last executing test programs: 1m5.424033684s ago: executing program 2 (id=28): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="001500f306e2000000c70c44d2ff0000da53891469ef006a294fe350a4f9a51683df8a2680c8311cf04adb91e9948a8e5c064bfcea60"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="001500f306e2000000c70c44d2ff0000da53891469ef006a294fe350a4f9a51683df8a2680c8311cf04adb91e9948a8e5c064bfcea60"], 0x1c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet6(r2, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x002\x00@\x00\x00'], 0x28}}], 0x1, 0x0) 1m5.359181078s ago: executing program 2 (id=29): setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mlockall(0x5) (async) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x1000, @local}, 0x1c) memfd_create(0xfffffffffffffffc, 0x0) 1m5.358416928s ago: executing program 2 (id=30): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14473c0148"], 0x14}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r2, 0x0, 0x20, 0x0, 0x20, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2}}}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRES64=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0xffffffff80050200, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0x8000000001, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x20}}) read(r6, &(0x7f00000002c0)=""/248, 0xf8) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) 1m4.511717146s ago: executing program 2 (id=34): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = dup3(r0, r0, 0x0) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x3000001, 0x2010, r1, 0x3911b000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x2b}, 0x2, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x34ff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x708f}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x60c42, 0x5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff}) openat(r6, &(0x7f0000001340)='./file1\x00', 0x44403, 0x88) readahead(r5, 0x8, 0x14) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000100)={0xfffffedc, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffe38}}}, &(0x7f0000000080)={0xffd8, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0xffff, 0x0, 0x0, 0x5}, 0x10) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/208, 0xd0}, {&(0x7f0000001200)=""/135, 0x87}], 0x3, 0x6, 0x9) ptrace(0x10, r7) ptrace$setregs(0x1a, r7, 0xba, &(0x7f0000000040)) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, 0x0, &(0x7f00000000c0)) 1m2.774647754s ago: executing program 2 (id=39): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x5, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x3, 0xfffffbfc, 0x4, 0xff, 0x0, 0x45, [0x0, 0x2]}}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x406080, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x15, 0xa388, 0x3, 0x1, 0xffffffff, &(0x7f0000000080)="81"}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x0, 0x10, 0x3, 0xffff, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x68, 0x0, 0xb5, 0x2f, 0x0, @local, @private=0xa010100}}}}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x2, r3, 0x1175}, 0xc) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 1m2.653908693s ago: executing program 2 (id=42): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x2000000000, 0x1e}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x380, 0x0) 1m2.602251536s ago: executing program 32 (id=42): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x2000000000, 0x1e}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x380, 0x0) 5.779291495s ago: executing program 4 (id=530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14, r2, 0x9, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8014) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40eaf000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 4.444562456s ago: executing program 4 (id=545): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/187, 0xbb, 0x0, &(0x7f0000000140)=""/170, 0xaa}, &(0x7f00000002c0)=0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xfff) setuid(0xee01) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040), 0x4) sendfile(r0, r1, 0x0, 0x7ffff004) 3.673426429s ago: executing program 3 (id=551): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x107082, 0x0) fsync(r0) 3.658485899s ago: executing program 3 (id=552): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) pipe(0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r2, 0x6600}], 0x1, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xfa, 0x80, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x5776}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1d, 0x4, {0xa, 0x25, 0x25, 0xe, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe7, 0x80, 0xe, {0xa, 0x25, 0x25, 0x8, 0x2, 0x7}}}}}}}}]}}, 0x0) 3.582109785s ago: executing program 4 (id=557): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) syz_usb_connect$uac2(0x5, 0x9e, &(0x7f0000000840)=ANY=[@ANYBLOB="12010102000000208c0d0c0040000102030109028c000301008008080b0101010c20060904000000010120000924010300042c000408240a05004000030c24030207ed0403050300010f24060305060001000200090004000904010000010220000904010101010220000905010900040406060825018230012800"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x26, 0x3, 0x0, {0x5, 0x5, 0x0, ')+$\'$'}}, 0x26) 2.405847075s ago: executing program 4 (id=562): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x8001, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x8, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xffffeffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d24, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffd58}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="13bc0000", @ANYRES16=r4, @ANYBLOB="040800000000fddbdf253200000008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x48804}, 0x804) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffa, 0xfff, 0x4, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0x5, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}], 0x1, 0xbff, 0x43, 0x0, 0xc, 0x6e}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.267450144s ago: executing program 4 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00003c1000/0x1000)=nil, 0x54000, 0xfffffffffffffff7}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000020, 0x0, 0x8}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000020, 0x0, 0x8}]}) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ff9000/0x4000)=nil) 2.147494663s ago: executing program 4 (id=564): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_disconnect(r1) syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7d, 0x20, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0xfffffffe, 0x1, 0xbe1}}}}}}}}]}}, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x3, 0x4, 0x4, 0x3}}, 0x26) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x2004c8a1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$VHOST_SET_VRING_KICK(r3, 0x8008af26, &(0x7f0000000040)={0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0x90, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x850, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x1, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x28}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x5, 0x1, [0x2], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x403, 0xff, 0x4, 0xa}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x1, 0xf7, 0xd3b, 0xeb, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x40, 0x6, 0x7f, {0x7, 0x25, 0x1, 0x0, 0xfd, 0x382}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x3, 0x4, {0x7, 0x25, 0x1, 0x8, 0xf, 0x9}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r9, 0x0, r10) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @empty, 0x9}, 0x1c) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) splice(r7, 0x0, r9, 0x0, 0x15944, 0xc) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x200}) 887.159139ms ago: executing program 1 (id=571): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x8001, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x8, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xffffeffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d24, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffd58}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="13bc0000", @ANYRES16=r4, @ANYBLOB="040800000000fddbdf253200000008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x48804}, 0x804) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffa, 0xfff, 0x4, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0x5, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}], 0x1, 0xbff, 0x43, 0x0, 0xc, 0x6e}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 800.065104ms ago: executing program 0 (id=572): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x34}], 0x1, 0x0, 0x0, 0x20011}, 0x0) (async, rerun: 32) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x300) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) (async) unshare(0x24020400) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005fb000/0x400000)=nil) (async) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/108) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 748.799248ms ago: executing program 0 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r1 = dup(r0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x20, 0x0, 0x0, 0x9c}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x3, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x40, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x1, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x1, 0x2]}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 