last executing test programs: 5.239212714s ago: executing program 0 (id=99): socket$inet6(0xa, 0x802, 0x88) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xe) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, '\x00', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x46, 0x46, 0x50]}, 0x2c) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000940)={0x2, 0x4e22, @local}, 0x10) read(r2, &(0x7f0000000280)=""/188, 0xbc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x9}, 'syz1\x00', 0x44}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000500)={0x50, 0xfdcf, 0x1d, {0x12, 0xcb0}, {0x8000, 0x8}, @cond=[{0x1, 0x8, 0xe, 0x5, 0x4, 0xbce}, {0x7ff, 0x8001, 0x7f, 0x1000, 0x0, 0xc6}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) 4.133738899s ago: executing program 0 (id=106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0xc}, 0x20000000) 4.133274269s ago: executing program 0 (id=107): syz_usb_connect(0x3, 0x2d, &(0x7f0000001a00)={{0x12, 0x1, 0x201, 0xe7, 0x29, 0xe1, 0x10, 0x33f7, 0x4, 0xb993, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0xa4, 0x2, 0x1, 0x30, 0x83, 0x8b, 0xbf, [], [{{0x9, 0x5, 0xe, 0x1, 0x40, 0x9, 0x0, 0x25}}]}}]}}]}}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0}) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x64, 0x19, 0x1, 0x70bd29, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r0}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e24, 0xfff9, 0x4e24, 0xae76, 0x2, 0x80, 0x0, 0x2, r2, r4}, {0xfff, 0x5, 0x8001, 0x0, 0x959, 0x8, 0x0, 0x7}, {0xa8d2, 0x1, 0x3, 0x1}, 0x9, 0x6e6bb5, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x9, 0xffff}}, 0xe8) 2.869778572s ago: executing program 0 (id=113): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x5d833, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7, 0x2b9}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x14}, [@generic="b79faac541"]}, 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20) fstat(r4, &(0x7f0000000700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000000)={'syz_tun\x00', @remote}) r5 = userfaultfd(0x801) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 2.39403394s ago: executing program 0 (id=115): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d00), 0x142042, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000d40)=0x5) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0x1e7, r4}, 0x14) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002"], 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000080)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x9a80, @any, 0x1}, 0xe) 2.313886764s ago: executing program 0 (id=116): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) exit(0xffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) r5 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000040)='syscall\x00') ptrace$poke(0x5, r5, &(0x7f0000000040), 0x1) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x1, 0x3, 0x7, 0x100, 0x3}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x400, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.906513869s ago: executing program 1 (id=123): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)=ANY=[@ANYBLOB="f007000008"]) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.816506594s ago: executing program 3 (id=126): r0 = socket(0x11, 0xa, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async, rerun: 64) r1 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) (async, rerun: 32) ptrace(0x10, r1) (async, rerun: 32) wait4(r1, 0x0, 0x8, 0x0) ptrace(0x19, r1) (async, rerun: 32) r3 = userfaultfd(0x1) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x4, 0x7fff) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002040) (async) sendto$inet6(r4, 0x0, 0x0, 0x488d1, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0009002abd7000ffdbdf250100000008000100ca941a5bbe0cd7daf4f1ed8b09da4bedfd8c2bca1adf046effbbe1ebf8e7f5974dc21639bb1c5b4fc2d332702f4f9a673b828f51f742058a950f3bd69986db465fce74835904291b4ac006bec69a0a7cc9816509334e45d232631f131746bbc8bba46c26548fc64da93cba356ae7eea7a75a6ec35721f789734d973867689612043b66332f2cc29b5317541f63acfc6136c8a747564a0b81aedc0062e861", @ANYRES32, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) ioctl$FIONCLEX(r0, 0x5450) (async, rerun: 64) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) syz_open_pts(0xffffffffffffffff, 0x2000) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000480)={0x66666666666668d, 0x0, [{0x7, 0x9, 0x0, 0xbe2a, 0x3, 0x4, 0x2}, {0x40000001, 0x7, 0x3, 0xffffffff, 0xe, 0x1ff, 0xe8}, {0x80000007, 0x94, 0x6, 0x7, 0xe4, 0x69a3, 0x9}, {0x40000001, 0x769f, 0x3, 0xf877, 0x3, 0x5}, {0x40000000, 0x7fffffff, 0x4, 0xc58, 0x7, 0x9, 0x9f5}, {0x2, 0x1, 0x7, 0x6, 0x9, 0x5, 0x1}, {0x0, 0x7, 0x4, 0x4, 0x8, 0x9}]}) 1.70868394s ago: executing program 3 (id=127): unshare(0x28000600) r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fcntl$addseals(r0, 0x409, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e20, @remote}}) unshare(0x22020600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_hsr\x00', 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0x6}) setsockopt$inet_int(r3, 0x0, 0x16, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x400, @any, 0x6, 0x1}, 0xe) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000280)=0x4) sendmmsg$inet(r1, &(0x7f0000001a00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="80", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ba", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x5be}], 0x1}}], 0x5, 0x2400c0a2) 1.683292231s ago: executing program 3 (id=128): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x32}, @in=@local, {}, {0x5, 0x0, 0x0, 0x1}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8, 0xc, 0x7ff}]}, 0x140}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000174c0)={@dev={0xfe, 0x80, '\x00', 0x39}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x2}, 0x7}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x3}, 0xb3}) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f00000005c0)=""/34, 0x22}], 0x9}, 0x5}], 0x3, 0x2100, 0x0) 1.597911906s ago: executing program 3 (id=129): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}]}) r0 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f000000ba00)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000a80)=[@cred={{0x18, 0x1, 0x24}}], 0x18, 0x20000000}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xe1, 0x0, 0x8}]}) lsm_set_self_attr(0x30, 0x0, 0x8, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x902, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0xf685, 0x2, 0x2, 0xffff}, {0x3, 0x4, 0xf, 0x1}, {0x6, 0x6, 0x7, 0x5}, {0xc, 0x4, 0x6, 0x9}, {0x6, 0x4, 0x0, 0x1}]}) lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0x5d, 0x3d, ""/61}, &(0x7f00000001c0)=0x5d, 0x1) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x8b, 0x6b, ""/107}, &(0x7f00000000c0)=0x8b, 0x1) r5 = syz_usb_connect(0x2, 0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503218f"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000340)={0x14, &(0x7f00000002c0)={0x40, 0x268e6a91dcd0e89a, 0x22, {0x22, 0x22, "815cfe9e19fe7266e7b99b4b0370fd1fdd92c7c459c28b7ab957105cd2358db9"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x40, 0xd, 0xf0, "450c3da4050cab55354bd1f47fd3e9df6fc7aad6b9f4c50b643e278feaff0dabce3cb3b491b757b72db23bfbbe10c92ff84ef71835d3da9999d340576441c6ed9a3fa9f04b40ceed5126ce0f9eb1141ca1f009825f390b3097e303b289ecb23439cb80e24dc245b750648ee4c39e9651263f646e64aeb063a2ed7679de6e3b73aa17479cee82c0547f1d3268d5483a77d2c2a9102d651d6c3e0a27d4583332d0d7dcbd71a4e49c95f97241e0a2987878cf77aa60140a9b6db83b79b64eb106484cddce3b62a1def7ea2cf552ed1305b29059f636cdc6b31a1f79a84507b87cec4027b0a8336d24da043481d0f93739cc"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x5, 0xd, 0x0, 0x5, 0x1000, 0x6, 0x1, 0xffff, 0x6, 0xfffc, 0xfff8}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x1000}, &(0x7f0000000580)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000600)={0x20, 0x89, 0x2, 0x1}}) 1.197659389s ago: executing program 2 (id=132): r0 = syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000040)={0x0, 0x4, 0x100}) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x18, 0x209, 0x100, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8054) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000300)=@x86={0x25, 0x6, 0x2, 0x0, 0x4f, 0x9, 0x80, 0x5, 0x89, 0x58, 0x8, 0x93, 0x0, 0x4, 0x13, 0x6a, 0x82, 0x12, 0x10, '\x00', 0xe, 0x99}) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000180)) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x5}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3c0}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3d}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000041}, 0x200008c1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000)=0xd5aa, 0x8) syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000040)={0x0, 0x4, 0x100}) (async) socket$netlink(0x10, 0x3, 0x4) (async) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x18, 0x209, 0x100, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8054) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000300)=@x86={0x25, 0x6, 0x2, 0x0, 0x4f, 0x9, 0x80, 0x5, 0x89, 0x58, 0x8, 0x93, 0x0, 0x4, 0x13, 0x6a, 0x82, 0x12, 0x10, '\x00', 0xe, 0x99}) (async) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000180)) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x5}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3c0}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3d}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000041}, 0x200008c1) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000)=0xd5aa, 0x8) (async) 1.19493315s ago: executing program 2 (id=133): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000000000040da091a000000000000010902240001000060b10904000001030001000921fbfffd0122050009058103ff030d00033eda3db7c9bc17e9cd834920b6b0c00f1074d59c9d77f74e6653b7fb716b64b123e9453ba9ff275308b14b5a6b6a01e24f107a9906fad906ca03f273acf3136b0882fad8abde"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000005280)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0xfffe, r2, 0x0, 0x0, 0x81, 0x0, 0x2}]) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "8d507b32"}]}}, 0x0}, 0x0) 643.776952ms ago: executing program 1 (id=134): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="79c2baf9a7d222ad087df35f3005a9c168b232da29d929e395b1d8f179d1ccf5e4c9d0ad0a09a47ea8cba7babf543b8d3bf36088944f5474dd5bd6059f3e9fb5c822eb13c5577fd3793c5f7660763fa2e34efa28406b50c7136cb7cea758395f3c8165e00c40c93353354bf8505a98ef29c6329c3157d4cc2c47fa9ea1458ed5ed98ebf5759182d388f55461d26bf6ca356e021d42eb366a110999f8ffe23ee8a95ed4f95dc18b13695b4e393ff5fb1de117e54b11a89d50c81670d702f5798d33c65856ce", 0xc5}, {&(0x7f0000000040)="a82df0aac7677ce4767742b1385a6990393032844305b9fea163a50c2369b0779dd15cbaeb7405498aad9789c97a099a3089366338472b70f6b9727bf85c96", 0x3f}, {&(0x7f0000000200)="b15cb3f76bba8186471332ec3e82c6ae317cdaa6c73c613d395909a0760a350240d32eae79c87c00c26de5470b38f407424b35aefe430b7b5726cf1338ceaa3d28d4047771abd7ec16d3b68c69bbe8b8591935e84cfaafedaa10e667dc31a04afe3cf8548b5070c9cb5c1f113cbe2de5d149ad477a82733227c49f9a6ca949fff5772268f350ef0321ff88ee7db3f778a112f87d6d56d309289aec109158f6439a31ff78605efbc1db83a32b7932958b6b429a22620f8d8e96", 0xb9}, {&(0x7f00000002c0)="f614508e82ba6e844581f1555172ae988813bddd9e4db6316735e57fa7459e9d458bae4965a7ff0fd790030b150c1db6de6b5ccd1f32a57b04962e035c6c0ee3c3f8cde89f3548f2044bea148525e72aacdc59c31d5d534d4aefa3e5d5e6469cbe330a6043c6dcb53bab960aed2aeb51e85e1e2eb0b4fa3567b98da114b9d5e48e2e0875d7977109f1cb90ad0ba690fcdd84f1ea37ec32873ceb6e91e6bea5d8397139db17891fdeaab4ade2c7d4ea104b72e2783b780ec54a70194076d566c490e58ad49f909ee8d5b575d4babc13f30f4a", 0xd2}, {&(0x7f00000003c0)="95b6c21d", 0x4}], 0x5, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x60}, 0x0) 605.845674ms ago: executing program 1 (id=135): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01') mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)) 537.888268ms ago: executing program 1 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpgrp(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x8001) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x2, 0x8, 0x0, 0x9, 0x7fffffffffffffff, 0x3, 0x1, 0x7, 0x4, 0x0, 0x1, 0xff, 0x1, 0x9, 0x101, 0x3], 0xfab4807a25c04bc0, 0x28810}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d42284221}, 0x200048c4) 537.475498ms ago: executing program 2 (id=137): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000001ac0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r1, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0xa) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x5, @empty}, 0x1c) (async) listen(r4, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r5, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4101, 0x1005}], 0x1, 0xffffffff, 0xfffffffc) (async) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xd, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x800, {0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @in=@multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) (async) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) (async) r6 = socket(0xa, 0x3, 0x3a) r7 = accept4$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14, 0x80800) recvmsg(r7, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000700)=""/53, 0x35}, {&(0x7f0000000740)=""/203, 0xcb}, {&(0x7f0000000840)=""/65, 0x41}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/94, 0x5e}], 0x8, &(0x7f00000019c0)=""/189, 0xbd}, 0x20) (async) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) (async) socket$netlink(0x10, 0x3, 0xb) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r8, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44) 536.637389ms ago: executing program 2 (id=138): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x7, 0x6d, {0x6d, 0xd, "f4005e78584d0a2472bc9f2a67ac86e83c1fae640fcf3a009280729afdb9863749ac943e2e063a0323531eb06f1cde299a1b504811592c9d161842151d402bbec0a5939276ec17ff62b089facacc85f9285c15d2a2367b6ce0b83f3adbfe38104abe881aafbc31bac9f530"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 524.473459ms ago: executing program 1 (id=139): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r0, @ANYBLOB="2c677213a1705f69643d", @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1, 0x2, r4, 0x9}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 506.0744ms ago: executing program 1 (id=140): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private2, @dev={0xfe, 0x80, '\x00', 0x2b}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x65, 0x1, 0x400, 0xfff, 0x80400210}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x45, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "d6589866"}]}}, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x4e32, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 42.081217ms ago: executing program 3 (id=141): socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) (async) r6 = accept4$packet(r3, 0x0, &(0x7f0000000140), 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6}, 0x10) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 41.473157ms ago: executing program 3 (id=142): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x2, 0x4, 0x24, @mcast1, @mcast1, 0x1, 0x20, 0x5, 0x9}}) write(r0, &(0x7f00000000c0)="3c00000058001f00032ae4f9002304000a04d65f080001000201000217d1ae3b70b0406700912deb5b859322340b0100000078f72e230a19fb2bcb1d", 0x3c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000040)={0x10, 0xfffffffe, {0x51, 0x7, 0x7, {0x6, 0xa}, {0x800, 0x80}, @rumble={0x7f, 0xec}}, {0x53, 0x8, 0xff, {0x3, 0x59e}, {0x9, 0xbc}, @rumble={0xee7a, 0x9}}}) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000380)={0xa, 0x9, {0x53, 0x0, 0x89, {0x8, 0x7}, {0x1, 0x100}, @cond=[{0x80, 0x2, 0x0, 0x9, 0x2, 0x5}, {0x3, 0x400, 0xd9bb, 0x81, 0x1, 0x7}]}, {0x51, 0x7, 0x0, {0x7, 0x8}, {0xffff, 0x3}, @ramp={0xc, 0x81f, {0x5, 0xfffa, 0x5, 0x7}}}}) r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) userfaultfd(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x68800, 0x20) read$FUSE(r5, &(0x7f0000002040)={0x2020}, 0x2020) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0046670a392fdfe1d19cf37dc3c3a0257b0024d3d4635b38a4f940501605a6cff8e33b84bde33b05e1f35410a0ae4feac7eba03f371f90fd0fcef030c82964b33e63a473e1cf5d0afbfe937369e37ba1fcc11110"], 0x0}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 17.155639ms ago: executing program 2 (id=143): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000200)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000280)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000002c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000340)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000400)={'netpci0\x00', {0x2, 0x4e24, @multicast1}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000480)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000004c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000500)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000540)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000580)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000005c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000600)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000680)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000700)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000740)) 0s ago: executing program 2 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 20.121212][ T36] audit: type=1400 audit(1770995917.810:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.122379][ T282] cgroup: Unknown subsys name 'net' [ 20.143968][ T36] audit: type=1400 audit(1770995917.810:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.171498][ T282] cgroup: Unknown subsys name 'devices' [ 20.171589][ T36] audit: type=1400 audit(1770995917.850:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.316488][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.322159][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.434868][ T36] audit: type=1400 audit(1770995918.130:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.458284][ T36] audit: type=1400 audit(1770995918.130:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.469497][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.483207][ T36] audit: type=1400 audit(1770995918.130:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.515708][ T36] audit: type=1400 audit(1770995918.190:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.520968][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.541363][ T36] audit: type=1400 audit(1770995918.190:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.575877][ T36] audit: type=1400 audit(1770995918.210:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.601509][ T36] audit: type=1400 audit(1770995918.210:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.775928][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.783007][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.790265][ T289] bridge_slave_0: entered allmulticast mode [ 21.796840][ T289] bridge_slave_0: entered promiscuous mode [ 21.803677][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.810784][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.817878][ T289] bridge_slave_1: entered allmulticast mode [ 21.824355][ T289] bridge_slave_1: entered promiscuous mode [ 21.845422][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.852480][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.859720][ T290] bridge_slave_0: entered allmulticast mode [ 21.866149][ T290] bridge_slave_0: entered promiscuous mode [ 21.883158][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.890490][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.897813][ T290] bridge_slave_1: entered allmulticast mode [ 21.904263][ T290] bridge_slave_1: entered promiscuous mode [ 21.941560][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.948733][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.955830][ T292] bridge_slave_0: entered allmulticast mode [ 21.962024][ T292] bridge_slave_0: entered promiscuous mode [ 21.985422][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.992580][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.999807][ T292] bridge_slave_1: entered allmulticast mode [ 22.006041][ T292] bridge_slave_1: entered promiscuous mode [ 22.023761][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.030893][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.038058][ T291] bridge_slave_0: entered allmulticast mode [ 22.044384][ T291] bridge_slave_0: entered promiscuous mode [ 22.065905][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.073072][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.080215][ T291] bridge_slave_1: entered allmulticast mode [ 22.086673][ T291] bridge_slave_1: entered promiscuous mode [ 22.183893][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.191011][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.198596][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.205646][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.248809][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.255893][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.263268][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.270411][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.281163][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.288937][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.296582][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.303802][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.353724][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.360903][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.368226][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.375393][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.388122][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.395569][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.402773][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.410232][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.418531][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.426028][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.433408][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.440927][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.458797][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.466063][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.486957][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.494730][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.502673][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.509986][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.518378][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.525515][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.552592][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.559744][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.567393][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.574526][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.599843][ T290] veth0_vlan: entered promiscuous mode [ 22.621484][ T290] veth1_macvtap: entered promiscuous mode [ 22.627946][ T289] veth0_vlan: entered promiscuous mode [ 22.659278][ T292] veth0_vlan: entered promiscuous mode [ 22.670564][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.677741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.687400][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.694568][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.712995][ T289] veth1_macvtap: entered promiscuous mode [ 22.726596][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.778552][ T332] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 22.791591][ T292] veth1_macvtap: entered promiscuous mode [ 22.818296][ T291] veth0_vlan: entered promiscuous mode [ 22.853778][ T291] veth1_macvtap: entered promiscuous mode [ 22.881945][ T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.920460][ T345] mmap: syz.3.6 (345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 22.946344][ T349] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.957446][ T341] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5'. [ 23.059227][ T363] tipc: Trying to set illegal importance in message [ 23.068233][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.224035][ T334] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.246091][ T10] usb 1-1: config index 0 descriptor too short (expected 53084, got 92) [ 23.255055][ T10] usb 1-1: config 1 has too many interfaces: 214, using maximum allowed: 32 [ 23.264652][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 214 [ 23.274592][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.285571][ T10] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 23.297389][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 23.310732][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.320392][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.328468][ T339] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.336125][ T10] usb 1-1: Product: syz [ 23.340472][ T10] usb 1-1: Manufacturer: syz [ 23.345837][ T10] usb 1-1: SerialNumber: syz [ 23.384005][ T334] usb 3-1: Using ep0 maxpacket: 8 [ 23.390344][ T334] usb 3-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 23.400251][ T334] usb 3-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config [ 23.410712][ T334] usb 3-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 23.420444][ T334] usb 3-1: New USB device found, idVendor=2833, idProduct=01e3, bcdDevice=2a.d5 [ 23.430210][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.493990][ T339] usb 4-1: Using ep0 maxpacket: 32 [ 23.500317][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.511901][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.522081][ T339] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 23.531350][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.540345][ T339] usb 4-1: config 0 descriptor?? [ 23.546712][ T339] hub 4-1:0.0: USB hub found [ 23.652681][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.661498][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.676461][ T334] usb 3-1: string descriptor 0 read error: -71 [ 23.685630][ T334] usb 3-1: USB disconnect, device number 2 [ 23.746716][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.755828][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.765435][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.778312][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.787799][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.796994][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.806443][ T339] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 23.816764][ T339] usbhid 4-1:0.0: can't add hid device: -71 [ 23.822857][ T339] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 23.844562][ T339] usb 4-1: USB disconnect, device number 2 [ 24.023991][ T334] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 24.195190][ T334] usb 3-1: config 0 has an invalid interface number: 201 but max is 0 [ 24.203458][ T334] usb 3-1: config 0 has no interface number 0 [ 24.219333][ T334] usb 3-1: New USB device found, idVendor=4f18, idProduct=50cd, bcdDevice=74.c9 [ 24.228951][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.243373][ T334] usb 3-1: Product: syz [ 24.250654][ T334] usb 3-1: Manufacturer: syz [ 24.256605][ T334] usb 3-1: SerialNumber: syz [ 24.262455][ T334] usb 3-1: config 0 descriptor?? [ 24.272974][ T334] usb-storage 3-1:0.201: USB Mass Storage device detected [ 24.357987][ T10] cdc_ncm 1-1:1.0: bind() failure [ 24.363792][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 24.371064][ T10] cdc_ncm 1-1:1.1: bind() failure [ 24.479674][ T10] usb 3-1: USB disconnect, device number 3 [ 24.496961][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.505997][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.515536][ T424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.523897][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.524333][ T424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.534137][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.574501][ T371] usb 1-1: USB disconnect, device number 2 [ 24.604274][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.765507][ T45] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 24.774055][ T45] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 24.786411][ T45] usb 4-1: config 0 has no interface number 0 [ 24.795999][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 24.806373][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.815070][ T45] usb 4-1: Product: syz [ 24.819555][ T45] usb 4-1: Manufacturer: syz [ 24.824527][ T45] usb 4-1: SerialNumber: syz [ 24.831176][ T45] usb 4-1: config 0 descriptor?? [ 24.894093][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.037633][ T419] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 25.054060][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 25.060834][ T65] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 25.069682][ T65] usb 2-1: config 0 has no interface number 0 [ 25.076032][ T65] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 