][ T8830] netlink: 68 bytes leftover after parsing attributes in process `syz.0.840'. [ 262.614865][ T1227] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 262.771555][ T1227] usb 4-1: device descriptor read/64, error -71 [ 263.541642][ T1227] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 263.572916][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 263.648729][ T30] audit: type=1400 audit(1777010032.733:460): avc: denied { create } for pid=8847 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 263.811489][ T30] audit: type=1400 audit(1777010032.733:461): avc: denied { write } for pid=8847 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 263.841818][ T1227] usb 4-1: device descriptor read/64, error -71 [ 263.951781][ T1227] usb usb4-port1: attempt power cycle [ 263.974903][ T8856] syzkaller0: entered promiscuous mode [ 264.011426][ T8856] syzkaller0: entered allmulticast mode [ 264.291522][ T1227] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 264.364776][ T1227] usb 4-1: device descriptor read/8, error -71 [ 264.413888][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 264.425141][ T8871] tipc: Enabled bearer , priority 0 [ 264.460757][ T8871] tipc: Resetting bearer [ 264.484944][ T8870] tipc: Disabling bearer [ 264.660724][ T805] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.668377][ T1227] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 264.705450][ T1227] usb 4-1: device descriptor read/8, error -71 [ 265.215232][ T1227] usb usb4-port1: unable to enumerate USB device [ 265.217691][ T5970] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 265.331551][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 265.353264][ T805] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.411822][ T805] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.422204][ T5970] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 265.425325][ T805] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.440429][ T805] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 265.460499][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.479018][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.479404][ T805] usb 3-1: config 0 descriptor?? [ 265.511483][ T5970] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.542103][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.563917][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.594237][ T8881] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 265.616580][ T5970] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 265.625962][ T8881] PKCS7: Only support pkcs7_signedData type [ 265.643552][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.674891][ T5970] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.696931][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.719896][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.742481][ T5970] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 265.750621][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.765743][ T5970] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.781538][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.793683][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.829519][ T5970] usb 1-1: string descriptor 0 read error: -22 [ 265.836182][ T5970] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.854848][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.998834][ T5970] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 266.035088][ T805] usbhid 3-1:0.0: can't add hid device: -71 [ 266.045259][ T805] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 266.067873][ T805] usb 3-1: USB disconnect, device number 25 [ 267.457133][ T8866] netlink: 'syz.0.851': attribute type 64 has an invalid length. [ 267.492886][ T8866] netlink: 5 bytes leftover after parsing attributes in process `syz.0.851'. [ 267.528570][ T1227] usb 1-1: USB disconnect, device number 30 [ 269.346545][ T8921] syzkaller0: entered promiscuous mode [ 269.361488][ T8921] syzkaller0: entered allmulticast mode [ 269.441516][ T5941] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 269.601616][ T5941] usb 5-1: device descriptor read/64, error -71 [ 269.862916][ T5941] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 269.965973][ T8932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8932 comm=syz.3.872 [ 270.022323][ T5941] usb 5-1: device descriptor read/64, error -71 [ 270.144481][ T5941] usb usb5-port1: attempt power cycle [ 270.521495][ T805] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 270.554025][ T8943] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 270.562947][ T5941] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 270.594245][ T8943] PKCS7: Only support pkcs7_signedData type [ 270.613257][ T5941] usb 5-1: device descriptor read/8, error -71 [ 270.681473][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 270.698983][ T805] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 270.715731][ T805] usb 1-1: config 0 has no interface number 0 [ 270.729288][ T805] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.747270][ T805] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.761055][ T805] usb 1-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 270.780941][ T805] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 270.794322][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.816794][ T805] usb 1-1: config 0 descriptor?? [ 270.871511][ T5941] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 270.913552][ T5941] usb 5-1: device descriptor read/8, error -71 [ 270.953822][ T8953] syzkaller0: entered promiscuous mode [ 270.959332][ T8953] syzkaller0: entered allmulticast mode [ 271.041683][ T5941] usb usb5-port1: unable to enumerate USB device [ 271.234077][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 271.242335][ T805] usbhid 1-1:0.4: can't add hid device: -71 [ 271.248321][ T805] usbhid 1-1:0.4: probe with driver usbhid failed with error -71 [ 271.381697][ T805] usb 1-1: USB disconnect, device number 31 [ 273.041896][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 273.216098][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.232483][ T10] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 273.243102][ T1227] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 273.251162][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.262026][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.277698][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.287639][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.301530][ T10] usb 5-1: Product: syz [ 273.305748][ T10] usb 5-1: Manufacturer: syz [ 273.333401][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 273.343432][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 273.348838][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 273.413628][ T1227] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 273.421847][ T1227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.431451][ T24] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 273.432805][ T1227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.450016][ T1227] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.463233][ T1227] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.472913][ T1227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.482406][ T1227] usb 1-1: config 0 descriptor?? [ 273.531489][ T5833] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 273.563790][ T804] usb 5-1: USB disconnect, device number 28 [ 273.601545][ T5970] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 273.622637][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 273.630068][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.640804][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.652780][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.663995][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 273.676035][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 273.683028][ T5833] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.684285][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.696162][ T5833] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 273.703711][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.726734][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.738043][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.738196][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 273.758173][ T5833] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.773585][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 273.775387][ T5833] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.781470][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.790387][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.805969][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.814590][ T5833] usb 4-1: Product: syz [ 273.822347][ T5970] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.824869][ T5833] usb 4-1: Manufacturer: syz [ 273.837720][ T5970] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 273.842752][ T5833] cdc_wdm 4-1:1.0: skipping garbage [ 273.850053][ T5970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.854448][ T5833] cdc_wdm 4-1:1.0: skipping garbage [ 273.867556][ T5833] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 273.871512][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.887255][ T5970] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.901494][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 273.917757][ T1227] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 273.917893][ T24] usb 2-1: string descriptor 0 read error: -22 [ 273.930548][ T1227] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 273.932094][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 273.960625][ T5970] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.971291][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.980409][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.989177][ T5970] usb 3-1: Product: syz [ 273.996207][ T5970] usb 3-1: Manufacturer: syz [ 274.014307][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 274.027866][ T5970] cdc_wdm 3-1:1.0: skipping garbage [ 274.033378][ T5970] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 274.129469][ T1227] usb 4-1: USB disconnect, device number 33 [ 274.156772][ T5833] usb 1-1: USB disconnect, device number 32 [ 274.253151][ T5970] usb 3-1: USB disconnect, device number 26 [ 274.271172][ T8986] netlink: 'syz.1.888': attribute type 64 has an invalid length. [ 274.285329][ T8986] netlink: 5 bytes leftover after parsing attributes in process `syz.1.888'. [ 274.299006][ T805] usb 2-1: USB disconnect, device number 23 [ 274.481468][ T10] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 274.632576][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 274.640000][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 274.651301][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.663841][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 274.676378][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 274.689788][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 274.710581][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 274.733549][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.747557][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 274.759914][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 274.776514][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 274.784884][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 274.795657][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.811441][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 274.826009][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 274.859962][ T10] usb 5-1: string descriptor 0 read error: -22 [ 274.869502][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 274.895379][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.920363][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 275.186109][ T9021] netlink: 68 bytes leftover after parsing attributes in process `syz.2.899'. [ 275.265339][ T805] usb 5-1: USB disconnect, device number 29 [ 275.329518][ T9028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.899'. [ 275.875342][ T5970] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 276.145671][ T5970] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 276.186032][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.220851][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.245758][ T5970] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.276201][ T5970] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.285562][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.296835][ T5970] usb 3-1: config 0 descriptor?? [ 276.531617][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 276.716073][ T5970] usbhid 3-1:0.0: can't add hid device: -71 [ 276.723515][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.735524][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 276.757536][ T5970] usb 3-1: USB disconnect, device number 27 [ 276.768304][ T24] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 276.797871][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.820676][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.851032][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.860826][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.868955][ T24] usb 5-1: Product: syz [ 276.873500][ T24] usb 5-1: Manufacturer: syz [ 276.890833][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 276.899414][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 276.904853][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 276.910587][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 277.120064][ T5970] usb 5-1: USB disconnect, device number 30 [ 279.721520][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 279.887907][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.907299][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.928302][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.965208][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.982182][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.994491][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.003546][ T10] usb 3-1: Product: syz [ 280.007808][ T10] usb 3-1: Manufacturer: syz [ 280.020883][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 280.027476][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 280.336535][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 280.371666][ T5839] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 280.553864][ T10] usb 3-1: USB disconnect, device number 28 [ 280.624442][ T9090] binder: 9089:9090 unknown command 0 [ 280.629936][ T9090] binder: 9089:9090 ioctl c0306201 200000000080 returned -22 [ 280.662134][ T30] audit: type=1400 audit(1777010049.813:462): avc: denied { call } for pid=9089 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 280.811437][ T5833] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 281.034336][ T5833] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 281.047614][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.071514][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.523184][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.536148][ T5833] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.548747][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.575263][ T5833] usb 4-1: config 0 descriptor?? [ 282.307463][ T5833] usbhid 4-1:0.0: can't add hid device: -71 [ 282.324740][ T5833] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.348585][ T5833] usb 4-1: USB disconnect, device number 34 [ 282.367307][ T9113] netlink: 68 bytes leftover after parsing attributes in process `syz.1.925'. [ 282.394005][ T9113] netlink: 68 bytes leftover after parsing attributes in process `syz.1.925'. [ 286.555764][ T9165] fuse: Unknown parameter 'use00000000000000000000' [ 286.569372][ T30] audit: type=1400 audit(1777010055.733:463): avc: denied { mounton } for pid=9163 comm="syz.1.939" path="/202/file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 286.692201][ T29] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 286.911447][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 287.016897][ T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 287.020014][ T30] audit: type=1400 audit(1777010055.733:464): avc: denied { add_name } for pid=9163 comm="syz.1.939" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 287.041618][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.070155][ T30] audit: type=1400 audit(1777010055.733:465): avc: denied { setattr } for pid=9163 comm="syz.1.939" name="work" dev="tmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 287.083034][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.103079][ T30] audit: type=1400 audit(1777010055.733:466): avc: denied { write open } for pid=9163 comm="syz.1.939" path=2F202864656C6574656429 dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 287.129854][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.141687][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.155528][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.158905][ T30] audit: type=1400 audit(1777010055.733:467): avc: denied { create } for pid=9163 comm="syz.1.939" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 287.165092][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.249697][ T30] audit: type=1400 audit(1777010055.733:468): avc: denied { remove_name } for pid=9163 comm="syz.1.939" name="#3" dev="tmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 287.330139][ T30] audit: type=1400 audit(1777010055.733:469): avc: denied { rename } for pid=9163 