748.451868ms ago: executing program 0 (id=574): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/149, 0x95}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@inode32}]}) 747.186618ms ago: executing program 0 (id=575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = accept(r2, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbde, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40400c4) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r8, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdffb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d0000000000000000000000000000000000d68d8bf65b7805730000000000000000000000fbffffffffffffff000000210000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005d07350004100000"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)={0x284, 0x27, 0x300, 0x70bd27, 0x25dfdbfd, {0x1f}, [@generic="0beacb45cdaba82081012a0e60edb9b5719365acafc655f8f78743f2767fe2ce4aa36175fbc7ae2f825c966c1233e8d0aeb9d0647ea3013734cf44299eae5dc206ec6bc70d70cd53951f5b5f8961d5a6e1e5adad33d2d633b12fab45e4cdd6e8a01fcafb023f437128a7f8c129b038de37598b10120ceb523a2f31823b73f03d6228732ae8cc00d0e5e04e065c1f1c4bbe9d69e3c3318b544bbc16e7b7a3a4dda536ce52813292a8262a4f8a9bc3180115d3c579f7c4992c6cfb056c3fbd71f17230728782a616719ece25c98f2feccd", @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x5}, @nested={0x51, 0xa2, 0x0, 0x1, [@nested={0x4, 0xf2}, @generic="76bbb7dcc2357d26bb0fdf8d30c873b1408b26c1ea7264459bcb8a43c8542913be9ee8", @typed={0x8, 0x29, 0x0, 0x0, @u32=0x7}, @generic="dca13dba45e7588c3baeacc76ac80f4f3b1219b015ff92ea6bcb24f3c450"]}, @typed={0x25, 0x134, 0x0, 0x0, @binary="5366cbdc15f0f41dac5ecee8405dd47999e5e2f7227f72fee9ac7ac4aff7548991"}, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="0247e066a8905cc67ccf69944c8653f40e2790224e7f651c8218f44c97", @generic="cb046d38ed8205140ec9fe20596d48279595e62a699d5f6cac3376e506605df1129fca0950f33673e207d405a68670ccdcfd0c5e488ea3a72a4252f6b202f2f5a3116fad3b665c7d9db7944dd84806d6158b16683df23b9a0059e0bb16b3b6967aca80d6048dc61589a09c2609f997d0d88cdaec444409b5df3d5d4f8c927cb1e9e693d77e39f0c9ea8bb1a5ffa3eb8fa1aa2e6ad1b5b986c4b1b3a1e9ecdcc3573fc1f7669f7c093f3abc1a4900114b6b51fc554ae541d468f6ea76deaed21ef2", @nested={0x20, 0xd6, 0x0, 0x1, [@nested={0x4, 0x100}, @typed={0x14, 0x147, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf3}]}, @generic="6d0feed776e3f2e5d82e"]}, 0x284}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f000015a000/0x10000)=nil, 0x10000, 0x300000b, 0x12, r10, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe55, 0x20000) ioctl$USBDEVFS_RELEASE_PORT(r11, 0x80045519, &(0x7f0000000140)=0x8) 746.543928ms ago: executing program 1 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000002030108000000000000000001000005080001000400e0ff0800054000001c38"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2004010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000040000800010001"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r3, &(0x7f0000000500)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xd8, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x19, 0x0, [], "1c794c5fcd565649050022835ac3ac97cb9fb274d4d9998212"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x9, 0x2], "7fb5875c8cb1e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f071ff96f3443ec4461c325c516f1698e1f011fa3bfab0dedf7bd62f68af"}, {0x1}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x4c}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"}}}}, 0xe6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x5, 0x6}, 0x100, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) 653.604704ms ago: executing program 0 (id=577): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000340)={0x8703, {{0xa, 0x800, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x3, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048004) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) 653.184134ms ago: executing program 0 (id=578): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r1, &(0x7f0000000280)=""/4096, 0x1000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, '&'}, @local=@item_4={0x3, 0x2, 0x1, "9e7d84ba"}]}}, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0xfff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0xc0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@verity_require}], [], 0x2c}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0xf) wait4(r4, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001280)={0x0, 0x0}) getpriority(0x0, r5) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) sendfile(r0, r3, 0x0, 0x7ffff004) 651.183245ms ago: executing program 1 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000b2}]}) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0xe20, 0x1000020, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async, rerun: 64) sendto$inet6(r3, 0x0, 0x60, 0x40012, 0x0, 0x0) (async, rerun: 64) r4 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(r4, 0x8913, &(0x7f0000000200)={'veth1_vlan\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) (async, rerun: 32) getsockopt$inet6_tcp_buf(r5, 0x6, 0x8, 0x0, &(0x7f0000001040)) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x92002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="3e660f00d2b8010000000f01c1c4e2613767002e084c8200c463791d2e2048b839a9fb87bdbcc13e0f23c00f21f835030006000f23f82667660f01590042c10eb6b8010000000f01c1", 0x49}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x80001}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) r9 = socket(0x1e, 0x4, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b707"], 0x0) (async, rerun: 64) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000002c0)=0x94, 0x4) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x0, 0x0, 0x6b}]}) ioctl$SIOCGETSGCNT_IN6(r9, 0x89e1, &(0x7f0000000140)={@empty, @mcast1}) 650.894315ms ago: executing program 3 (id=580): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0xa7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0x8, 0x20, 0x81, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "52a1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5f5a, 0x8, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0x7fff, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7f52, 0x0, 0x87}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffc, 0x3, 0xb328}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x0, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x30, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0xff, 0x5c}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x64, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x9, 0x1, 0xb1, 0xff, 0x7}, 0x110, &(0x7f0000000100)={0x5, 0xf, 0x110, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "fef4073ba66e45b4bcc251fb0e85b04e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x0, 0x7, 0x63}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x3, 0x0, 0x4}, @generic={0xe0, 0x10, 0xa, "8cfa40ebbd9915df74a4bdbd19e179344d30b8cd664bc3c990cd0f018fde158121d8bf3bc72d2a0f36228f8436ad380767247c67dca12ff56f5a14ab224a6c3f1d06790230514c9f5a34847e970357504c5f7b2e807e513f3693bcf6cacaf76ef0f8a2f8a0e8a20f5ce9c1bd1656de4ade7a78e70721d21b57daf52f0d94e9be2aebec9699c29c9ca2c86692871b1109dbf5fa2ad39cfe971fd3250f6e5dd1455341074ca28c42d75b1b996065504ecab7689a3c28fb2569df4817cfe23f4bc6847e4974ca572fc38ecba3826cacbd34f697f5df8df8c8e239d7f73442"}]}, 0x7, [{0xd5, &(0x7f0000000240)=@string={0xd5, 0x3, "2ca29485d2368513a406c994bacf9e5c975522f054653444a6804e3c708af746f5823306cdbbea32ae32e5a557f95dbe42e14516c1734dd5405fa554394d97380d2a7b5796fccce16f875842f5c58405cde94684f5a90f77b3a0ccbd83422d4b1b9046e0921f75801f45e74ce55c7ed40d542f4c05978c35ecfda593f8fa48dad890e3559508e96e0c86a22c1d1024a0eb88805e362adaea29aa26c31105cc597063146eff94138266b16ece39cb1295a8ed7e88aff03620baf5b1e3763967a22750f5f632faf64f336a9ed4f6bdd45dd542ea"}}, {0xdc, &(0x7f0000000340)=@string={0xdc, 0x3, "ad6c1a29cfc51be6a8a364c93db9804e296932bf23a4d606f4b1db0129fb5aa9be800ff3c3138fcac43686e9c69b0f9b9dcb94146f4856b0bad183d2e651347a1be0ac37d96e8b60ae9263a7a0a3f4a3de3484b29c575e81465ceea0e74707e110177132673431a55bbbe534e8e23279834c87fc083e63a70ced9c97103e5c67707ac9a3cc792ba44b96b4bd6598423e16f5a3157d6c66bba653cae95327ced0cc00aa06d8e09c6a91a6690ec1aa54494ece76dae028b316402454ade56217ebfeea9c244df5d05f6718b3909458b95e21d7e22d2a3582333611"}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "bea4b01eaeeb404415c5fa391ee2e474b5b8be4d012fd5b59623a6a2352dc6b7ec1afe610dc5ee5fcdfebde4fafaedcf19e1044a65084a3d03edc9767f2118aeb05bbd52f0e90f916ca0b74d78a3f162ed31da9119ceb80eba9e61351e0899c01f09fa9cd967b150a25246135a2d02ea95e06c2f77ef4109c888a9b8cc87e9bbc3861e7f4a361aa0d34b9d8cb22fb2ea894ebcd5a628fe2910325484c76ebfda66bb26d01edbddac8f4aa1736ece9551016e390e83726bd5c2fa6d8609239adce8be6431149f75b25c3ed95a98a43e5a7d02b2a501ff359fdf4bd7bc2b820e8095a9f422b0277861c040bc"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1007}}, {0x5f, &(0x7f00000005c0)=@string={0x5f, 0x3, "d2fb9d48ae9da839a4d06dffed94667057819dc37cf2252953dac8038cfd040a69145169f5473fb66e1960b35e5146fc78b08d2707fb373d1735c373bc2b7e1de98f4b557e1b1a24d5d8f8c307c75b6ad4a4ae6702377514349b1461ca"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x82c}}, {0xc6, &(0x7f0000000680)=@string={0xc6, 0x3, "da111ce3e2bd0853365b350b94576819fee9f489a7cf92963c0e26e43ce5176889cd9801fa95fe3c0b28b16bec73f6850837e42db8dda3ee0d219584279fb5ae8a5ca80a5db098bab8c9ee47b93d4a627e5a7732503a3f67318d6760cd7359c003106de11b71e8f1fdcc84555e1526ac173dbb1c4216cd6bfef6f8b92c7a41dfab1f6a9573e40c3631dbfa9b300ba50db48703e230f12aef8a1f6eaedc538c280619b4013bfafa0a14774633fd6c03417ce2e662a20312d2d61327f18e66454cf723a6c8"}}]}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @multicast1}}]}, 