25.086725][ T45] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 25.093144][ T45] usb 4-1: No valid video chain found. [ 25.100502][ T65] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 25.110050][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.118220][ T65] usb 2-1: Product: syz [ 25.122485][ T65] usb 2-1: Manufacturer: syz [ 25.127160][ T65] usb 2-1: SerialNumber: syz [ 25.132419][ T65] usb 2-1: config 0 descriptor?? [ 25.138234][ T428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 25.335762][ T31] usb 4-1: USB disconnect, device number 3 [ 25.346596][ T428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 25.353998][ T371] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.505576][ T371] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.512321][ T371] usb 1-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 25.521475][ T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.534216][ T371] usb 1-1: config 0 descriptor?? [ 25.549887][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 25.549929][ T36] audit: type=1400 audit(1770995923.240:163): avc: denied { write } for pid=437 comm="syz.2.25" name="igmp" dev="proc" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 25.598735][ T36] audit: type=1400 audit(1770995923.290:164): avc: denied { write } for pid=439 comm="syz.2.26" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 25.795415][ T428] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=778 (1556 ns) > initial count (160 ns). Using initial count to start timer. [ 25.812210][ T65] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 25.822423][ T65] asix 2-1:0.188: probe with driver asix failed with error -61 [ 25.924051][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.944032][ T371] wacom 0003:056A:032A.0001: item fetching failed at offset 0/3 [ 25.951900][ T371] wacom 0003:056A:032A.0001: parse failed [ 25.957777][ T371] wacom 0003:056A:032A.0001: probe with driver wacom failed with error -22 [ 26.053986][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.104051][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.254137][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 26.260922][ T65] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 26.273031][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.279733][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 26.288902][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.297579][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.304802][ T65] usb 4-1: config 0 descriptor?? [ 26.516078][ T36] audit: type=1400 audit(1770995924.210:165): avc: denied { ioctl } for pid=451 comm="syz.3.30" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3810 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.534035][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 26.673998][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.751801][ T65] logitech 0003:046D:C20A.0002: unknown main item tag 0x0 [ 26.759145][ T65] logitech 0003:046D:C20A.0002: unknown main item tag 0x0 [ 26.766464][ T65] logitech 0003:046D:C20A.0002: unknown main item tag 0x0 [ 26.774766][ T65] logitech 0003:046D:C20A.0002: hidraw0: USB HID v0.03 Device [HID 046d:c20a] on usb-dummy_hcd.3-1/input0 [ 26.786628][ T65] logitech 0003:046D:C20A.0002: no inputs found [ 26.924028][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.952909][ T452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.962341][ T452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.971599][ T65] usb 4-1: USB disconnect, device number 4 [ 27.034084][ T31] usb usb3-port1: attempt power cycle [ 27.374004][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 27.395106][ T31] usb 3-1: device descriptor read/8, error -71 [ 27.484676][ T36] audit: type=1400 audit(1770995925.180:166): avc: denied { read } for pid=455 comm="syz.3.31" dev="nsfs" ino=4026532547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.506351][ T36] audit: type=1400 audit(1770995925.180:167): avc: denied { open } for pid=455 comm="syz.3.31" path="net:[4026532547]" dev="nsfs" ino=4026532547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.531559][ T31] usb 3-1: device descriptor read/8, error -71 [ 27.537860][ T36] audit: type=1400 audit(1770995925.230:168): avc: denied { append } for pid=457 comm="syz.3.32" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.625374][ T371] usb 2-1: USB disconnect, device number 2 [ 27.645566][ T36] audit: type=1400 audit(1770995925.340:169): avc: denied { unlink } for pid=460 comm="syz.1.33" name="#3" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.794094][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 27.815150][ T31] usb 3-1: device descriptor read/8, error -71 [ 27.945607][ T31] usb 3-1: device descriptor read/8, error -71 [ 27.964095][ T371] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.978747][ T36] audit: type=1400 audit(1770995925.670:170): avc: denied { create } for pid=475 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.998318][ T36] audit: type=1400 audit(1770995925.670:171): avc: denied { watch watch_reads } for pid=475 comm="syz.3.37" path="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.020620][ T36] audit: type=1400 audit(1770995925.670:172): avc: denied { watch } for pid=475 comm="syz.3.37" path="/file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.064358][ T31] usb usb3-port1: unable to enumerate USB device [ 28.125465][ T371] usb 2-1: config index 0 descriptor too short (expected 53084, got 92) [ 28.133982][ T371] usb 2-1: config 1 has too many interfaces: 214, using maximum allowed: 32 [ 28.139925][ T31] usb 1-1: USB disconnect, device number 3 [ 28.142911][ T371] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 214 [ 28.160578][ T371] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.174465][ T371] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 28.186310][ T371] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 28.198773][ T371] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.208288][ T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.217774][ T371] usb 2-1: Product: syz [ 28.222579][ T371] usb 2-1: Manufacturer: syz [ 28.228919][ T371] usb 2-1: SerialNumber: syz [ 28.823978][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.874100][ T490] process 'syz.2.44' launched './file0' with NULL argv: empty string added [ 28.984009][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 28.992144][ T31] usb 4-1: config index 0 descriptor too short (expected 6701, got 45) [ 29.001277][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.012159][ T31] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.023625][ T31] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.033796][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 29.040834][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 29.050080][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.062471][ T31] usb 4-1: config 0 descriptor?? [ 29.094017][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.264029][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 29.271917][ T65] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 29.282604][ T65] usb 1-1: config 0 has no interface number 0 [ 29.288947][ T65] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.300261][ T65] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.310086][ T65] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 29.319829][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.322184][ T371] cdc_ncm 2-1:1.0: bind() failure [ 29.334631][ T371] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 29.343307][ T65] usb 1-1: config 0 descriptor?? [ 29.343480][ T371] cdc_ncm 2-1:1.1: bind() failure [ 29.447322][ T371] usb 2-1: USB disconnect, device number 3 [ 29.483794][ T31] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 29.491216][ T31] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 29.498806][ T31] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 29.506039][ T31] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 29.514017][ T31] logitech 0003:046D:CA03.0003: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 29.525390][ T31] logitech 0003:046D:CA03.0003: no inputs found [ 29.594013][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 29.688514][ T31] usb 4-1: USB disconnect, device number 5 [ 29.744013][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 29.751805][ T45] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 29.760156][ T45] usb 3-1: config 1 has an invalid interface number: 123 but max is 2 [ 29.768594][ T45] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 29.778092][ T45] usb 3-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 29.788960][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.798450][ T45] usb 3-1: config 1 has no interface number 0 [ 29.804763][ T45] usb 3-1: config 1 has no interface number 1 [ 29.810889][ T45] usb 3-1: config 1 interface 3 altsetting 6 endpoint 0x2 has invalid maxpacket 1064, setting to 1024 [ 29.822664][ T45] usb 3-1: config 1 interface 3 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 1024 [ 29.832680][ T45] usb 3-1: config 1 interface 3 altsetting 6 bulk endpoint 0xC has invalid maxpacket 1024 [ 29.842892][ T45] usb 3-1: config 1 interface 3 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 29.853813][ T45] usb 3-1: config 1 interface 3 altsetting 6 bulk endpoint 0xD has invalid maxpacket 8 [ 29.863760][ T45] usb 3-1: config 1 interface 3 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 29.875075][ T45] usb 3-1: config 1 interface 3 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 29.886520][ T45] usb 3-1: config 1 interface 3 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 29.897541][ T45] usb 3-1: config 1 interface 3 altsetting 6 has an endpoint descriptor with address 0x7B, changing to 0xB [ 29.908979][ T45] usb 3-1: config 1 interface 3 altsetting 6 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 29.919890][ T45] usb 3-1: config 1 interface 3 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 29.930550][ T45] usb 3-1: config 1 interface 3 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 29.941376][ T45] usb 3-1: config 1 interface 3 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 29.952187][ T45] usb 3-1: config 1 interface 3 altsetting 6 endpoint 0xA has invalid wMaxPacketSize 0 [ 29.962645][ T45] usb 3-1: config 1 interface 123 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 29.973550][ T45] usb 3-1: config 1 interface 123 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 29.978719][ T492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.984621][ T45] usb 3-1: config 1 interface 123 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 29.993636][ T492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.004937][ T45] usb 3-1: config 1 interface 123 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 30.023049][ T45] usb 3-1: config 1 interface 123 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 30.034178][ T65] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 30.043574][ T65] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 30.051971][ T45] usb 3-1: config 1 interface 123 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 30.063489][ T65] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 30.070767][ T45] usb 3-1: config 1 interface 123 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 30.081926][ T65] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 30.090338][ T65] uclogic 0003:28BD:0071.0004: probe with driver uclogic failed with error -71 [ 30.099537][ T45] usb 3-1: config 1 interface 123 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 30.111632][ T65] usb 1-1: USB disconnect, device number 4 [ 30.117613][ T45] usb 3-1: config 1 interface 3 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.131603][ T45] usb 3-1: config 1 interface 3 has no altsetting 0 [ 30.139131][ T45] usb 3-1: config 1 interface 3 has no altsetting 1 [ 30.146220][ T45] usb 3-1: config 1 interface 123 has no altsetting 0 [ 30.154456][ T45] usb 3-1: New USB device found, idVendor=22de, idProduct=9061, bcdDevice=ea.2a [ 30.163732][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.171931][ T45] usb 3-1: Product: syz [ 30.176188][ T45] usb 3-1: Manufacturer: С [ 30.180711][ T45] usb 3-1: SerialNumber: syz [ 30.186335][ T507] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 30.193599][ T507] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 30.200923][ T507] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 30.324538][ T334] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 30.475188][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.486484][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 30.497810][ T334] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 30.507186][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.516426][ T334] usb 2-1: config 0 descriptor?? [ 30.521797][ T516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.544197][ T65] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.556325][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 30.556345][ T36] audit: type=1400 audit(1770995928.250:194): avc: denied { ioctl } for pid=524 comm="syz.0.56" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.704007][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 30.713120][ T65] usb 4-1: descriptor type invalid, skip [ 30.718990][ T65] usb 4-1: descriptor type invalid, skip [ 30.724824][ T65] usb 4-1: descriptor type invalid, skip [ 30.731389][ T65] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 30.741871][ T65] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 30.754527][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.763796][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.771983][ T36] audit: type=1400 audit(1770995928.460:195): avc: denied { mounton } for pid=529 comm="syz.0.57" path="/proc/19/task" dev="proc" ino=4851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 30.794997][ T36] audit: type=1400 audit(1770995928.460:196): avc: denied { associate } for pid=529 comm="syz.0.57" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.804071][ T65] usb 4-1: Product: 탅ֺ欋䫉裉鶴鬕銫쌿뤉䬤橑汾ž [ 30.824719][ T65] usb 4-1: Manufacturer: ‘뫂ⱶ辔匪砷ၲ뇲嬻뗏楹㼯ా뎒⢨쏋㷦ᵔ計烙瞁럸ꜰ拉ⷸ崄꾋།◖ᓭⱻ勦뾬䫔ᶱ찵񱍡킬м勇象䷣⌢὇ᩚ膿ﴛ歈묓ᖻ⩉䄩隕븅呏땡ේ셦蕊ԓ柁㤶ៈ흯쏸쟌傣캺磫砯⑋ [ 30.850543][ T65] usb 4-1: SerialNumber: 蝧ﯫ㗻鵸ᑴꪍ⟣ﺖ쥕ј㹟ᔓ槃划莑競 [ 30.884074][ T36] audit: type=1400 audit(1770995928.570:197): avc: denied { create } for pid=531 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.905326][ T36] audit: type=1400 audit(1770995928.570:198): avc: denied { write } for pid=531 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.932714][ T36] audit: type=1400 audit(1770995928.620:199): avc: denied { ioctl } for pid=515 comm="syz.1.52" path="socket:[4853]" dev="sockfs" ino=4853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.959534][ T334] usbhid 2-1:0.0: can't add hid device: -71 [ 30.965923][ T334] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.975118][ T334] usb 2-1: USB disconnect, device number 4 [ 31.066633][ T523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.075737][ T523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.087092][ T65] cdc_ncm 4-1:1.0: bind() failure [ 31.093360][ T65] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 31.100262][ T65] cdc_ncm 4-1:1.1: bind() failure [ 31.108658][ T65] usb 4-1: USB disconnect, device number 6 [ 31.114762][ T429] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.273970][ T429] usb 1-1: Using ep0 maxpacket: 32 [ 31.280373][ T429] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 31.288877][ T429] usb 1-1: config 0 has no interface number 0 [ 31.296961][ T429] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 31.306116][ T429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.314350][ T429] usb 1-1: Product: syz [ 31.318542][ T429] usb 1-1: Manufacturer: syz [ 31.323262][ T429] usb 1-1: SerialNumber: syz [ 31.328684][ T429] usb 1-1: config 0 descriptor?? [ 31.334709][ T429] smsc95xx v2.0.0 [ 31.479713][ T36] audit: type=1400 audit(1770995929.170:200): avc: denied { mount } for pid=536 comm="syz.1.59" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.733988][ T65] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.741832][ T429] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 31.752901][ T429] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 31.757614][ T546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 31.771630][ T36] audit: type=1400 audit(1770995929.460:201): avc: denied { read write } for pid=545 comm="syz.3.62" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.794975][ T36] audit: type=1400 audit(1770995929.460:202): avc: denied { open } for pid=545 comm="syz.3.62" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.818544][ T36] audit: type=1400 audit(1770995929.460:203): avc: denied { ioctl } for pid=545 comm="syz.3.62" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.915121][ T65] usb 2-1: config index 0 descriptor too short (expected 53084, got 92) [ 31.923546][ T65] usb 2-1: config 1 has too many interfaces: 214, using maximum allowed: 32 [ 31.932534][ T65] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 214 [ 31.941931][ T65] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.953024][ T65] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 31.964613][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 31.975807][ T429] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 31.995805][ T429] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 32.005643][ T429] usb 1-1: USB disconnect, device number 5 [ 32.012790][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.037322][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.046435][ T65] usb 2-1: Product: syz [ 32.057365][ T65] usb 2-1: Manufacturer: syz [ 32.067574][ T65] usb 2-1: SerialNumber: syz [ 32.314083][ T334] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 32.364522][ T45] usb 3-1: USB disconnect, device number 8 [ 32.465322][ T334] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 32.476542][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.487618][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.497763][ T334] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 32.511724][ T334] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 32.521384][ T334] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 32.529559][ T334] usb 4-1: Manufacturer: syz [ 32.535305][ T334] usb 4-1: config 0 descriptor?? [ 32.654022][ T45] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 32.696926][ T576] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 32.704768][ T576] netlink: 5 bytes leftover after parsing attributes in process `syz.0.71'. [ 32.714003][ T576] bridge_slave_1: left promiscuous mode [ 32.719658][ T576] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.768460][ T584] capability: warning: `syz.0.73' uses 32-bit capabilities (legacy support in use) [ 32.778658][ T584] netlink: 44 bytes leftover after parsing attributes in process `syz.0.73'. [ 32.787531][ T584] netlink: 43 bytes leftover after parsing attributes in process `syz.0.73'. [ 32.796740][ T584] netlink: 'syz.0.73': attribute type 5 has an invalid length. [ 32.804621][ T584] netlink: 43 bytes leftover after parsing attributes in process `syz.0.73'. [ 32.814458][ T584] rust_binder: Write failure EFAULT in pid:44 [ 32.816387][ T584] Zero length message leads to an