comm="syz.1.939" name="#3" dev="tmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 287.357606][ T30] audit: type=1400 audit(1777010055.733:470): avc: denied { unlink } for pid=9163 comm="syz.1.939" name="#3" dev="tmpfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=CFA7AE [ 287.382273][ T30] audit: type=1400 audit(1777010055.733:471): avc: denied { unlink } for pid=9163 comm="syz.1.939" name="#4" dev="tmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 287.438440][ T30] audit: type=1400 audit(1777010055.733:472): avc: denied { read } for pid=9163 comm="syz.1.939" path="/202/file0/file1" dev="overlay" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 288.791438][ T29] usb 4-1: usb_control_msg returned -32 [ 288.795981][ T9175] syzkaller0: entered promiscuous mode [ 288.797355][ T29] usbtmc 4-1:16.0: can't read capabilities [ 288.885562][ T9175] syzkaller0: entered allmulticast mode [ 289.252300][ T9188] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 289.311069][ T805] usb 4-1: USB disconnect, device number 35 [ 290.845102][ T9201] syzkaller0: entered promiscuous mode [ 290.865102][ T9201] syzkaller0: entered allmulticast mode [ 292.281806][ T30] audit: type=1400 audit(1777010061.383:473): avc: denied { read } for pid=9205 comm="syz.1.952" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 292.366082][ T30] audit: type=1400 audit(1777010061.383:474): avc: denied { open } for pid=9205 comm="syz.1.952" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 292.416708][ T30] audit: type=1400 audit(1777010061.423:475): avc: denied { ioctl } for pid=9205 comm="syz.1.952" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 292.484721][ T30] audit: type=1400 audit(1777010061.433:476): avc: denied { mount } for pid=9205 comm="syz.1.952" name="/" dev="autofs" ino=27019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 292.523051][ T29] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 292.773881][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 292.782372][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 292.793772][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.808498][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 292.818510][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 292.868704][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.185441][ T30] audit: type=1400 audit(1777010062.313:477): avc: denied { create } for pid=9221 comm="syz.4.954" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.270330][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 293.284871][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 293.304919][ T30] audit: type=1400 audit(1777010062.323:478): avc: denied { associate } for pid=9221 comm="syz.4.954" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 293.329768][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.355119][ T29] usb 1-1: string descriptor 0 read error: -22 [ 293.363525][ T29] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 293.374525][ T30] audit: type=1400 audit(1777010062.383:479): avc: denied { read open } for pid=9221 comm="syz.4.954" path="/188/file0/file1" dev="tmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.397892][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.418969][ T29] adutux 1-1:168.0: interrupt endpoints not found [ 293.633667][ T29] usb 1-1: USB disconnect, device number 33 [ 293.653459][ T9229] tipc: Enabled bearer , priority 0 [ 293.694024][ T9229] syzkaller0: entered promiscuous mode [ 293.709412][ T9229] syzkaller0: entered allmulticast mode [ 293.752297][ T30] audit: type=1400 audit(1777010062.923:480): avc: denied { unlink } for pid=5822 comm="syz-executor" name="file1" dev="tmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.798300][ T9229] tipc: Resetting bearer [ 293.822473][ T30] audit: type=1400 audit(1777010062.983:481): avc: denied { create } for pid=9230 comm="syz.4.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 293.869385][ T30] audit: type=1400 audit(1777010063.013:482): avc: denied { ioctl } for pid=9230 comm="syz.4.956" path="socket:[27047]" dev="sockfs" ino=27047 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 293.902009][ T9228] tipc: Resetting bearer [ 293.933316][ T9228] tipc: Disabling bearer [ 294.282385][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 294.398380][ T9253] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 294.440209][ T9253] PKCS7: Only support pkcs7_signedData type [ 294.448335][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 294.463574][ T24] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 294.473379][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.483761][ T24] usb 5-1: config 0 has no interface number 0 [ 294.508241][ T24] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.522777][ T24] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.534559][ T24] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.567161][ T24] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.598743][ T24] usb 5-1: config 0 interface 52 has no altsetting 0 [ 294.613588][ T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 294.625238][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.650169][ T24] usb 5-1: config 0 descriptor?? [ 294.832449][ T29] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 295.014563][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 295.040985][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.075933][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.089813][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.250638][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 295.306811][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 295.411493][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 295.419921][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.463665][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.472221][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 295.476017][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.493002][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 295.517677][ T10] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 295.530011][ T10] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 295.530820][ T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 295.551899][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.560544][ T10] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 295.564536][ T29] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.599619][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.614563][ T29] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 295.629745][ T10] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 295.630959][ T29] usb 1-1: string descriptor 0 read error: -22 [ 295.651809][ T29] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 295.659246][ T10] usb 2-1: config 250 has no interface number 0 [ 295.661032][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.681426][ T10] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 295.706809][ T29] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 295.721440][ T10] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 295.741862][ T10] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 295.771413][ T10] usb 2-1: config 250 interface 228 has no altsetting 0 [ 295.788836][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 295.799467][ T10] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 295.817106][ T10] usb 2-1: Product: syz [ 295.829839][ T10] usb 2-1: SerialNumber: syz [ 295.844430][ T10] hub 2-1:250.228: bad descriptor, ignoring hub [ 295.859473][ T10] hub 2-1:250.228: probe with driver hub failed with error -5 [ 296.053036][ T29] usb 1-1: USB disconnect, device number 34 [ 296.271742][ T10] usb 2-1: USB disconnect, device number 24 [ 296.347583][ T9282] tipc: Started in network mode [ 296.355831][ T9282] tipc: Node identity c2c5e3e4f848, cluster identity 4711 [ 296.367634][ T9282] tipc: Enabled bearer , priority 0 [ 297.311964][ T9282] syzkaller0: entered promiscuous mode [ 297.331512][ T9282] syzkaller0: entered allmulticast mode [ 297.436634][ T24] usb 5-1: Can not set alternate setting to 1, error: -71 [ 297.454302][ T24] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 297.467282][ T29] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 297.488015][ T24] usb 5-1: USB disconnect, device number 31 [ 297.632732][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 297.721046][ T9281] tipc: Resetting bearer [ 297.736430][ T29] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 297.782068][ T29] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 297.901114][ T29] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 297.912267][ T29] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 297.924461][ T29] usb 2-1: config 250 has no interface number 0 [ 297.938420][ T29] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 297.950109][ T29] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 298.394762][ T29] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 298.412416][ T29] usb 2-1: config 250 interface 228 has no altsetting 0 [ 298.413200][ T9281] tipc: Disabling bearer [ 298.440269][ T29] usb 2-1: string descriptor 0 read error: -71 [ 298.449086][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 298.459489][ T29] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 298.489804][ T29] usb 2-1: can't set config #250, error -71 [ 298.528126][ T5970] tipc: Node number set to 982377444 [ 298.541870][ T29] usb 2-1: USB disconnect, device number 25 [ 298.681474][ T10] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 298.857279][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 298.873488][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 298.911431][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.952738][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 298.971453][ T5970] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 298.981520][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 299.011452][ T5833] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 299.026545][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.061718][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 299.085161][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 299.110679][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.143956][ T10] usb 1-1: string descriptor 0 read error: -22 [ 299.160993][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 299.173870][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 299.215571][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.225116][ T5833] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 299.244506][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.258610][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.277578][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.298866][ T10] adutux 1-1:168.0: interrupt endpoints not found [ 299.322241][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.357767][ T5970] usb 4-1: config 0 descriptor?? [ 299.364393][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.398029][ T5970] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 299.423531][ T5833] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.456160][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.492392][ T5833] usb 3-1: config 0 descriptor?? [ 299.527761][ T805] usb 1-1: USB disconnect, device number 35 [ 299.955418][ T5833] usbhid 3-1:0.0: can't add hid device: -71 [ 299.966439][ T5833] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 299.977794][ T805] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 299.994033][ T5833] usb 3-1: USB disconnect, device number 29 [ 300.151899][ T805] usb 5-1: Using ep0 maxpacket: 16 [ 300.167368][ T805] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 300.181183][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.198303][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.208245][ T805] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 300.221807][ T805] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 300.230876][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.242689][ T805] usb 5-1: config 0 descriptor?? [ 300.336276][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 300.336297][ T30] audit: type=1400 audit(1777010069.503:484): avc: denied { read write } for pid=9326 comm="syz.0.982" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 300.368092][ T30] audit: type=1400 audit(1777010069.533:485): avc: denied { open } for pid=9326 comm="syz.0.982" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 301.671806][ T805] usbhid 5-1:0.0: can't add hid device: -71 [ 301.677824][ T805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 301.695922][ T805] usb 5-1: USB disconnect, device number 32 [ 301.725383][ T5833] usb 4-1: USB disconnect, device number 36 [ 304.439703][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 304.611428][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 304.628622][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 304.730022][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.763473][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.791888][ T9365] syzkaller0: entered promiscuous mode [ 304.805127][ T9365] syzkaller0: entered allmulticast mode [ 304.817483][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 304.952098][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 304.976003][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.458035][ T10] usb 1-1: config 0 descriptor?? [ 306.041997][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0016/input/input9 [ 306.216574][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0016/input/input10 [ 306.261518][ T30] audit: type=1400 audit(1777010075.423:486): avc: denied { read } for pid=9381 comm="syz.2.996" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 306.301730][ T30] audit: type=1400 audit(1777010075.423:487): avc: denied { open } for pid=9381 comm="syz.2.996" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 306.335491][ T30] audit: type=1400 audit(1777010075.463:488): avc: denied { ioctl } for pid=9381 comm="syz.2.996" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 306.541433][ T24] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 306.561190][ T10] kye 0003:0458:5013.0016: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 306.666997][ T9385] fuse: Bad value for 'fd' [ 306.715482][ T10] usb 1-1: USB disconnect, device number 36 [ 306.726288][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 306.734847][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 306.755095][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.796356][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 306.845604][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 306.876136][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 306.891228][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 306.915311][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.928276][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 306.941084][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 306.961615][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 306.971254][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 306.989729][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.079236][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 307.092325][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 307.109483][ T24] usb 3-1: string descriptor 0 read error: -22 [ 307.117147][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 307.128151][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.312001][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 307.650712][ T9394] fuse: Unknown parameter '0x0000000000000003' [ 307.745377][ T24] usb 3-1: USB disconnect, device number 30 [ 308.570413][ T9396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.783638][ T9423] syzkaller0: entered promiscuous mode [ 308.812009][ T805] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 308.826461][ T9423] syzkaller0: entered allmulticast mode [ 308.981419][ T805] usb 4-1: Using ep0 maxpacket: 16 [ 309.000748][ T805] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 309.026023][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.056894][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.087224][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 309.099705][ T805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 309.163154][ T805] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 309.201674][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.241898][ T805] usb 4-1: config 0 descriptor?? [ 309.243422][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 309.268927][ T24] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 309.286196][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.320085][ T24] usb 1-1: config 0 has no interface number 0 [ 309.338717][ T24] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.395305][ T24] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.423895][ T24] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.456234][ T24] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.477227][ T24] usb 1-1: config 0 interface 52 has no altsetting 0 [ 309.486662][ T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 309.496762][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.521115][ T24] usb 1-1: config 0 descriptor?? [ 309.725581][ T9442] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1012'. [ 309.756640][ T805] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0017/input/input11 [ 309.767276][ T9442] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1012'. [ 309.875902][ T805] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0017/input/input12 [ 310.072106][ T805] kye 0003:0458:5013.0017: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 310.168728][ T805] usb 4-1: USB disconnect, device number 37 [ 310.214711][ T9446] fido_id[9446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 310.351935][ T5970] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 310.531612][ T5970] usb 5-1: Using ep0 maxpacket: 8 [ 310.543308][ T5970] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 310.557007][ T5970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.585695][ T5970] usb 5-1: config 0 has no interface number 0 [ 310.605077][ T5970] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.644548][ T5970] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 310.670716][ T5970] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 310.688149][ T5970] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.792461][ T5970] usb 5-1: config 0 interface 52 has no altsetting 0 [ 310.799251][ T5970] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 310.808727][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.838020][ T5970] usb 5-1: config 0 descriptor?? [ 311.342760][ T5941] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 311.531625][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 311.549026][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.549854][ T5941] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 311.556224][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.578341][ T5941] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 311.593946][ T5941] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 311.606141][ T5941] usb 4-1: config 250 has no interface number 0 [ 311.614114][ T5941] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 311.644813][ T5941] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 311.693919][ T5941] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.721023][ T5941] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 311.746874][ T5941] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 311.766292][ T5941] usb 4-1: config 250 interface 228 has no altsetting 0 [ 311.775728][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 311.786108][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 311.794686][ T24] usb 1-1: Can not set alternate setting to 1, error: -71 [ 311.816227][ T5941] usb 4-1: Product: syz [ 311.820988][ T24] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 311.837145][ T5941] usb 4-1: SerialNumber: syz [ 311.872997][ T5941] hub 4-1:250.228: bad descriptor, ignoring hub [ 311.891267][ T24] usb 1-1: USB disconnect, device number 37 [ 311.900211][ T5941] hub 4-1:250.228: probe with driver hub failed with error -5 [ 311.985052][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 312.281251][ T5941] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 312.619086][ T9471] tipc: Enabled bearer , priority 0 [ 312.646383][ T9471] syzkaller0: entered promiscuous mode [ 312.691283][ T9471] syzkaller0: entered allmulticast mode [ 312.768916][ T9471] tipc: Resetting bearer [ 312.838813][ T9470] tipc: Resetting bearer [ 312.975788][ T9470] tipc: Disabling bearer [ 314.065413][ T5970] usb 5-1: Can not set alternate setting to 1, error: -71 [ 314.072618][ T5970] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 314.091452][ T5970] usb 5-1: USB disconnect, device number 33 [ 314.903753][ T5833] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 315.571773][ T5833] usb 5-1: config 0 has no interfaces? [ 315.586335][ T5833] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.595990][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.611751][ T5833] usb 5-1: SerialNumber: syz [ 315.627307][ T5833] usb 5-1: config 0 descriptor?? [ 315.846349][ T804] usb 5-1: USB disconnect, device number 34 [ 316.051645][ T5970] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 316.143143][ T9532] tipc: Enabled bearer , priority 0 [ 316.150707][ T9532] syzkaller0: entered promiscuous mode [ 316.156379][ T9532] syzkaller0: entered allmulticast mode [ 316.175258][ T9532] tipc: Resetting bearer [ 316.184119][ T9531] tipc: Resetting bearer [ 316.197973][ T9531] tipc: Disabling bearer [ 316.205926][ T5970] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 316.213868][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 316.224650][ T5970] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.236317][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 316.247454][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 316.256007][ T805] usb 4-1: USB disconnect, device number 38 [ 316.265004][ T5833] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 316.275586][ T5970] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 316.286878][ T805] usblp0: removed [ 316.298284][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 316.325997][ T5970] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.354961][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 316.375551][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 316.396360][ T5970] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 316.404889][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 316.417404][ T5970] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.424461][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 316.430551][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 316.447479][ T5970] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 316.472903][ T5970] usb 1-1: string descriptor 0 read error: -22 [ 316.474636][ T5833] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.479900][ T5970] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 316.499209][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.525462][ T5970] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 316.551337][ T5833] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.584266][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.591096][ T5833] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 316.603021][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.615398][ T5833] usb 3-1: config 0 descriptor?? [ 316.756790][ T9524] netlink: 'syz.0.1036': attribute type 64 has an invalid length. [ 316.764782][ T9524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1036'. [ 316.776929][ T5970] usb 1-1: USB disconnect, device number 38 [ 317.092667][ T5833] usbhid 3-1:0.0: can't add hid device: -71 [ 317.098655][ T5833] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 317.109258][ T5833] usb 3-1: USB disconnect, device number 31 [ 317.772188][ T5970] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 317.957458][ T5970] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 317.989892][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 318.031318][ T5970] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.056785][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.076947][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 318.091092][ T5970] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 318.098977][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 318.111779][ T5970] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.124720][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.136243][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 318.152954][ T5970] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 318.160423][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 318.171237][ T5970] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.184066][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.197562][ T5970] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 318.215055][ T5970] usb 2-1: string descriptor 0 read error: -22 [ 318.221390][ T5970] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 318.230479][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.253975][ T5970] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 318.387834][ T804] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 318.479714][ T9555] netlink: 'syz.1.1046': attribute type 64 has an invalid length. [ 318.488097][ T9555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1046'. [ 318.638703][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 318.700253][ T804] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 318.717839][ T5970] usb 2-1: USB disconnect, device number 26 [ 318.827828][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.889565][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.905527][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 318.919612][ T804] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 318.928781][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.938361][ T804] usb 3-1: config 0 descriptor?? [ 319.364315][ T9536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.473626][ T9580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9580 comm=syz.1.1055 [ 319.494106][ T804] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0018/input/input13 [ 319.674830][ T804] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0018/input/input14 [ 320.794565][ T804] kye 0003:0458:5013.0018: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 320.915401][ T804] usb 3-1: USB disconnect, device number 32 [ 321.554676][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 321.767118][ T9600] fido_id[9600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 321.948427][ T30] audit: type=1800 audit(1777010091.113:489): pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1059" name="bus" dev="ramfs" ino=28864 res=0 errno=0 [ 322.141409][ T804] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 322.191738][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 322.299654][ T30] audit: type=1400 audit(1777010091.463:490): avc: denied { write } for pid=9626 comm="syz.0.1066" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 322.351436][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 322.361217][ T10] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 322.361454][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 322.377201][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.389750][ T804] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 322.392777][ T10] usb 2-1: config 0 has no interface number 0 [ 322.404232][ T10] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.416983][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.436735][ T9632] syzkaller0: entered promiscuous mode [ 322.452117][ T804] usb 4-1: config 0 has no interface number 0 [ 322.455097][ T10] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.460066][ T804] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.474398][ T9632] syzkaller0: entered allmulticast mode [ 322.490659][ T804] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.496560][ T10] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.519457][ T804] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.531118][ T804] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.533242][ T10] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.544583][ T804] usb 4-1: config 0 interface 52 has no altsetting 0 [ 322.573447][ T804] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 322.574283][ T10] usb 2-1: config 0 interface 52 has no altsetting 0 [ 322.584007][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.597940][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 322.610748][ T804] usb 4-1: config 0 descriptor?? [ 322.617201][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.632590][ T10] usb 2-1: config 0 descriptor?? [ 324.732161][ T9670] syzkaller0: entered promiscuous mode [ 324.735298][ T804] usb 4-1: Can not set alternate setting to 1, error: -71 [ 324.737709][ T9670] syzkaller0: entered allmulticast mode [ 324.756435][ T804] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 324.769597][ T804] usb 4-1: USB disconnect, device number 39 [ 324.824960][ T10] usb 2-1: Can not set alternate setting to 1, error: -71 [ 324.844712][ T10] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 324.891237][ T10] usb 2-1: USB disconnect, device number 27 [ 326.764725][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 327.441598][ T10] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 327.593535][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 327.601008][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.617909][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.629798][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.641303][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.653605][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 327.661185][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.672064][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.683879][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.695100][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.707053][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 327.714650][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.725469][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.737209][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.748368][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.769659][ T10] usb 2-1: string descriptor 0 read error: -22 [ 327.776012][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 327.785226][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.803236][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 328.048000][ T9703] netlink: 'syz.1.1092': attribute type 64 has an invalid length. [ 328.055936][ T9703] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1092'. [ 328.185083][ T5899] usb 2-1: USB disconnect, device number 28 [ 332.810113][ T9762] syzkaller0: entered promiscuous mode [ 332.829521][ T9762] syzkaller0: entered allmulticast mode [ 334.047420][ T9733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.297353][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 338.865076][ T9833] overlayfs: missing 'lowerdir' [ 340.171559][ T5970] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 340.407040][ T5970] usb 2-1: config 0 has no interfaces? [ 340.450473][ T5970] usb 2-1: config 0 has no interfaces? [ 340.479606][ T5970] usb 2-1: config 0 has no interfaces? [ 340.513615][ T5970] usb 2-1: string descriptor 0 read error: -22 [ 340.533772][ T5970] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 340.625852][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.864897][ T5970] usb 2-1: config 0 descriptor?? [ 341.058158][ T9847] syzkaller0: entered promiscuous mode [ 341.074130][ T9847] syzkaller0: entered allmulticast mode [ 341.270099][ T5970] usb 2-1: can't set config #0, error -71 [ 341.308218][ T5970] usb 2-1: USB disconnect, device number 29 [ 341.461664][ T30] audit: type=1400 audit(1777010110.573:491): avc: denied { append } for pid=9859 comm="syz.1.1134" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 341.675412][ T30] audit: type=1400 audit(1777010110.813:492): avc: denied { create } for pid=9859 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 341.985764][ T30] audit: type=1400 audit(1777010110.823:493): avc: denied { setopt } for pid=9859 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.240746][ T30] audit: type=1400 audit(1777010110.823:494): avc: denied { getopt } for pid=9859 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.756813][ T30] audit: type=1326 audit(1777010113.783:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 345.490448][ T30] audit: type=1326 audit(1777010113.783:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 345.535760][ T30] audit: type=1326 audit(1777010113.783:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 345.630453][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 345.680017][ T30] audit: type=1326 audit(1777010113.783:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 345.952637][ T9907] overlayfs: missing 'lowerdir' [ 346.675558][ T30] audit: type=1326 audit(1777010113.783:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 346.699136][ T30] audit: type=1326 audit(1777010113.793:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 347.728544][ T30] audit: type=1326 audit(1777010113.793:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 347.752736][ T30] audit: type=1326 audit(1777010113.793:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 347.777497][ T10] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 349.149183][ T30] audit: type=1326 audit(1777010113.793:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 349.195656][ T10] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 349.257761][ T30] audit: type=1326 audit(1777010113.793:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 349.267898][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.313418][ T30] audit: type=1326 audit(1777010113.793:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 349.371606][ T30] audit: type=1326 audit(1777010113.793:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f01a1b9cdd9 code=0x7ffc0000 [ 349.384410][ T10] usb 3-1: Product: syz [ 349.399394][ T10] usb 3-1: Manufacturer: syz [ 349.406685][ T10] usb 3-1: SerialNumber: syz [ 349.429463][ T30] audit: type=1400 audit(1777010113.953:507): avc: denied { map } for pid=9890 comm="syz.1.1138" path="socket:[29617]" dev="sockfs" ino=29617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.453752][ T30] audit: type=1400 audit(1777010113.953:508): avc: denied { read accept } for pid=9890 comm="syz.1.1138" path="socket:[29617]" dev="sockfs" ino=29617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.544295][ T10] usb 3-1: can't set config #54, error -71 [ 349.607172][ T10] usb 3-1: USB disconnect, device number 33 [ 350.069443][ T9921] syzkaller0: entered promiscuous mode [ 350.087747][ T9921] syzkaller0: entered allmulticast mode [ 351.296223][ T5970] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 351.483136][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.494994][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.505346][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.518491][ T5970] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.527571][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.547292][ T5970] usb 5-1: config 0 descriptor?? [ 352.012699][ T5970] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 352.503096][ C0] ------------[ cut here ]------------ [ 352.508860][ C0] ODEBUG: free active (active state 0) object: ffff88803581a090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 352.522972][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.2.1153/9957 [ 352.533113][ C0] Modules linked in: [ 352.538510][ C0] CPU: 0 UID: 0 PID: 9957 Comm: syz.2.1153 Not tainted syzkaller #0 PREEMPT(full) [ 352.547864][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.558001][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 352.563865][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 72 17 e4 0b 41 56 48 8b 14 dd c0 33 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c c3 d9 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 352.583540][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010246 [ 352.589640][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 352.597678][ C0] RDX: ffffffff8c1c3300 RSI: ffffffff8c1c2f20 RDI: ffffffff90e6aae0 [ 352.605699][ C0] RBP: 0000000000000001 R08: ffff88803581a090 R09: ffffffff8bb2c6e0 [ 352.613717][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c2f20 [ 352.621768][ C0] R13: ffffffff8bb2c720 R14: ffffffff8a84b1a0 R15: ffffc90000007b28 [ 352.629749][ C0] FS: 00007f01a29fa6c0(0000) GS:ffff8881242db000(0000) knlGS:0000000000000000 [ 352.638735][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.645358][ C0] CR2: 0000001b30c20ff8 CR3: 000000004f973000 CR4: 00000000003526f0 [ 352.653380][ C0] Call Trace: [ 352.656662][ C0] [ 352.659506][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 352.665179][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 352.671026][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 352.676612][ C0] ? do_syscall_64+0x10b/0xf80 [ 352.681420][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 352.687533][ C0] ? mark_held_locks+0x40/0x70 [ 352.692334][ C0] ? kasan_quarantine_put+0x104/0x240 [ 352.697717][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 352.702973][ C0] ? rose_timer_expiry+0x53f/0x630 [ 352.708094][ C0] ? rose_timer_expiry+0x4f0/0x630 [ 352.713239][ C0] kfree+0x3d0/0x6c0 [ 352.717174][ C0] rose_timer_expiry+0x53f/0x630 [ 352.722170][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 352.727655][ C0] call_timer_fn+0x19a/0x640 [ 352.732295][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 352.737470][ C0] ? mark_held_locks+0x40/0x70 [ 352.742285][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 352.747759][ C0] __run_timers+0x75f/0xaf0 [ 352.752307][ C0] ? __pfx___run_timers+0x10/0x10 [ 352.757374][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 352.762441][ C0] run_timer_base+0x114/0x190 [ 352.767130][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 352.772377][ C0] run_timer_softirq+0x1a/0x50 [ 352.777144][ C0] handle_softirqs+0x1ea/0xa00 [ 352.781948][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 352.787298][ C0] ? _raw_spin_unlock+0x28/0x50 [ 352.792186][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 352.797825][ C0] __irq_exit_rcu+0x162/0x210 [ 352.802548][ C0] irq_exit_rcu+0x9/0x30 [ 352.806804][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 352.812474][ C0] [ 352.815404][ C0] [ 352.818334][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.824356][ C0] RIP: 0010:sized_strscpy+0x19/0x2f0 [ 352.829652][ C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 d2 0f 84 42 02 00 00 41 57 41 56 41 55 41 54 49 89 d4 55 <53> 48 83 ec 18 48 81 fa ff ff ff 7f 0f 87 f4 01 00 00 49 89 f6 49 [ 352.849314][ C0] RSP: 0018:ffffc90003246e60 EFLAGS: 00000202 [ 352.855438][ C0] RAX: 000000000007e236 RBX: ffff88801c0c2e98 RCX: ffffc90005e91000 [ 352.863448][ C0] RDX: 000000000000000b RSI: ffff888033482e18 RDI: ffff88801c0c2e98 [ 352.871489][ C0] RBP: ffff88801c0c2e70 R08: 0000000000000007 R09: 0000000000000010 [ 352.879559][ C0] R10: 000000000000000b R11: 0000000000000000 R12: 000000000000000b [ 352.887593][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001 [ 352.895631][ C0] __update_page_owner_handle+0x17b/0x550 [ 352.901405][ C0] __set_page_owner+0x11f/0x540 [ 352.906305][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 352.911713][ C0] ? bad_range+0x257/0x3f0 [ 352.916136][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 352.921397][ C0] post_alloc_hook+0x153/0x170 [ 352.926174][ C0] get_page_from_freelist+0x11a6/0x33b0 [ 352.931767][ C0] ? __pfx___might_resched+0x10/0x10 [ 352.937101][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 352.943037][ C0] ? __lock_acquire+0x4a5/0x2630 [ 352.947986][ C0] ? __lock_acquire+0x4a5/0x2630 [ 352.952975][ C0] ? css_rstat_updated+0x1ce/0x5a0 [ 352.958094][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 352.964468][ C0] ? do_raw_spin_lock+0x128/0x260 [ 352.969525][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 352.974930][ C0] ? find_held_lock+0x2b/0x80 [ 352.979611][ C0] ? __lock_acquire+0x4a5/0x2630 [ 352.984573][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.990490][ C0] ? policy_nodemask+0xed/0x4f0 [ 352.995366][ C0] alloc_pages_mpol+0x1fb/0x540 [ 353.000216][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 353.005622][ C0] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 353.011545][ C0] folio_alloc_mpol_noprof+0x36/0x260 [ 353.016924][ C0] shmem_alloc_folio+0x135/0x160 [ 353.021890][ C0] shmem_alloc_and_add_folio+0x371/0xd40 [ 353.027537][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 353.033709][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 353.039716][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 353.044952][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 353.050593][ C0] ? filemap_map_pages+0x9c1/0x2140 [ 353.055832][ C0] shmem_fault+0x1f9/0xa20 [ 353.060254][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 353.065219][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 353.070703][ C0] ? find_held_lock+0x2b/0x80 [ 353.075397][ C0] __do_fault+0x10b/0x440 [ 353.079725][ C0] do_fault+0xa99/0x1750 [ 353.083988][ C0] __handle_mm_fault+0x187d/0x2a00 [ 353.089120][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 353.094516][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 353.099975][ C0] ? pte_offset_map_lock+0x174/0x320 [ 353.105287][ C0] ? find_held_lock+0x2b/0x80 [ 353.109965][ C0] ? follow_page_pte+0x4d0/0x13f0 [ 353.115012][ C0] handle_mm_fault+0x36d/0xa20 [ 353.119801][ C0] __get_user_pages+0x1178/0x32a0 [ 353.124854][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 353.130234][ C0] populate_vma_page_range+0x267/0x3f0 [ 353.135723][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 353.141721][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 353.147535][ C0] ? do_mmap+0x93f/0x12f0 [ 353.151896][ C0] __mm_populate+0x107/0x3a0 [ 353.156519][ C0] ? __pfx___mm_populate+0x10/0x10 [ 353.161650][ C0] ? up_write+0x28c/0x4f0 [ 353.165988][ C0] vm_mmap_pgoff+0x37f/0x470 [ 353.170611][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 353.175766][ C0] ? do_futex+0x192/0x350 [ 353.180122][ C0] ? __pfx_do_futex+0x10/0x10 [ 353.184852][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 353.189569][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 353.194550][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 353.199836][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 353.205169][ C0] ? __task_pid_nr_ns+0x1ca/0x510 [ 353.210200][ C0] __x64_sys_mmap+0x125/0x190 [ 353.214911][ C0] do_syscall_64+0x10b/0xf80 [ 353.219526][ C0] ? clear_bhb_loop+0x40/0x90 [ 353.224226][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.230115][ C0] RIP: 0033:0x7f01a1b9cdd9 [ 353.234631][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.254289][ C0] RSP: 002b:00007f01a29fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 353.262727][ C0] RAX: ffffffffffffffda RBX: 00007f01a1e15fa0 RCX: 00007f01a1b9cdd9 [ 353.270718][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 353.278707][ C0] RBP: 00007f01a1c32d69 R08: ffffffffffffffff R09: 0000000000000000 [ 353.286702][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 353.294687][ C0] R13: 00007f01a1e16038 R14: 00007f01a1e15fa0 R15: 00007fffdbac3518 [ 353.302720][ C0] [ 353.305753][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 353.313094][ C0] CPU: 0 UID: 0 PID: 9957 Comm: syz.2.1153 Not tainted syzkaller #0 PREEMPT(full) [ 353.322369][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.332419][ C0] Call Trace: [ 353.335689][ C0] [ 353.338527][ C0] dump_stack_lvl+0x100/0x190 [ 353.343210][ C0] vpanic+0x552/0x970 [ 353.347188][ C0] ? __pfx_vpanic+0x10/0x10 [ 353.351702][ C0] panic+0xd1/0xe0 [ 353.355424][ C0] ? __pfx_panic+0x10/0x10 [ 353.359848][ C0] ? check_panic_on_warn+0x1f/0x90 [ 353.364959][ C0] check_panic_on_warn.cold+0x19/0x34 [ 353.370327][ C0] ? debug_print_object+0x18e/0x2a0 [ 353.375541][ C0] __warn.cold+0x191/0x328 [ 353.379957][ C0] __report_bug+0x296/0x3d0 [ 353.384465][ C0] ? debug_print_object+0x18e/0x2a0 [ 353.389660][ C0] ? __pfx___report_bug+0x10/0x10 [ 353.394686][ C0] ? lock_acquire+0x1b1/0x370 [ 353.399370][ C0] ? mark_held_locks+0x40/0x70 [ 353.404132][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 353.409941][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 353.415144][ C0] report_bug_entry+0xe1/0x290 [ 353.419908][ C0] ? debug_print_object+0x19b/0x2a0 [ 353.425101][ C0] handle_bug+0x1cd/0x2a0 [ 353.429429][ C0] exc_invalid_op+0x17/0x50 [ 353.433929][ C0] asm_exc_invalid_op+0x1a/0x20 [ 353.438775][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 353.444577][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 72 17 e4 0b 41 56 48 8b 14 dd c0 33 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c c3 d9 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 353.464192][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010246 [ 353.470269][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 353.478250][ C0] RDX: ffffffff8c1c3300 RSI: ffffffff8c1c2f20 RDI: ffffffff90e6aae0 [ 353.486228][ C0] RBP: 0000000000000001 R08: ffff88803581a090 R09: ffffffff8bb2c6e0 [ 353.494199][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c2f20 [ 353.502258][ C0] R13: ffffffff8bb2c720 R14: ffffffff8a84b1a0 R15: ffffc90000007b28 [ 353.510246][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 353.515896][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 353.521529][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 353.527343][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 353.532890][ C0] ? do_syscall_64+0x10b/0xf80 [ 353.537672][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 353.543753][ C0] ? mark_held_locks+0x40/0x70 [ 353.548528][ C0] ? kasan_quarantine_put+0x104/0x240 [ 353.553903][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 353.559192][ C0] ? rose_timer_expiry+0x53f/0x630 [ 353.564307][ C0] ? rose_timer_expiry+0x4f0/0x630 [ 353.569421][ C0] kfree+0x3d0/0x6c0 [ 353.573328][ C0] rose_timer_expiry+0x53f/0x630 [ 353.578270][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 353.583739][ C0] call_timer_fn+0x19a/0x640 [ 353.588368][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 353.593487][ C0] ? mark_held_locks+0x40/0x70 [ 353.598255][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 353.603721][ C0] __run_timers+0x75f/0xaf0 [ 353.608232][ C0] ? __pfx___run_timers+0x10/0x10 [ 353.613266][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 353.618300][ C0] run_timer_base+0x114/0x190 [ 353.622985][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 353.628195][ C0] run_timer_softirq+0x1a/0x50 [ 353.633050][ C0] handle_softirqs+0x1ea/0xa00 [ 353.637831][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 353.643128][ C0] ? _raw_spin_unlock+0x28/0x50 [ 353.647989][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 353.653621][ C0] __irq_exit_rcu+0x162/0x210 [ 353.658314][ C0] irq_exit_rcu+0x9/0x30 [ 353.662562][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 353.668205][ C0] [ 353.671140][ C0] [ 353.674070][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 353.680058][ C0] RIP: 0010:sized_strscpy+0x19/0x2f0 [ 353.685362][ C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 d2 0f 84 42 02 00 00 41 57 41 56 41 55 41 54 49 89 d4 55 <53> 48 83 ec 18 48 81 fa ff ff ff 7f 0f 87 f4 01 00 00 49 89 f6 49 [ 353.704979][ C0] RSP: 0018:ffffc90003246e60 EFLAGS: 00000202 [ 353.711053][ C0] RAX: 000000000007e236 RBX: ffff88801c0c2e98 RCX: ffffc90005e91000 [ 353.719025][ C0] RDX: 000000000000000b RSI: ffff888033482e18 RDI: ffff88801c0c2e98 [ 353.727010][ C0] RBP: ffff88801c0c2e70 R08: 0000000000000007 R09: 0000000000000010 [ 353.734996][ C0] R10: 000000000000000b R11: 0000000000000000 R12: 000000000000000b [ 353.742975][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001 [ 353.750966][ C0] __update_page_owner_handle+0x17b/0x550 [ 353.756720][ C0] __set_page_owner+0x11f/0x540 [ 353.761573][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 353.766941][ C0] ? bad_range+0x257/0x3f0 [ 353.771354][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 353.776567][ C0] post_alloc_hook+0x153/0x170 [ 353.781369][ C0] get_page_from_freelist+0x11a6/0x33b0 [ 353.786947][ C0] ? __pfx___might_resched+0x10/0x10 [ 353.792258][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 353.798164][ C0] ? __lock_acquire+0x4a5/0x2630 [ 353.803106][ C0] ? __lock_acquire+0x4a5/0x2630 [ 353.808043][ C0] ? css_rstat_updated+0x1ce/0x5a0 [ 353.813166][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.819501][ C0] ? do_raw_spin_lock+0x128/0x260 [ 353.824530][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 353.829909][ C0] ? find_held_lock+0x2b/0x80 [ 353.834593][ C0] ? __lock_acquire+0x4a5/0x2630 [ 353.839530][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.845425][ C0] ? policy_nodemask+0xed/0x4f0 [ 353.850277][ C0] alloc_pages_mpol+0x1fb/0x540 [ 353.855127][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 353.860496][ C0] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 353.866403][ C0] folio_alloc_mpol_noprof+0x36/0x260 [ 353.871800][ C0] shmem_alloc_folio+0x135/0x160 [ 353.876743][ C0] shmem_alloc_and_add_folio+0x371/0xd40 [ 353.882390][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 353.888552][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 353.894552][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 353.899764][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 353.905402][ C0] ? filemap_map_pages+0x9c1/0x2140 [ 353.910609][ C0] shmem_fault+0x1f9/0xa20 [ 353.915031][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 353.919975][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 353.925441][ C0] ? find_held_lock+0x2b/0x80 [ 353.930115][ C0] __do_fault+0x10b/0x440 [ 353.934444][ C0] do_fault+0xa99/0x1750 [ 353.938699][ C0] __handle_mm_fault+0x187d/0x2a00 [ 353.943815][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 353.949210][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 353.954674][ C0] ? pte_offset_map_lock+0x174/0x320 [ 353.959961][ C0] ? find_held_lock+0x2b/0x80 [ 353.964659][ C0] ? follow_page_pte+0x4d0/0x13f0 [ 353.969703][ C0] handle_mm_fault+0x36d/0xa20 [ 353.974490][ C0] __get_user_pages+0x1178/0x32a0 [ 353.979547][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 353.984952][ C0] populate_vma_page_range+0x267/0x3f0 [ 353.990431][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 353.996442][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 354.002270][ C0] ? do_mmap+0x93f/0x12f0 [ 354.006636][ C0] __mm_populate+0x107/0x3a0 [ 354.011262][ C0] ? __pfx___mm_populate+0x10/0x10 [ 354.016433][ C0] ? up_write+0x28c/0x4f0 [ 354.020785][ C0] vm_mmap_pgoff+0x37f/0x470 [ 354.025382][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 354.030514][ C0] ? do_futex+0x192/0x350 [ 354.034851][ C0] ? __pfx_do_futex+0x10/0x10 [ 354.039538][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 354.044222][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 354.049193][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 354.054480][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 354.059767][ C0] ? __task_pid_nr_ns+0x1ca/0x510 [ 354.064796][ C0] __x64_sys_mmap+0x125/0x190 [ 354.069481][ C0] do_syscall_64+0x10b/0xf80 [ 354.074075][ C0] ? clear_bhb_loop+0x40/0x90 [ 354.078759][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.084650][ C0] RIP: 0033:0x7f01a1b9cdd9 [ 354.089060][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.108716][ C0] RSP: 002b:00007f01a29fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 354.117138][ C0] RAX: ffffffffffffffda RBX: 00007f01a1e15fa0 RCX: 00007f01a1b9cdd9 [ 354.125108][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 354.133072][ C0] RBP: 00007f01a1c32d69 R08: ffffffffffffffff R09: 0000000000000000 [ 354.141056][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 354.149021][ C0] R13: 00007f01a1e16038 R14: 00007f01a1e15fa0 R15: 00007fffdbac3518 [ 354.157001][ C0] [ 354.160481][ C0] Kernel Offset: disabled [ 354.164786][ C0] Rebooting in 86400 seconds..