0x190) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000800)={0x40, 0x2, 0xf4, {0xf4, 0x21, "0fe07974ee49f664080faf73de34facfa634f190ec08dabffa0b16cfbdf23fc5807877cc01126b33933d21e1dd90cada30e3edde08cc7edbadc9842ed0eb03f3ebb49581f6090ce3c837df0537a3af9c4b609e487a0f157be26c940e34b892a180a9c7b37f79c24cd29f43a610788d839b767f51c872674f7cd846e3239d6472ce29a2f1b8d3e0ae7428a05bab98f0d91092612afbc5542d0d2b9d1067dbc4d99c8d4de80cd2429645dfaaf4c9356d276a190c0a5f410d4f1ff87a64e81b4329b24ecc079c1a690f214b21217a0887ee10be6c65e0d671b4ba07909d1e65a14b94b6a387843351014b260b83a77525586eaf"}}, &(0x7f0000000900)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "7cb4fe861669a0625c51da5faad070cead2e665e92dddc758adba0ca4b6f8b91a501b14853434c33e7630ca449128acc57b2203469a986f6cbc38483e1e0527b607ad2f390fa3e43282c77df658e96f386d7e4079c63935ebf1e6ad27e10415f8bfee35cb4dd2f66b663a7ca72ed287617b25781c8a9481a5c2d0c66c458b8d3e18bcf081eb82d5b7041a4cab5adfd7dfba7e4f144cd18260b4161c0de00deb81c938b902a294399eb6f0fcf6d52ad3141a1"}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)={0x20, 0x18, 0xd6, "f2b6fe95037a37837b0b2432e8eaa25ff9b06a31642bd0cae1b4a8dbd982e3626222a17e7cec7e7c8d05b7a3110a993d7ae5c3e77f225088590c3b9e6d82924d7bcaeac93f1eab00ba8f65ac92deb185d5abdec3b6bf8f1204f3c5362aaed6eb76de7b5d397b5abdf76d2c8d4f4ea35d98692ab5854a4f6583bcfe49626d6d615ee68ff380486e3ab77e5d9e97416ea097dec0c707a5689aae563be9d7ff0ceb5538b77bc7e87123c9273fbbe90e9ad5a4d967d6c3ec661fadb0e6ae83078c532e82d2812cd92bc52c13c130d00c11c0d6e3b7e80dc1"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b80)={0xc0, 0x5, 0x6, "14ad3512e55e"}, &(0x7f0000000bc0)={0x40, 0x5, 0x4, "7ef3fad3"}}) 559.361811ms ago: executing program 1 (id=581): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x8001, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x8, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xffffeffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d24, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffd58}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="13bc0000", @ANYRES16=r4, @ANYBLOB="040800000000fddbdf", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x48804}, 0x804) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}], 0x1, 0xbff, 0x43, 0x0, 0xc, 0x6e}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 520.281514ms ago: executing program 1 (id=582): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0xf}) r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x8, 0x600) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000080)={0x2, 0x0, 0x5c0c52e3, 0x5, 0x51d, 0x8}) (async) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000000c0)={0x3, 0x200, 0x45de}) ioctl$int_out(r0, 0x0, &(0x7f0000000100)) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000140)) (async) r1 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@nl=@proc, &(0x7f0000000200)=0x80, 0x80000) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4e}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004804}, 0x4000) (async, rerun: 32) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000003c0)=""/123, &(0x7f0000000440)=0x7b) (rerun: 32) r3 = dup3(r1, r0, 0x80000) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffa}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (async) r5 = accept$nfc_llcp(r1, &(0x7f00000009c0), &(0x7f0000000a40)=0x60) io_submit(0x0, 0x6, &(0x7f0000001c40)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000600)="1a8fbbebb8db7c792408b5899e8d491fc1ee39b823481990d225467009b1598aace244dd360a4559ca6ff54df9c3a4bd4fc5dd134b9998268d3d0d178a87d0ebe72b1e5b7996a59ee6d42441a39f1ba5a9594c2dca06a2c45277641d9dec3559bb244c0c305cc255cdc9c7dac3549301a449e0495693b1a58ef5747f4338e6039ea52abf04cb70c0fa2c3893999861d40124cad30a8e0ef14760bdcfae0120753ac79cad32ebe5568f9b9285c4cb6853f7c50e577f0d3aed5bf5434ec1345f794227cabdde36f442b37611105732833e618ef0c8bd3737f7eaf9f44e2e109bd25a38e594b7a087cd132a76a2cd", 0xed, 0x400, 0x0, 0x3, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x7f, r1, &(0x7f0000000740)="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", 0xfa, 0xc, 0x0, 0x1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000880)="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", 0xfe, 0xffffffff, 0x0, 0x2, r3}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x7fff, r5, &(0x7f0000000a80)="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", 0x1000, 0xffff, 0x0, 0x2}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x6, 0x3, r1, &(0x7f0000001ac0)="f275b7ea9f21581af89d8b7989ceb9ab3d269c55dd10dddba115261662d1cb1eae8b9e768d025639072aa1d1705570859c766a46c7c103b44cea4566bdafd1423856f1eb0e7c537d11ce9ec66886651f2b12167059031e2a036518391f984fa7cb29e264b2c0dabacc79890a9064e987d15cf822dfd948ab979a9fd90955594061f1846c13a222416ca0de2d4af4fd8c16665f7c0d784fa485ab49e503", 0x9d, 0x9, 0x0, 0x1}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f0000001bc0)="9bc54e81609d5c489d5e", 0xa, 0x2, 0x0, 0x2, r3}]) (async, rerun: 32) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000001c80)) (async, rerun: 32) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f0000001cc0)={0x53b2e2f8ec4f23fe, 0x1, 0x3, 0x9, 0x99, 0x3d1}) (async, rerun: 64) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000001d00)) (async, rerun: 64) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000001d40)=0x37a, 0x2) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000001dc0)=@buf={0x23, &(0x7f0000001d80)="479e9d0a6a0bd9de50cff49aee0fa5c79e75614e613190d12e123ef53b2e856b21a6f8"}) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) fcntl$setsig(r6, 0xa, 0x35) (async, rerun: 64) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000001f40)={0x1, 0x0, 0x1000, 0xba, &(0x7f0000001e40)="a5770ef43e0813ce14030c454a4bdbe72f0ccf26b06b4fcbe901fc2f60fa5781946614661feae19dfceff2e1925144b4295bef8e118f6d66059f0a7892359dd7ecb705f9ac24fe2ddaf72298ea4d92cdf32298093a259c1bf0d2287cccf15d553b1d6693d3cfc27daf50eb99f3ed38fda13cdaa6b5781f1282c6551867df5b8462cc44bbfc44767c2e1719cc962c4fb04a72fa6ef2571c469216c4620f1861f659ef1cd39a7841a8fdeeeee0a74f187bd7ceb2046593ea1ec4ff", 0x0, 0x0, &(0x7f0000001f00)}) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x64, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000002140)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x8044) (async) read$FUSE(r8, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000004300)={r9}) 508.886894ms ago: executing program 1 (id=583): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x19) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x11, 0x0, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000001000/0x1000)=nil) r2 = fsmount(r1, 0x0, 0x0) ptrace$setsig(0x4203, r0, 0x81, &(0x7f00000002c0)={0xc, 0x1000, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000000)=0x8000000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805) recvfrom(r6, 0x0, 0x0, 0x40010061, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}, 0x1}}, 0x80) r8 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000480)={0x2, 0x0, 0x100000000, 0x40, r8}) symlinkat(&(0x7f0000000040)='.\x00', r2, &(0x7f0000000140)='./file0\x00') clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) fchown(r9, 0xee01, 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 87.428143ms ago: executing program 3 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup2(r4, r4) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8000}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x14, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)={0x110, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x0, [@nested={0xf9, 0xc7, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}, @nested={0x4d, 0x6c, 0x0, 0x1, [@nested={0x4, 0x150}, @nested={0x4, 0xa8}, @nested={0x4, 0x148}, @generic="437928b853e7c08502f62f0c86d4d39ac3", @typed={0xc, 0x23, 0x0, 0x0, @u64=0x49b91b62}, @typed={0x4, 0x34}, @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x5}]}, @typed={0x8, 0xf8, 0x0, 0x0, @fd=r6}, @generic="dbb07465ce00ce7f41c05614d6d0993fa4cc230a83e6c323fdaf7b5c58b9712b42f213d3efe3b6f5dc71318d87c5ded9de158021378d666a8a4f1d4bb726fcb15b60ba0d687d5a55b4dca8029a8f02bf5a21b4a5db0c9ef7bc59d593674844a09ee4c64f6bf69bdba5eb1a4bcf00053704417fd4d8fc7d357772049a9950de1434d5b12ff9da3ead7a3db6de891ce8dfe04696d08c"]}]}]}, 0x110}], 0x1}, 0x20000000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000240)="67660fd9b45000000000660f0018650fc72a0fc71e6ad4ea75d44b002e360f0936f30fa6d00f00dd660f579600a0b87d000f00d0", 0x34}], 0x1, 0x31, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 29.268287ms ago: executing program 3 (id=585): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x8001, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x8, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xffffeffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d24, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffd58}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="13bc0000", @ANYRES16=r4, @ANYBLOB="040800000000fddbdf253200000008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x48804}, 0x804) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffa, 0xfff, 0x4, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0x5, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}], 0x1, 0xbff, 0x43, 0x0, 0xc, 0x6e}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 3 (id=586): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xfe, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = socket(0x2b, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@index_off}, {@redirect_dir_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) rmdir(0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4080) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) getsockname$packet(r1, 0x0, &(0x7f0000000640)) (async) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x0, 0x9, 0xfa, {0xfa, 0x21, "0ae9c71dd8e8fbe47d9b020000000000000064a4445752906933768d4c3e15b58c4a9f0a065805d6ab4349b038a3d2f39546e1a5b56cbc442e57c4381afefa9cd30ddc0048d134e99547006136504c9f207c19401c3aaca00ce0b5875d67acab56e437179786fe3c2b39b4bc9eb4a34d4bc6adde14ff3770bfee3d63ad5395ee8c3a78f6e6ae21a5bd433b371c9229500815f245fd967a06be5348b3499a43e3bd605d8bf568325aed7606be1f7c805c5c4896b681d3de066e3a33a47a709f48a524d96ceaae61ca61e20f38d79a2ebfe82a98df92e08e2d6379b97371d8518d20c806f78ef98bf5508cc12caa3a4483fd8d96433bc5174a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.282711][ T634] RSP: 002b:00007fd0d7484fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.282732][ T634] RAX: ffffffffffffffda RBX: 00007fd0d74856c0 RCX: 00007fd0d655d04e [ 42.282746][ T634] RDX: 000000000000000f RSI: 00007fd0d74850a0 RDI: 0000000000000004 [ 42.282759][ T634] RBP: 00007fd0d7485090 R08: 0000000000000000 R09: 0000000000000000 [ 42.282772][ T634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.282784][ T634] R13: 00007fd0d6816038 R14: 00007fd0d6815fa0 R15: 00007fffc90a9698 [ 42.282798][ T634] [ 42.283041][ T307] usb 5-1: Using ep0 maxpacket: 32 [ 42.614738][ T307] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.627587][ T307] usb 5-1: config 0 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 42.643119][ T307] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.650293][ T307] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 42.660651][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.669455][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.682389][ T375] usb 1-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 42.695178][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.706242][ T307] usb 5-1: config 0 descriptor?? [ 42.712359][ T375] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.722777][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 42.733778][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.746753][ T375] usb 1-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 42.758948][ T10] usb 2-1: config 0 descriptor?? [ 42.764662][ T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.773351][ T375] usb 1-1: Product: syz [ 42.779596][ T375] usb 1-1: Manufacturer: syz [ 42.785382][ T375] usb 1-1: SerialNumber: syz [ 42.945332][ T307] usbhid 5-1:0.0: can't add hid device: -71 [ 42.952511][ T307] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 42.962954][ T307] usb 5-1: USB disconnect, device number 4 [ 42.995350][ T375] usb 1-1: 0:1 : does not exist [ 43.002985][ T375] usb 1-1: unit 0 not found! [ 43.011355][ T375] usb 1-1: USB disconnect, device number 7 [ 43.021112][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.187705][ T621] raw_sendmsg: syz.1.99 forgot to set AF_INET. Fix it! [ 43.200225][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.211252][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.226377][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 43.228467][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 43.228483][ T36] audit: type=1400 audit(1775882791.489:236): avc: denied { create } for pid=620 comm="syz.1.99" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.233030][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 43.240170][ T36] audit: type=1400 audit(1775882791.489:237): avc: denied { map } for pid=620 comm="syz.1.99" path="socket:[5361]" dev="sockfs" ino=5361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.270821][ T10] usb 2-1: USB disconnect, device number 6 [ 43.273157][ T36] audit: type=1400 audit(1775882791.499:238): avc: denied { write } for pid=620 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.325052][ T36] audit: type=1400 audit(1775882791.499:239): avc: denied { accept } for pid=620 comm="syz.1.99" path="socket:[5361]" dev="sockfs" ino=5361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.597149][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.707082][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.747245][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 43.754053][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.767687][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 43.777838][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.791369][ T45] usb 4-1: config 0 descriptor?? [ 43.802057][ T36] audit: type=1400 audit(1775882792.109:240): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.825657][ T406] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 43.878994][ T10] usb 5-1: device descriptor read/64, error -71 [ 43.920478][ T654] process 'syz.1.112' launched '' with NULL argv: empty string added [ 43.930536][ T36] audit: type=1400 audit(1775882792.239:241): avc: denied { execute_no_trans } for pid=653 comm="syz.1.112" path=2F32362FFEFFFFFFFFFF07 dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.978031][ T406] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 43.986833][ T406] usb 1-1: config 0 has no interface number 0 [ 43.994110][ T406] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 44.007986][ T406] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 44.017668][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.027372][ T406] usb 1-1: Product: syz [ 44.031916][ T406] usb 1-1: Manufacturer: syz [ 44.037343][ T406] usb 1-1: SerialNumber: syz [ 44.043477][ T406] usb 1-1: config 0 descriptor?? [ 44.050039][ T649] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 44.060826][ T406] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 52:02:0c:7c:ba:50 [ 44.091093][ T36] audit: type=1400 audit(1775882792.399:242): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 44.114840][ T36] audit: type=1400 audit(1775882792.409:243): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.138159][ T10] usb 5-1: device descriptor read/64, error -71 [ 44.142080][ T36] audit: type=1400 audit(1775882792.409:244): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1016 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.175689][ T36] audit: type=1400 audit(1775882792.409:245): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1016 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.202010][ T31] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 44.214880][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.226349][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.238084][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.250150][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.261444][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.275871][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.291430][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.304744][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.315847][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.328816][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.341662][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.353290][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.364765][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.380008][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.391740][ T31] usb 2-1: device descriptor read/64, error -71 [ 44.401288][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.407019][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 44.410758][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.432448][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.442884][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.456610][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.466856][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.476427][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.487435][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.502070][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.547076][ T10] usb 5-1: device descriptor read/64, error -71 [ 44.566136][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.576844][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.586421][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.597030][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.607550][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.618437][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.628394][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.638285][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.639973][ T375] usb 1-1: USB disconnect, device number 8 [ 44.648944][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.657136][ T375] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 44.666605][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.693578][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.705301][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.715077][ T31] usb 2-1: device descriptor read/64, error -71 [ 44.724052][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.737286][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.750770][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.760061][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.770781][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.785588][ T45] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0 [ 44.807058][ T10] usb 5-1: device descriptor read/64, error -71 [ 44.807660][ T45] logitech-hidpp-device 0003:046D:C086.0005: hidraw0: USB HID