empty skb [ 32.829683][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.840845][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 32.851824][ T45] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 32.861182][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.870362][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.870578][ T45] usb 3-1: config 0 descriptor?? [ 32.882265][ T567] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 32.968273][ T334] appleir 0003:05AC:8243.0005: item fetching failed at offset 0/1 [ 32.976736][ T334] appleir 0003:05AC:8243.0005: parse failed [ 32.982672][ T334] appleir 0003:05AC:8243.0005: probe with driver appleir failed with error -22 [ 33.094255][ T65] cdc_ncm 2-1:1.0: bind() failure [ 33.103716][ T65] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 33.110625][ T65] cdc_ncm 2-1:1.1: bind() failure [ 33.244922][ T65] usb 4-1: USB disconnect, device number 7 [ 33.302581][ T334] usb 2-1: USB disconnect, device number 5 [ 33.303031][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 33.315762][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.325155][ T45] usb 3-1: USB disconnect, device number 9 [ 34.113985][ T65] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 34.132201][ T611] tipc: Enabling of bearer rejected, failed to enable media [ 34.264061][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 34.270532][ T65] usb 3-1: config 0 has no interfaces? [ 34.276854][ T65] usb 3-1: config 0 has no interfaces? [ 34.283228][ T65] usb 3-1: config 0 has no interfaces? [ 34.290340][ T65] usb 3-1: string descriptor 0 read error: -71 [ 34.297142][ T65] usb 3-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 34.306666][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.315606][ T65] usb 3-1: rejected 3 configurations due to insufficient available bus power [ 34.324448][ T65] usb 3-1: no configuration chosen from 3 choices [ 34.331799][ T65] usb 3-1: USB disconnect, device number 10 [ 34.374296][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.534020][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 34.540734][ T45] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 34.549147][ T45] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 34.558105][ T45] usb 4-1: config 3 has no interface number 0 [ 34.564518][ T45] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.577685][ T45] usb 4-1: config 3 interface 45 has no altsetting 0 [ 34.585902][ T45] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 34.595010][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.603102][ T45] usb 4-1: Product: syz [ 34.607396][ T45] usb 4-1: Manufacturer: syz [ 34.612094][ T45] usb 4-1: SerialNumber: syz [ 34.814015][ T386] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.827928][ T45] usb 4-1: USB disconnect, device number 8 [ 34.835998][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.944030][ T591] Bluetooth: hci0: command 0x1003 tx timeout [ 34.944030][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.963986][ T386] usb 2-1: device descriptor read/64, error -71 [ 35.036717][ T626] netlink: 'syz.0.86': attribute type 28 has an invalid length. [ 35.044003][ T65] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 35.045526][ T626] netlink: 92 bytes leftover after parsing attributes in process `syz.0.86'. [ 35.195377][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.206691][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.213968][ T386] usb 2-1: device descriptor read/64, error -71 [ 35.216889][ T65] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 35.232300][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.241249][ T65] usb 3-1: config 0 descriptor?? [ 35.334007][ T45] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 35.411182][ T638] netlink: 'syz.3.90': attribute type 15 has an invalid length. [ 35.454026][ T386] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.458398][ T65] hid-rmi 0003:1532:011D.0006: hidraw0: USB HID v0.08 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0 [ 35.495057][ T65] usb 3-1: USB disconnect, device number 11 [ 35.501959][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.519507][ T646] fido_id[646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 35.535710][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 35.549145][ T45] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 35.561802][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.583264][ T45] usb 1-1: config 0 descriptor?? [ 35.588810][ T628] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 35.604023][ T386] usb 2-1: device descriptor read/64, error -71 [ 35.843998][ T386] usb 2-1: device descriptor read/64, error -71 [ 35.843998][ T65] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 35.954142][ T386] usb usb2-port1: attempt power cycle [ 35.964112][ T334] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 36.005259][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.015667][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.025462][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 36.031605][ T65] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.041552][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.049409][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 36.058627][ T45] usb 1-1: USB disconnect, device number 6 [ 36.065093][ T65] usb 3-1: SerialNumber: syz [ 36.115519][ T334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.125904][ T334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.137086][ T334] usb 4-1: string descriptor 0 read error: -22 [ 36.143291][ T334] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.153958][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.167235][ T334] usb 4-1: cannot find UAC_HEADER [ 36.178573][ T334] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.274700][ T65] usb 3-1: 0:2 : does not exist [ 36.282242][ T65] usb 3-1: USB disconnect, device number 12 [ 36.293256][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.309926][ T386] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 36.335067][ T386] usb 2-1: device descriptor read/8, error -71 [ 36.365003][ T334] usb 4-1: USB disconnect, device number 9 [ 36.465296][ T386] usb 2-1: device descriptor read/8, error -71 [ 36.548893][ T655] tmpfs: Bad value for 'nr_blocks' [ 36.561877][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 36.561897][ T36] audit: type=1400 audit(1770995934.250:236): avc: denied { read write } for pid=654 comm="syz.0.95" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.593746][ T36] audit: type=1400 audit(1770995934.250:237): avc: denied { open } for pid=654 comm="syz.0.95" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.700458][ T36] audit: type=1400 audit(1770995934.390:238): avc: denied { getopt } for pid=665 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.719862][ T386] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.727917][ T36] audit: type=1400 audit(1770995934.390:239): avc: denied { ioctl } for pid=665 comm="syz.0.98" path="socket:[5381]" dev="sockfs" ino=5381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.756470][ T36] audit: type=1400 audit(1770995934.450:240): avc: denied { getopt } for pid=667 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.778942][ T36] audit: type=1400 audit(1770995934.470:241): avc: denied { create } for pid=667 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.803973][ T386] usb 2-1: device descriptor read/8, error -71 [ 36.810544][ T36] audit: type=1400 audit(1770995934.470:242): avc: denied { bind } for pid=667 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.833998][ T36] audit: type=1400 audit(1770995934.470:243): avc: denied { name_bind } for pid=667 comm="syz.0.99" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 36.857574][ T36] audit: type=1400 audit(1770995934.470:244): avc: denied { node_bind } for pid=667 comm="syz.0.99" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 36.861283][ T670] input: syz1 as /devices/virtual/input/input5 [ 36.880137][ T36] audit: type=1400 audit(1770995934.470:245): avc: denied { read } for pid=667 comm="syz.0.99" path="socket:[6419]" dev="sockfs" ino=6419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.936613][ T386] usb 2-1: device descriptor read/8, error -71 [ 37.044129][ T386] usb usb2-port1: unable to enumerate USB device [ 37.073982][ T334] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 37.223957][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 37.234720][ T334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.245673][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.263976][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.271686][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.282315][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.307209][ T334] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 37.316513][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.329591][ T334] usb 3-1: config 0 descriptor?? [ 37.426095][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 37.432369][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 37.441816][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.460077][ T10] usb 4-1: config 0 descriptor?? [ 37.889430][ T696] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.102766][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 38.110179][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 38.119103][ T10] usb 4-1: USB disconnect, device number 10 [ 38.125157][ T339] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.193974][ T386] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 38.284019][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 38.294628][ T339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.309329][ T339] usb 1-1: config 9 has an invalid interface number: 164 but max is 0 [ 38.320696][ T339] usb 1-1: config 9 has no interface number 0 [ 38.333164][ T339] usb 1-1: config 9 interface 164 has no altsetting 0 [ 38.344073][ T339] usb 1-1: New USB device found, idVendor=33f7, idProduct=0004, bcdDevice=b9.93 [ 38.353460][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.361660][ T339] usb 1-1: Product: syz [ 38.366038][ T339] usb 1-1: Manufacturer: syz [ 38.371484][ T339] usb 1-1: SerialNumber: syz [ 38.376771][ T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.392176][ T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.402333][ T386] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 38.411997][ T386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.421377][ T386] usb 2-1: config 0 descriptor?? [ 38.591509][ T339] asix 1-1:9.164: probe with driver asix failed with error -22 [ 38.603278][ T339] usb 1-1: USB disconnect, device number 7 [ 38.660395][ T691] netlink: 'syz.1.105': attribute type 58 has an invalid length. [ 38.870126][ T691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.874007][ T65] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.878933][ T691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.033977][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 39.040457][ T65] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 39.052086][ T65] usb 4-1: config 0 has no interface number 0 [ 39.058449][ T65] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 39.074468][ T715] netlink: 85 bytes leftover after parsing attributes in process `syz.1.105'. [ 39.075068][ T65] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 39.093237][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.107655][ T65] usb 4-1: Product: syz [ 39.112338][ T65] usb 4-1: Manufacturer: syz [ 39.117488][ T65] usb 4-1: SerialNumber: syz [ 39.126337][ T65] usb 4-1: config 0 descriptor?? [ 39.135119][ T713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 39.353748][ T713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 39.431052][ T386] usbhid 2-1:0.0: can't add hid device: -71 [ 39.437103][ T386] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 39.449525][ T386] usb 2-1: USB disconnect, device number 10 [ 39.563170][ T65] asix 4-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 39.573498][ T65] asix 4-1:0.191: probe with driver asix failed with error -71 [ 39.587142][ T65] usb 4-1: USB disconnect, device number 11 [ 39.923986][ T386] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.988131][ T731] sit0: entered promiscuous mode [ 39.995858][ T731] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 40.003690][ T731] netlink: 'syz.1.118': attribute type 3 has an invalid length. [ 40.015357][ T728] netlink: 44 bytes leftover after parsing attributes in process `syz.2.117'. [ 40.024568][ T728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 40.033482][ T728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 40.084619][ T386] usb 1-1: Using ep0 maxpacket: 32 [ 40.112307][ T386] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.115772][ T742] netlink: 72 bytes leftover after parsing attributes in process `syz.3.122'. [ 40.127070][ T386] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.147225][ T386] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 40.162136][ T386] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 40.185220][ T386] usb 1-1: Product: syz [ 40.190841][ T386] usb 1-1: Manufacturer: syz [ 40.200765][ T386] hub 1-1:4.0: USB hub found [ 40.364018][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.380761][ T761] raw_sendmsg: syz.3.129 forgot to set AF_INET. Fix it! [ 40.465720][ T386] hub 1-1:4.0: 5 ports detected [ 40.470922][ T386] hub 1-1:4.0: insufficient power available to use all downstream ports [ 40.514004][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 40.521418][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.530179][ T45] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 40.538675][ T45] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 40.549501][ T45] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 40.558912][ T45] usb 2-1: config 128 has no interface number 0 [ 40.565476][ T45] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 40.577423][ T45] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 40.588229][ T45] usb 2-1: config 128 interface 127 has no altsetting 0 [ 40.597005][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 40.606408][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.620366][ T45] usb 2-1: Product: syz [ 40.624786][ T45] usb 2-1: Manufacturer: syz [ 40.629589][ T45] usb 2-1: SerialNumber: syz [ 40.634286][ T65] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 40.727770][ T766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.755576][ T768] overlayfs: conflicting options: metacopy=off,verity=require [ 40.787831][ T770] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=770 comm=syz.2.132 [ 40.795418][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.808699][ T65] usb 4-1: not running at top speed; connect to a high speed hub [ 40.817457][ T65] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 40.825796][ T65] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 40.835045][ T65] usb 4-1: config 17 has no interface number 0 [ 40.836178][ T776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.841254][ T65] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 40.850884][ T776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.861694][ T65] usb 4-1: config 17 interface 8 has no altsetting 0 [ 40.878845][ T65] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 40.888509][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.897027][ T65] usb 4-1: Product: syz [ 40.903036][ T45] usb 2-1: USB disconnect, device number 11 [ 40.909629][ T65] usb 4-1: Manufacturer: syz [ 40.914736][ T65] usb 4-1: SerialNumber: syz [ 40.915391][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.340960][ T65] usb 4-1: selecting invalid altsetting 0 [ 41.349228][ T65] usb 4-1: 8:6 : no UAC_FORMAT_TYPE desc [ 41.355193][ T65] usb 4-1: selecting invalid altsetting 0 [ 41.364808][ T65] usb 4-1: USB disconnect, device number 12 [ 41.386462][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.424198][ T781] overlayfs: missing 'lowerdir' [ 41.499101][ T792] fuse: Unknown parameter 'grp_id' [ 41.754021][ T45] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 41.905312][ T45] usb 2-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 41.916458][ T45] usb 2-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 41.929834][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 41.938302][ T45] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 41.947763][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.960621][ T45] usb 2-1: config 0 descriptor?? [ 41.966229][ T797] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 41.978923][ T804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.142'. [ 42.025775][ T808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.034514][ T808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.044965][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 42.045004][ T36] audit: type=1400 audit(1770995939.740:267): avc: denied { unlink } for pid=807 comm="syz.2.144" name="#7" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.224029][ T710] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 42.375080][ T710] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 42.383226][ T710] usb 4-1: config 0 has no interface number 0 [ 42.389674][ T710] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 42.394046][ T45] dragonrise 0003:0079:0006.0007: hidraw0: USB HID v0.04 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 42.401037][ T710] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 24576, setting to 1024 [ 42.414400][ T45] dragonrise 0003:0079:0006.0007: no inputs found [ 42.430638][ T45] dragonrise 0003:0079:0006.0007: force feedback init failed [ 42.438766][ T710] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 42.448554][ T809] ================================================================== [ 42.456653][ T809] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xbf/0x100 [ 42.464907][ T809] Read of size 5 at addr ffff88810abf6900 by task fido_id/809 [ 42.472413][ T809] [ 42.474745][ T809] CPU: 0 UID: 0 PID: 809 Comm: fido_id Not tainted syzkaller #0 d12ea4fc0968bdc2443fc49640e01930806f35cd [ 42.474775][ T809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 42.474789][ T809] Call Trace: [ 42.474797][ T809] [ 42.474806][ T809] __dump_stack+0x21/0x30 [ 42.474836][ T809] dump_stack_lvl+0x140/0x1c0 [ 42.474852][ T809] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.474869][ T809] print_address_description+0x71/0x210 [ 42.474884][ T809] print_report+0x4a/0x70 [ 42.474897][ T809] kasan_report+0x162/0x1a0 [ 42.474915][ T809] ? read_report_descriptor+0xbf/0x100 [ 42.474932][ T809] ? read_report_descriptor+0xbf/0x100 [ 42.474949][ T809] kasan_check_range+0x25a/0x2b0 [ 42.474966][ T809] ? read_report_descriptor+0xbf/0x100 [ 42.474983][ T809] __asan_memcpy+0x31/0x80 [ 42.474997][ T809] read_report_descriptor+0xbf/0x100 [ 42.475013][ T809] ? __cfi_read_report_descriptor+0x10/0x10 [ 42.475037][ T809] sysfs_kf_bin_read+0x1c3/0x200 [ 42.475052][ T809] ? __cfi_sysfs_kf_bin_read+0x10/0x10 [ 42.475066][ T809] kernfs_fop_read_iter+0x30b/0x580 [ 42.475078][ T809] vfs_read+0x657/0xcb0 [ 42.475093][ T809] ? __cfi_vfs_read+0x10/0x10 [ 42.475106][ T809] ? __kasan_slab_free+0x6a/0x80 [ 42.475123][ T809] ? putname+0x113/0x150 [ 42.475138][ T809] ? putname+0x113/0x150 [ 42.475153][ T809] ? __kasan_check_read+0x15/0x20 [ 42.475167][ T809] ksys_read+0x145/0x260 [ 42.475181][ T809] ? __cfi_ksys_read+0x10/0x10 [ 42.475195][ T809] ? __kasan_check_write+0x18/0x20 [ 42.475209][ T809] ? fpregs_restore_userregs+0x11c/0x260 [ 42.475223][ T809] __x64_sys_read+0x7f/0x90 [ 42.475237][ T809] x64_sys_call+0x2638/0x2ee0 [ 42.475254][ T809] do_syscall_64+0x57/0xf0 [ 42.475271][ T809] ? clear_bhb_loop+0x50/0xa0 [ 42.475292][ T809] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.475309][ T809] RIP: 0033:0x7f420f0a7407 [ 42.475322][ T809] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 42.475333][ T809] RSP: 002b:00007ffe346cbe20 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 42.475349][ T809] RAX: ffffffffffffffda RBX: 00007f420f7e3880 RCX: 00007f420f0a7407 [ 42.475359][ T809] RDX: 0000000000001000 RSI: 00007ffe346cbe70 RDI: 0000000000000004 [ 42.475368][ T809] RBP: 00005563187e72c0 R08: 0000000000000000 R09: 0000000000000000 [ 42.475376][ T809] R10: 0000000000000000 R11: 0000000000000202 R12: 00005563187e64c0 [ 42.475384][ T809] R13: 00007ffe346cbe70 R14: 0000000000000004 R15: 00005562f95ea4d8 [ 42.475394][ T809] [ 42.475399][ T809] [ 42.594359][ T65] usb 2-1: USB disconnect, device number 12 [ 42.594680][ T809] Allocated by task 45: [ 42.594695][ T809] kasan_save_track+0x3e/0x80 [ 42.751493][ T809] kasan_save_alloc_info+0x40/0x50 [ 42.756732][ T809] __kasan_kmalloc+0x96/0xb0 [ 42.761359][ T809] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 42.767807][ T809] kmemdup_noprof+0x31/0x80 [ 42.772341][ T809] hid_open_report+0x200/0x1110 [ 42.777222][ T809] dr_probe+0x25/0x790 [ 42.781322][ T809] hid_device_probe+0x2c1/0x5d0 [ 42.786201][ T809] really_probe+0x2d5/0x890 [ 42.790832][ T809] __driver_probe_device+0x198/0x280 [ 42.796240][ T809] driver_probe_device+0x54/0x3f0 [ 42.801399][ T809] __device_attach_driver+0x2f1/0x4b0 [ 42.806802][ T809] bus_for_each_drv+0x264/0x300 [ 42.811668][ T809] __device_attach+0x2c9/0x3c0 [ 42.816437][ T809] device_initial_probe+0x1e/0x30 [ 42.821466][ T809] bus_probe_device+0x18b/0x270 [ 42.826322][ T809] device_add+0x80c/0xbf0 [ 42.830674][ T809] hid_add_device+0x39b/0x560 [ 42.835357][ T809] usbhid_probe+0xde3/0x12b0 [ 42.839953][ T809] usb_probe_interface+0x6a9/0xc00 [ 42.845153][ T809] really_probe+0x2d5/0x890 [ 42.849663][ T809] __driver_probe_device+0x198/0x280 [ 42.854954][ T809] driver_probe_device+0x54/0x3f0 [ 42.860006][ T809] __device_attach_driver+0x2f1/0x4b0 [ 42.865473][ T809] bus_for_each_drv+0x264/0x300 [ 42.870327][ T809] __device_attach+0x2c9/0x3c0 [ 42.875182][ T809] device_initial_probe+0x1e/0x30 [ 42.880310][ T809] bus_probe_device+0x18b/0x270 [ 42.885191][ T809] device_add+0x80c/0xbf0 [ 42.889611][ T809] usb_set_configuration+0x1acf/0x20b0 [ 42.895072][ T809] usb_generic_driver_probe+0x95/0x160 [ 42.900536][ T809] usb_probe_device+0x1d4/0x380 [ 42.905404][ T809] really_probe+0x2d5/0x890 [ 42.909915][ T809] __driver_probe_device+0x198/0x280 [ 42.915202][ T809] driver_probe_device+0x54/0x3f0 [ 42.920320][ T809] __device_attach_driver+0x2f1/0x4b0 [ 42.925872][ T809] bus_for_each_drv+0x264/0x300 [ 42.930730][ T809] __device_attach+0x2c9/0x3c0 [ 42.935497][ T809] device_initial_probe+0x1e/0x30 [ 42.940700][ T809] bus_probe_device+0x18b/0x270 [ 42.945637][ T809] device_add+0x80c/0xbf0 [ 42.950060][ T809] usb_new_device+0x9f8/0x15b0 [ 42.954906][ T809] hub_event+0x30c6/0x4700 [ 42.959323][ T809] process_scheduled_works+0x7d4/0x1020 [ 42.964872][ T809] worker_thread+0xc70/0x10b0 [ 42.969554][ T809] kthread+0x2c9/0x370 [ 42.973618][ T809] ret_from_fork+0x67/0xa0 [ 42.978038][ T809] ret_from_fork_asm+0x1a/0x30 [ 42.982812][ T809] [ 42.985134][ T809] Freed by task 45: [ 42.989187][ T809] kasan_save_track+0x3e/0x80 [ 42.994042][ T809] kasan_save_free_info+0x4a/0x60 [ 42.999168][ T809] __kasan_slab_free+0x5f/0x80 [ 43.003974][ T809] kfree+0x158/0x440 [ 43.007920][ T809] hid_close_report+0x628/0x6f0 [ 43.013123][ T809] hid_device_probe+0x523/0x5d0 [ 43.018067][ T809] really_probe+0x2d5/0x890 [ 43.022578][ T809] __driver_probe_device+0x198/0x280 [ 43.027974][ T809] driver_probe_device+0x54/0x3f0 [ 43.033122][ T809] __device_attach_driver+0x2f1/0x4b0 [ 43.038499][ T809] bus_for_each_drv+0x264/0x300 [ 43.043444][ T809] __device_attach+0x2c9/0x3c0 [ 43.048308][ T809] device_initial_probe+0x1e/0x30 [ 43.053513][ T809] bus_probe_device+0x18b/0x270 [ 43.058451][ T809] device_add+0x80c/0xbf0 [ 43.062784][ T809] hid_add_device+0x39b/0x560 [ 43.067466][ T809] usbhid_probe+0xde3/0x12b0 [ 43.072143][ T809] usb_probe_interface+0x6a9/0xc00 [ 43.077519][ T809] really_probe+0x2d5/0x890 [ 43.082183][ T809] __driver_probe_device+0x198/0x280 [ 43.087478][ T809] driver_probe_device+0x54/0x3f0 [ 43.092758][ T809] __device_attach_driver+0x2f1/0x4b0 [ 43.098144][ T809] bus_for_each_drv+0x264/0x300 [ 43.102995][ T809] __device_attach+0x2c9/0x3c0 [ 43.107766][ T809] device_initial_probe+0x1e/0x30 [ 43.112799][ T809] bus_probe_device+0x18b/0x270 [ 43.117650][ T809] device_add+0x80c/0xbf0 [ 43.121983][ T809] usb_set_configuration+0x1acf/0x20b0 [ 43.127505][ T809] usb_generic_driver_probe+0x95/0x160 [ 43.132974][ T809] usb_probe_device+0x1d4/0x380 [ 43.137831][ T809] really_probe+0x2d5/0x890 [ 43.142335][ T809] __driver_probe_device+0x198/0x280 [ 43.147622][ T809] driver_probe_device+0x54/0x3f0 [ 43.152663][ T809] __device_attach_driver+0x2f1/0x4b0 [ 43.158137][ T809] bus_for_each_drv+0x264/0x300 [ 43.162990][ T809] __device_attach+0x2c9/0x3c0 [ 43.167770][ T809] device_initial_probe+0x1e/0x30 [ 43.173058][ T809] bus_probe_device+0x18b/0x270 [ 43.178103][ T809] device_add+0x80c/0xbf0 [ 43.182612][ T809] usb_new_device+0x9f8/0x15b0 [ 43.187472][ T809] hub_event+0x30c6/0x4700 [ 43.191893][ T809] process_scheduled_works+0x7d4/0x1020 [ 43.197448][ T809] worker_thread+0xc70/0x10b0 [ 43.202134][ T809] kthread+0x2c9/0x370 [ 43.206255][ T809] ret_from_fork+0x67/0xa0 [ 43.210766][ T809] ret_from_fork_asm+0x1a/0x30 [ 43.215537][ T809] [ 43.217870][ T809] The buggy address belongs to the object at ffff88810abf6900 [ 43.217870][ T809] which belongs to the cache kmalloc-8 of size 8 [ 43.231932][ T809] The buggy address is located 0 bytes inside of [ 43.231932][ T809] freed 8-byte region [ffff88810abf6900, ffff88810abf6908) [ 43.245675][ T809] [ 43.248025][ T809] The buggy address belongs to the physical page: [ 43.254610][ T809] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10abf6 [ 43.263561][ T809] flags: 0x4000000000000000(zone=1) [ 43.268854][ T809] page_type: f5(slab) [ 43.272934][ T809] raw: 4000000000000000 ffff888100041500 ffffea0004279700 0000000000000002 [ 43.281789][ T809] raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000 [ 43.290365][ T809] page dumped because: kasan: bad access detected [ 43.296771][ T809] page_owner tracks the page as allocated [ 43.302489][ T809] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (init), ts 4364648529, free_ts 0 [ 43.319678][ T809] post_alloc_hook+0x3b8/0x3f0 [ 43.324461][ T809] prep_new_page+0x1c/0x110 [ 43.328972][ T809] get_page_from_freelist+0x496e/0x4a20 [ 43.334520][ T809] __alloc_pages_noprof+0x35f/0x7e0 [ 43.339721][ T809] alloc_slab_page+0x6b/0x1e0 [ 43.344435][ T809] allocate_slab+0x69/0x420 [ 43.348947][ T809] ___slab_alloc+0x5a2/0x8d0 [ 43.353629][ T809] __kmalloc_node_track_caller_noprof+0x2e6/0x4f0 [ 43.360135][ T809] kstrdup+0x4d/0x130 [ 43.364119][ T809] get_permissions_callback+0x4a/0xa0 [ 43.369507][ T809] hashtab_map+0x110/0x210 [ 43.373927][ T809] security_get_permissions+0x127/0x440 [ 43.379476][ T809] sel_make_policy_nodes+0xd0e/0x1420 [ 43.384934][ T809] sel_write_load+0x378/0x5f0 [ 43.389615][ T809] vfs_write+0x3c8/0xf90 [ 43.393955][ T809] ksys_write+0x145/0x260 [ 43.398290][ T809] page_owner free stack trace missing [ 43.403655][ T809] [ 43.405980][ T809] Memory state around the buggy address: [ 43.411605][ T809] ffff88810abf6800: fa fc fc fc fa fc fc fc fa fc fc fc 06 fc fc fc [ 43.419756][ T809] ffff88810abf6880: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 43.427834][ T809] >ffff88810abf6900: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 43.436673][ T809] ^ [ 43.440740][ T809] ffff88810abf6980: fa fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 43.448798][ T809] ffff88810abf6a00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 43.456861][ T809] ================================================================== [ 43.465196][ T710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.473859][ T36] audit: type=1400 audit(1770995941.160:268): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.476674][ T386] hub 1-1:4.0: set hub depth failed [ 43.496155][ T36] audit: type=1400 audit(1770995941.160:269): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.501838][ T710] usb 4-1: config 0 descriptor?? [ 43.526528][ T36] audit: type=1400 audit(1770995941.160:270): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.551682][ T334] usbhid 3-1:0.0: can't add hid device: -32 [ 43.557808][ T334] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 43.563281][ T36] audit: type=1400 audit(1770995941.160:271): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.586293][ T386] usb 1-1: USB disconnect, device number 8 [ 43.592821][ T809] Disabling lock debugging due to kernel taint [ 43.594243][ T36] audit: type=1400 audit(1770995941.160:272): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.619842][ T36] audit: type=1400 audit(1770995941.160:273): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.643182][ T36] audit: type=1400 audit(1770995941.160:274): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.952862][ T710] usbhid 4-1:0.1: can't add hid device: -71 [ 43.959584][ T710] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 43.969580][ T710] usb 4-1: USB disconnect, device number 13