v0.1e Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 44.873756][ T45] usb 4-1: USB disconnect, device number 10 [ 44.917092][ T10] usb usb5-port1: attempt power cycle [ 44.977029][ T31] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 45.103549][ T703] FAULT_INJECTION: forcing a failure. [ 45.103549][ T703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.107264][ T31] usb 2-1: device descriptor read/64, error -71 [ 45.119547][ T703] CPU: 0 UID: 0 PID: 703 Comm: syz.3.115 Not tainted syzkaller #0 f9bdc9161095fb91188de70574256d407725efc9 [ 45.119579][ T703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.119591][ T703] Call Trace: [ 45.119598][ T703] [ 45.119606][ T703] __dump_stack+0x21/0x30 [ 45.119634][ T703] dump_stack_lvl+0x140/0x1c0 [ 45.119656][ T703] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.119678][ T703] ? lruvec_init+0x1a1/0x280 [ 45.119704][ T703] dump_stack+0x19/0x20 [ 45.119724][ T703] should_fail_ex+0x3d7/0x530 [ 45.119746][ T703] should_fail+0xf/0x20 [ 45.119767][ T703] should_fail_usercopy+0x1e/0x30 [ 45.119789][ T703] _copy_from_iter+0x3b8/0x1510 [ 45.119817][ T703] ? __cfi__copy_from_iter+0x10/0x10 [ 45.119840][ T703] ? __check_object_size+0x527/0x830 [ 45.119864][ T703] ? __cfi___check_object_size+0x10/0x10 [ 45.119886][ T703] ? skb_page_frag_refill+0x22e/0x4f0 [ 45.119911][ T703] ? sk_page_frag_refill+0x5d/0x120 [ 45.119941][ T703] tcp_sendmsg_locked+0x1fc5/0x4b40 [ 45.119972][ T703] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 45.119996][ T703] ? __cfi_tcp_sendmsg+0x10/0x10 [ 45.120018][ T703] tcp_sendmsg+0x3e/0xd0 [ 45.120040][ T703] ? __cfi_tcp_sendmsg+0x10/0x10 [ 45.120062][ T703] inet_sendmsg+0xb7/0x120 [ 45.120079][ T703] ____sys_sendmsg+0x8ac/0xae0 [ 45.120103][ T703] ? __import_iovec+0x3ef/0x7c0 [ 45.120118][ T703] ? __sys_sendmsg_sock+0x50/0x50 [ 45.120138][ T703] ? import_iovec+0x80/0xb0 [ 45.120152][ T703] ___sys_sendmsg+0x2a6/0x370 [ 45.120171][ T703] ? __sys_sendmsg+0x2a0/0x2a0 [ 45.120190][ T703] ? kstrtouint+0x78/0xf0 [ 45.120211][ T703] __sys_sendmmsg+0x2b4/0x4e0 [ 45.120232][ T703] ? __cfi___sys_sendmmsg+0x10/0x10 [ 45.120256][ T703] ? __cfi_ksys_write+0x10/0x10 [ 45.120280][ T703] __x64_sys_sendmmsg+0xa4/0xc0 [ 45.120305][ T703] x64_sys_call+0xfec/0x2ee0 [ 45.120329][ T703] do_syscall_64+0x57/0xf0 [ 45.120364][ T703] ? clear_bhb_loop+0x50/0xa0 [ 45.120382][ T703] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.120408][ T703] RIP: 0033:0x7fd0d659c819 [ 45.120426][ T703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.120441][ T703] RSP: 002b:00007fd0d7485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 45.120461][ T703] RAX: ffffffffffffffda RBX: 00007fd0d6815fa0 RCX: 00007fd0d659c819 [ 45.120475][ T703] RDX: 0000000000000001 RSI: 0000200000001740 RDI: 0000000000000003 [ 45.120487][ T703] RBP: 00007fd0d7485090 R08: 0000000000000000 R09: 0000000000000000 [ 45.120499][ T703] R10: 0000000000002090 R11: 0000000000000246 R12: 0000000000000001 [ 45.120511][ T703] R13: 00007fd0d6816038 R14: 00007fd0d6815fa0 R15: 00007fffc90a9698 [ 45.120526][ T703] [ 45.198607][ T705] tipc: Enabling of bearer rejected, failed to enable media [ 45.258040][ T707] 9pnet_fd: p9_fd_create_tcp (707): problem connecting socket to 127.0.0.1 [ 45.327102][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 45.467052][ T31] usb 2-1: device descriptor read/64, error -71 [ 45.488461][ T10] usb 5-1: device descriptor read/8, error -71 [ 45.497314][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 45.587386][ T31] usb usb2-port1: attempt power cycle [ 45.607082][ T65] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.628232][ T10] usb 5-1: device descriptor read/8, error -71 [ 45.658440][ T45] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 45.668960][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.680366][ T45] usb 4-1: config 0 descriptor?? [ 45.686716][ T45] usb 4-1: bad CDC descriptors [ 45.737276][ T65] usb 1-1: device descriptor read/64, error -71 [ 45.867085][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 45.888269][ T10] usb 5-1: device descriptor read/8, error -71 [ 45.889024][ T406] usb 4-1: USB disconnect, device number 11 [ 45.927113][ T31] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 45.948300][ T31] usb 2-1: device descriptor read/8, error -71 [ 45.977240][ T65] usb 1-1: device descriptor read/64, error -71 [ 46.028258][ T10] usb 5-1: device descriptor read/8, error -71 [ 46.078423][ T31] usb 2-1: device descriptor read/8, error -71 [ 46.137326][ T10] usb usb5-port1: unable to enumerate USB device [ 46.217063][ T65] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 46.317161][ T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 46.338332][ T31] usb 2-1: device descriptor read/8, error -71 [ 46.357100][ T65] usb 1-1: device descriptor read/64, error -71 [ 46.468713][ T31] usb 2-1: device descriptor read/8, error -71 [ 46.572350][ T732] FAULT_INJECTION: forcing a failure. [ 46.572350][ T732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.589249][ T732] CPU: 1 UID: 0 PID: 732 Comm: syz.4.124 Not tainted syzkaller #0 f9bdc9161095fb91188de70574256d407725efc9 [ 46.589279][ T732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 46.589289][ T732] Call Trace: [ 46.589296][ T732] [ 46.589305][ T732] __dump_stack+0x21/0x30 [ 46.589327][ T732] dump_stack_lvl+0x140/0x1c0 [ 46.589340][ T732] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.589353][ T732] ? lruvec_init+0x1a1/0x280 [ 46.589369][ T732] dump_stack+0x19/0x20 [ 46.589381][ T732] should_fail_ex+0x3d7/0x530 [ 46.589394][ T732] should_fail+0xf/0x20 [ 46.589406][ T732] should_fail_usercopy+0x1e/0x30 [ 46.589419][ T732] _copy_from_iter+0x56b/0x1510 [ 46.589436][ T732] ? __cfi__copy_from_iter+0x10/0x10 [ 46.589450][ T732] ? __check_object_size+0x527/0x830 [ 46.589464][ T732] ? __cfi___check_object_size+0x10/0x10 [ 46.589477][ T732] ? skb_page_frag_refill+0x22e/0x4f0 [ 46.589494][ T732] ? sk_page_frag_refill+0x5d/0x120 [ 46.589508][ T732] tcp_sendmsg_locked+0x1fc5/0x4b40 [ 46.589527][ T732] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 46.589541][ T732] ? __cfi_tcp_sendmsg+0x10/0x10 [ 46.589554][ T732] tcp_sendmsg+0x3e/0xd0 [ 46.589566][ T732] ? __cfi_tcp_sendmsg+0x10/0x10 [ 46.589579][ T732] inet_sendmsg+0xb7/0x120 [ 46.589589][ T732] ____sys_sendmsg+0x8ac/0xae0 [ 46.589604][ T732] ? __import_iovec+0x3ef/0x7c0 [ 46.589614][ T732] ? __sys_sendmsg_sock+0x50/0x50 [ 46.589628][ T732] ? import_iovec+0x80/0xb0 [ 46.589638][ T732] ___sys_sendmsg+0x2a6/0x370 [ 46.589652][ T732] ? __sys_sendmsg+0x2a0/0x2a0 [ 46.589666][ T732] ? kstrtouint+0x78/0xf0 [ 46.589680][ T732] __sys_sendmmsg+0x2b4/0x4e0 [ 46.589695][ T732] ? __cfi___sys_sendmmsg+0x10/0x10 [ 46.589711][ T732] ? __cfi_ksys_write+0x10/0x10 [ 46.589725][ T732] __x64_sys_sendmmsg+0xa4/0xc0 [ 46.589739][ T732] x64_sys_call+0xfec/0x2ee0 [ 46.589753][ T732] do_syscall_64+0x57/0xf0 [ 46.589768][ T732] ? clear_bhb_loop+0x50/0xa0 [ 46.589778][ T732] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.589793][ T732] RIP: 0033:0x7f6e9b39c819 [ 46.589804][ T732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.589812][ T732] RSP: 002b:00007f6e9c304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.589825][ T732] RAX: ffffffffffffffda RBX: 00007f6e9b615fa0 RCX: 00007f6e9b39c819 [ 46.589833][ T732] RDX: 0000000000000001 RSI: 0000200000001740 RDI: 0000000000000003 [ 46.589840][ T732] RBP: 00007f6e9c304090 R08: 0000000000000000 R09: 0000000000000000 [ 46.589847][ T732] R10: 0000000000002090 R11: 0000000000000246 R12: 0000000000000001 [ 46.589853][ T732] R13: 00007f6e9b616038 R14: 00007f6e9b615fa0 R15: 00007ffc7f16c938 [ 46.589862][ T732] [ 46.590558][ T31] usb usb2-port1: unable to enumerate USB device [ 46.787079][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 46.818669][ T65] usb 1-1: device descriptor read/64, error -71 [ 47.027264][ T65] usb usb1-port1: attempt power cycle [ 47.039830][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 47.049981][ T10] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 47.058483][ T10] usb 4-1: Product: syz [ 47.063496][ T10] usb 4-1: config 0 descriptor?? [ 47.070528][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 47.079320][ T10] usb 4-1: Detected FT232H [ 47.217174][ T406] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 47.271714][ T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.282429][ T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.300219][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 47.312950][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 47.320835][ T10] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 47.328564][ T375] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.337530][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.348467][ T10] usb 4-1: USB disconnect, device number 12 [ 47.355808][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 47.366131][ T10] ftdi_sio 4-1:0.0: device disconnected [ 47.375021][ T65] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 47.397065][ T406] usb 5-1: Using ep0 maxpacket: 8 [ 47.404171][ T406] usb 5-1: unable to get BOS descriptor or descriptor too short [ 47.413039][ T406] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 47.424071][ T65] usb 1-1: device descriptor read/8, error -71 [ 47.427056][ T748] netlink: 5 bytes leftover after parsing attributes in process `syz.3.130'. [ 47.433101][ T406] usb 5-1: string descriptor 0 read error: -22 [ 47.446425][ T406] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 47.456298][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.519398][ T375] usb 2-1: config index 0 descriptor too short (expected 24929, got 36) [ 47.528588][ T375] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 47.538670][ T375] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 47.549862][ T375] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 47.560103][ T375] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.568304][ T65] usb 1-1: device descriptor read/8, error -71 [ 47.569855][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.666533][ T406] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 47.678331][ T406] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 47.690879][ T406] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 47.702502][ T406] usb 5-1: USB disconnect, device number 9 [ 47.767239][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 47.792043][ T740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.802085][ T740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.811217][ T31] usb 2-1: USB disconnect, device number 11 [ 47.817932][ T65] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 47.849033][ T65] usb 1-1: device descriptor read/8, error -71 [ 47.917067][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 47.924219][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.936750][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.949279][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.959204][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.968191][ T10] usb 4-1: Product: syz [ 47.972903][ T10] usb 4-1: Manufacturer: syz [ 47.978691][ T10] usb 4-1: SerialNumber: syz [ 47.989332][ T65] usb 1-1: device descriptor read/8, error -71 [ 48.107179][ T65] usb usb1-port1: unable to enumerate USB device [ 48.187672][ T10] usb 4-1: 0:2 : does not exist [ 48.195606][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 48.208667][ T10] usb 4-1: USB disconnect, device number 13 [ 48.218382][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.247159][ T375] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 48.389980][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 48.389992][ T36] audit: type=1400 audit(1775882796.699:259): avc: denied { listen } for pid=756 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.398543][ T375] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 48.426802][ T375] usb 2-1: config 0 has no interface number 0 [ 48.427098][ T65] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 48.433529][ T375] usb 2-1: config 0 interface 8 has no altsetting 0 [ 48.448731][ T375] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 48.458396][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.468231][ T375] usb 2-1: config 0 descriptor?? [ 48.475400][ T757] tipc: Can't bind to reserved service type 2 [ 48.599291][ T761] netlink: 148 bytes leftover after parsing attributes in process `syz.0.134'. [ 48.611571][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 48.618490][ T761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 48.629409][ T761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 48.639624][ T65] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.652206][ T65] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.664664][ T65] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 48.685022][ T36] audit: type=1400 audit(1775882796.989:260): avc: denied { read } for pid=739 comm="syz.1.128" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.728995][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.736268][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 48.747195][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.760246][ T767] syzkaller1: entered promiscuous mode [ 48.766759][ T767] syzkaller1: entered allmulticast mode [ 48.774415][ T36] audit: type=1400 audit(1775882797.079:261): avc: denied { getopt } for pid=765 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.802539][ T65] usb 5-1: config 0 descriptor?? [ 48.941531][ T375] logitech-djreceiver 0003:046D:C534.0006: unknown main item tag 0x2 [ 48.957254][ T375] logitech-djreceiver 0003:046D:C534.0006: item fetching failed at offset 3/5 [ 48.972375][ T375] logitech-djreceiver 0003:046D:C534.0006: logi_dj_probe: parse failed [ 48.981670][ T375] logitech-djreceiver 0003:046D:C534.0006: probe with driver logitech-djreceiver failed with error -22 [ 49.043455][ T36] audit: type=1400 audit(1775882797.349:262): avc: denied { ioctl } for pid=778 comm="syz.0.140" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 49.106183][ T36] audit: type=1400 audit(1775882797.409:263): avc: denied { read } for pid=780 comm="syz.0.141" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.133026][ T36] audit: type=1400 audit(1775882797.409:264): avc: denied { open } for pid=780 comm="syz.0.141" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.157589][ T10] usb 2-1: USB disconnect, device number 12 [ 49.197264][ T307] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 49.218534][ T750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.228578][ T750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.241616][ T65] hid (null): unknown global tag 0xc [ 49.248666][ T65] hid (null): unknown global tag 0xe [ 49.255128][ T65] hid (null): unknown global tag 0xe [ 49.263852][ T65] hid (null): unknown global tag 0xd [ 49.272979][ T65] hid (null): invalid report_count 1091471284 [ 49.281210][ T65] hid (null): unknown global tag 0xc [ 49.288450][ T65] hid (null): invalid report_size 21983 [ 49.295248][ T65] hid (null): global environment stack overflow [ 49.302319][ T65] hid (null): invalid report_size 53870 [ 49.337200][ T375] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 49.348349][ T307] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 49.360356][ T307] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 49.373061][ T307] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 49.385466][ T307] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 49.395530][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.405782][ T777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 49.438605][ T750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.447592][ T750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.460843][ T65] usb 5-1: USB disconnect, device number 10 [ 49.481132][ T375] usb 1-1: device descriptor read/64, error -71 [ 49.506915][ T788] capability: warning: `syz.4.143' uses 32-bit capabilities (legacy support in use) [ 49.519299][ T36] audit: type=1400 audit(1775882797.829:265): avc: denied { read append } for pid=787 comm="syz.4.143" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.544431][ T36] audit: type=1326 audit(1775882797.849:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.4.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b39c819 code=0x0 [ 49.580162][ T36] audit: type=1400 audit(1775882797.889:267): avc: denied { read } for pid=803 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.616387][ T777] netlink: 104 bytes leftover after parsing attributes in process `syz.3.139'. [ 49.627411][ T307] usb 4-1: string descriptor 0 read error: -71 [ 49.634217][ T307] hub 4-1:32.0: bad descriptor, ignoring hub [ 49.641108][ T307] hub 4-1:32.0: probe with driver hub failed with error -5 [ 49.667598][ T307] usb 4-1: USB disconnect, device number 14 [ 49.710705][ T36] audit: type=1400 audit(1775882798.019:268): avc: denied { append } for pid=810 comm="syz.1.146" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.711371][ T811] input: syz0 as /devices/virtual/input/input7 [ 49.738500][ T375] usb 1-1: device descriptor read/64, error -71 [ 49.771203][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 49.897278][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 49.987190][ T375] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 50.037202][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.127109][ T375] usb 1-1: device descriptor read/64, error -71 [ 50.267104][ T65] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 50.287096][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.367073][ T375] usb 1-1: device descriptor read/64, error -71 [ 50.407096][ T65] usb 2-1: device descriptor read/64, error -71 [ 50.477188][ T375] usb usb1-port1: attempt power cycle [ 50.527057][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 50.647033][ T65] usb 2-1: device descriptor read/64, error -71 [ 50.657056][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.817137][ T375] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 50.838559][ T375] usb 1-1: device descriptor read/8, error -71 [ 50.887218][ T65] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 50.907082][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.978509][ T375] usb 1-1: device descriptor read/8, error -71 [ 51.027041][ T65] usb 2-1: device descriptor read/64, error -71 [ 51.037941][ T10] usb usb5-port1: attempt power cycle [ 51.217095][ T375] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 51.248453][ T375] usb 1-1: device descriptor read/8, error -71 [ 51.267098][ T65] usb 2-1: device descriptor read/64, error -71 [ 51.277101][ T406] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 51.377225][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 51.387198][ T65] usb usb2-port1: attempt power cycle [ 51.388270][ T375] usb 1-1: device descriptor read/8, error -71 [ 51.402551][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.437088][ T406] usb 4-1: Using ep0 maxpacket: 16 [ 51.444721][ T406] usb 4-1: config 8 has an invalid interface number: 20 but max is 0 [ 51.453204][ T406] usb 4-1: config 8 has no interface number 0 [ 51.459846][ T406] usb 4-1: config 8 interface 20 has no altsetting 0 [ 51.468831][ T406] usb 4-1: New USB device found, idVendor=0403, idProduct=daf9, bcdDevice= 1.72 [ 51.478897][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.488019][ T406] usb 4-1: Product: syz [ 51.492223][ T406] usb 4-1: Manufacturer: syz [ 51.497260][ T406] usb 4-1: SerialNumber: syz [ 51.507236][ T375] usb usb1-port1: unable to enumerate USB device [ 51.538362][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.705429][ T406] ftdi_sio 4-1:8.20: FTDI USB Serial Device converter detected [ 51.714475][ T406] usb 4-1: Detected SIO [ 51.720307][ T406] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 51.731947][ T406] usb 4-1: USB disconnect, device number 15 [ 51.738897][ T65] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 51.749965][ T406] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 51.763038][ T406] ftdi_sio 4-1:8.20: device disconnected [ 51.770227][ T65] usb 2-1: device descriptor read/8, error -71 [ 51.797112][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 51.829128][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.908260][ T65] usb 2-1: device descriptor read/8, error -71 [ 51.958314][ T10] usb 5-1: device descriptor read/8, error -71 [ 52.067136][ T10] usb usb5-port1: unable to enumerate USB device [ 52.127698][ T844] netlink: 'syz.0.156': attribute type 4 has an invalid length. [ 52.136919][ T844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 52.147070][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 52.178463][ T65] usb 2-1: device descriptor read/8, error -71 [ 52.249549][ T848] netlink: 'syz.3.158': attribute type 21 has an invalid length. [ 52.261010][ T848] netlink: 388 bytes leftover after parsing attributes in process `syz.3.158'. [ 52.306799][ T852] netlink: 316 bytes leftover after parsing attributes in process `syz.3.160'. [ 52.321209][ T852] netlink: 316 bytes leftover after parsing attributes in process `syz.3.160'. [ 52.334961][ T65] usb 2-1: device descriptor read/8, error -71 [ 52.447101][ T65] usb usb2-port1: unable to enumerate USB device [ 52.507116][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 52.597029][ T307] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 52.657030][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 52.667552][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.682974][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.695693][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.706341][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.720712][ T31] usb 1-1: Product: syz [ 52.725552][ T31] usb 1-1: Manufacturer: syz [ 52.731115][ T31] usb 1-1: SerialNumber: syz [ 52.770196][ T307] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.786011][ T307] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.799139][ T307] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 52.813708][ T307] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 52.825620][ T307] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 52.834533][ T307] usb 4-1: Manufacturer: syz [ 52.842225][ T854] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 52.944436][ T31] usb 1-1: 0:2 : does not exist [ 52.952658][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 52.966939][ T31] usb 1-1: USB disconnect, device number 17 [ 52.978005][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.667293][ T307] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 53.675179][ T307] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input8 [ 53.686762][ T307] usb 4-1: USB disconnect, device number 16 [ 53.686806][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 53.707050][ T375] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 53.837055][ T375] usb 1-1: device descriptor read/64, error -71 [ 53.881870][ T878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=878 comm=syz.4.170 [ 53.896910][ T878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=878 comm=syz.4.170 [ 53.954286][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 54.000261][ T885] tmpfs: Unknown parameter 'nMnodes' [ 54.038558][ T887] overlayfs: failed to resolve './file0': -2 [ 54.097105][ T10] usb 2-1: device descriptor read/64, error -71 [ 54.105217][ T375] usb 1-1: device descriptor read/64, error -71 [ 54.119693][ T891] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 54.148621][ T891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 54.298415][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 54.298432][ T36] audit: type=1400 audit(1775882802.609:278): avc: denied { create } for pid=897 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 54.334101][ T36] audit: type=1400 audit(1775882802.639:279): avc: denied { map } for pid=899 comm="syz.3.178" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.360185][ T10] usb 2-1: device descriptor read/64, error -71 [ 54.367124][ T375] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 54.497087][ T375] usb 1-1: device descriptor read/64, error -71 [ 54.567106][ T65] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 54.607116][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 54.718272][ T65] usb 4-1: config 1 has an invalid interface number: 29 but max is 0 [ 54.726916][ T65] usb 4-1: config 1 has no interface number 0 [ 54.733264][ T65] usb 4-1: config 1 interface 29 has no altsetting 0 [ 54.742399][ T65] usb 4-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.14 [ 54.752376][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.757046][ T10] usb 2-1: device descriptor read/64, error -71 [ 54.760748][ T65] usb 4-1: Product: syz [ 54.767446][ T375] usb 1-1: device descriptor read/64, error -71 [ 54.777568][ T65] usb 4-1: Manufacturer: syz [ 54.788027][ T65] usb 4-1: SerialNumber: syz [ 54.887183][ T375] usb usb1-port1: attempt power cycle [ 54.995339][ T904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.004834][ T904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.015051][ T65] ums-datafab 4-1:1.29: USB Mass Storage device detected [ 55.017149][ T10] usb 2-1: device descriptor read/64, error -71 [ 55.080054][ T65] usb 4-1: USB disconnect, device number 17 [ 55.137168][ T10] usb usb2-port1: attempt power cycle [ 55.227063][ T375] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 55.248845][ T375] usb 1-1: device descriptor read/8, error -71 [ 55.378334][ T375] usb 1-1: device descriptor read/8, error -71 [ 55.477032][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 55.498256][ T10] usb 2-1: device descriptor read/8, error -71 [ 55.628217][ T375] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 55.633322][ T36] audit: type=1400 audit(1775882803.939:280): avc: denied { remount } for pid=913 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 55.665013][ T10] usb 2-1: device descriptor read/8, error -71 [ 55.672460][ T375] usb 1-1: device descriptor read/8, error -71 [ 55.782767][ T937] capability: warning: `syz.4.190' uses deprecated v2 capabilities in a way that may be insecure [ 55.794852][ T36] audit: type=1401 audit(1775882804.109:281): op=fscreate invalid_context=CFA7AE [ 55.818086][ T375] usb 1-1: device descriptor read/8, error -71 [ 55.909292][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 55.927194][ T375] usb usb1-port1: unable to enumerate USB device [ 55.938132][ T10] usb 2-1: device descriptor read/8, error -71 [ 55.947020][ T65] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 56.068256][ T10] usb 2-1: device descriptor read/8, error -71 [ 56.077030][ T65] usb 4-1: device descriptor read/64, error -71 [ 56.177257][ T10] usb usb2-port1: unable to enumerate USB device [ 56.317043][ T65] usb 4-1: device descriptor read/64, error -71 [ 56.499493][ T945] netlink: 'syz.0.192': attribute type 27 has an invalid length. [ 56.517018][ T36] audit: type=1400 audit(1775882804.799:282): avc: denied { create } for pid=944 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 56.569474][ T36] audit: type=1400 audit(1775882804.809:283): avc: denied { write } for pid=944 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 56.577060][ T65] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 56.604970][ T36] audit: type=1400 audit(1775882804.909:284): avc: denied { setopt } for pid=951 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.652629][ T36] audit: type=1400 audit(1775882804.949:285): avc: denied { search } for pid=953 comm="syz.1.196" name="/" dev="configfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.737030][ T65] usb 4-1: device descriptor read/64, error -71 [ 56.781245][ T36] audit: type=1400 audit(1775882805.089:286): avc: denied { getopt } for pid=960 comm="syz.4.199" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.821734][ T971] netlink: 9 bytes leftover after parsing attributes in process `syz.4.201'. [ 56.833416][ T971] gretap0: entered promiscuous mode [ 56.841816][ T36] audit: type=1400 audit(1775882805.149:287): avc: denied { setopt } for pid=970 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.853240][ T972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.201'. [ 56.997115][ T65] usb 4-1: device descriptor read/64, error -71 [ 57.007111][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 57.107284][ T65] usb usb4-port1: attempt power cycle [ 57.137361][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 57.157103][ T630] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 57.187067][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 57.193464][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.205125][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.215625][ T10] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 57.230576][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 57.237579][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 57.247108][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.257935][ T10] usb 2-1: config 0 descriptor?? [ 57.307083][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 57.313996][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.323729][ T31] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 57.327074][ T630] usb 1-1: Using ep0 maxpacket: 16 [ 57.332667][ T31] usb 5-1: config 0 has no interface number 0 [ 57.339507][ T630] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.344656][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 57.358089][ T630] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.369835][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 57.382670][ T630] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 57.393592][ T31] usb 5-1: config 0 interface 88 has no altsetting 0 [ 57.407327][ T630] usb 1-1: config 0 interface 0 has no altsetting 0 [ 57.417279][ T31] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 57.421780][ T630] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 57.431386][ T31] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 57.440756][ T630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.449264][ T31] usb 5-1: Product: syz [ 57.462106][ T31] usb 5-1: SerialNumber: syz [ 57.465649][ T630] usb 1-1: config 0 descriptor?? [ 57.467034][ T65] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 57.480875][ T31] usb 5-1: config 0 descriptor?? [ 57.498149][ T65] usb 4-1: device descriptor read/8, error -71 [ 57.628434][ T65] usb 4-1: device descriptor read/8, error -71 [ 57.682244][ T10] hid (null): invalid report_count 438683788 [ 57.689225][ T10] hid (null): invalid report_size 8049 [ 57.689705][ T31] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input9 [ 57.695125][ T10] hid (null): unknown global tag 0xe [ 57.710249][ T31] usb 5-1: USB disconnect, device number 16 [ 57.714578][ T10] hid (null): unknown global tag 0xd [ 57.724095][ T10] hid (null): invalid report_count 46221 [ 57.731482][ T10] hid (null): unknown global tag 0xc [ 57.743315][ T310] udevd[310]: Error opening device "/dev/input/event3": No such file or directory [ 57.762151][ T310] udevd[310]: Unable to EVIOCGABS device "/dev/input/event3" [ 57.770514][ T310] udevd[310]: Unable to EVIOCGABS device "/dev/input/event3" [ 57.867122][ T65] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 57.876308][ T630] zeroplus 0003:0C12:0030.0009: ignoring exceeding usage max [ 57.888345][ T630] zeroplus 0003:0C12:0030.0009: unknown main item tag 0xd [ 57.893589][ T340] usb 2-1: USB disconnect, device number 21 [ 57.896302][ T630] zeroplus 0003:0C12:0030.0009: unknown main item tag 0x5 [ 57.896363][ T630] zeroplus 0003:0C12:0030.0009: unknown main item tag 0xd [ 57.906597][ T65] usb 4-1: device descriptor read/8, error -71 [ 57.910810][ T630] zeroplus 0003:0C12:0030.0009: unknown main item tag 0x5 [ 57.933468][ T630] zeroplus 0003:0C12:0030.0009: global environment stack underflow [ 57.942228][ T630] zeroplus 0003:0C12:0030.0009: item 0 2 1 11 parsing failed [ 57.950669][ T630] zeroplus 0003:0C12:0030.0009: parse failed [ 57.956859][ T630] zeroplus 0003:0C12:0030.0009: probe with driver zeroplus failed with error -22 [ 58.048391][ T65] usb 4-1: device descriptor read/8, error -71 [ 58.083923][ T340] usb 1-1: USB disconnect, device number 22 [ 58.157331][ T65] usb usb4-port1: unable to enumerate USB device [ 58.602378][ T989] netlink: 'syz.0.208': attribute type 27 has an invalid length. [ 58.640665][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.649086][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.789408][ T1013] ======================================================= [ 58.789408][ T1013] WARNING: The mand mount option has been deprecated and [ 58.789408][ T1013] and is ignored by this kernel. Remove the mand [ 58.789408][ T1013] option from the mount to silence this warning. [ 58.789408][ T1013] ======================================================= [ 58.852254][ T1022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.215'. [ 58.887029][ T994] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 59.047150][ T994] usb 2-1: Using ep0 maxpacket: 16 [ 59.053028][ T994] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 59.069219][ T994] usb 2-1: string descriptor 0 read error: -71 [ 59.075800][ T994] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 59.086599][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.099735][ T994] r8152-cfgselector 2-1: Unknown version 0x0000 [ 59.106570][ T994] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 59.118168][ T994] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 59.127707][ T994] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 59.137044][ T1003] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 59.247232][ T992] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 59.297101][ T1003] usb 1-1: Using ep0 maxpacket: 32 [ 59.303946][ T1003] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 59.313296][ T1003] usb 1-1: config 0 has no interface number 0 [ 59.319904][ T1003] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 59.330809][ T1003] usb 1-1: config 0 interface 196 has no altsetting 0 [ 59.341653][ T1003] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 59.351637][ T1003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.360764][ T1003] usb 1-1: Product: syz [ 59.365094][ T1003] usb 1-1: Manufacturer: syz [ 59.370457][ T1003] usb 1-1: SerialNumber: syz [ 59.376311][ T1003] usb 1-1: config 0 descriptor?? [ 59.383026][ T1026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 59.408736][ T992] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 59.417335][ T992] usb 5-1: can't read configurations, error -22 [ 59.467124][ T1005] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 59.547303][ T992] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 59.614344][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 59.614362][ T36] audit: type=1400 audit(1775882807.919:294): avc: denied { name_bind } for pid=1036 comm="syz.1.222" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 59.644414][ T1005] usb 4-1: Using ep0 maxpacket: 16 [ 59.653277][ T1005] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.653345][ T36] audit: type=1400 audit(1775882807.959:295): avc: denied { map } for pid=1038 comm="syz.1.223" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.666283][ T1005] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.703451][ T1005] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 59.719291][ T1005] usb 4-1: config 0 interface 0 has no altsetting 0 [ 59.720203][ T992] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 59.726823][ T1005] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 59.736895][ T992] usb 5-1: can't read configurations, error -22 [ 59.746090][ T1005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.752748][ T36] audit: type=1400 audit(1775882808.059:296): avc: denied { read write } for pid=1042 comm="syz.1.224" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.762143][ T1005] usb 4-1: config 0 descriptor?? [ 59.794561][ T992] usb usb5-port1: attempt power cycle [ 59.802837][ T36] audit: type=1400 audit(1775882808.059:297): avc: denied { open } for pid=1042 comm="syz.1.224" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.024334][ T1052] overlayfs: conflicting lowerdir path [ 60.049860][ T1005] usbhid 4-1:0.0: can't add hid device: -71 [ 60.056691][ T1005] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 60.065858][ T36] audit: type=1400 audit(1775882808.369:298): avc: denied { write } for pid=1053 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.081243][ T36] audit: type=1400 audit(1775882808.389:299): avc: denied { ioctl } for pid=1053 comm="syz.3.226" path="socket:[8390]" dev="sockfs" ino=8390 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.092290][ T1005] usb 4-1: USB disconnect, device number 22 [ 60.125595][ T36] audit: type=1400 audit(1775882808.429:300): avc: denied { read } for pid=1053 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.137583][ T992] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 60.205970][ T1003] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 60.217984][ T1003] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 60.232911][ T992] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 60.241927][ T992] usb 5-1: can't read configurations, error -22 [ 60.377274][ T992] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 60.409544][ T992] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 60.418573][ T992] usb 5-1: can't read configurations, error -22 [ 60.419639][ T1003] usb 1-1: USB disconnect, device number 23 [ 60.425328][ T992] usb usb5-port1: unable to enumerate USB device [ 60.477628][ T1003] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 60.547057][ T1005] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 60.708361][ T1005] usb 4-1: config 0 has no interfaces? [ 60.717548][ T1005] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 60.728049][ T1005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.736620][ T1005] usb 4-1: SerialNumber: syz [ 60.743486][ T1005] usb 4-1: config 0 descriptor?? [ 60.951645][ T1064] loop6: detected capacity change from 0 to 8 [ 61.037076][ T992] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 61.041114][ T1093] loop6: detected capacity change from 8 to 0 [ 61.057122][ T1005] usb 4-1: USB disconnect, device number 23 [ 61.187149][ T995] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 61.198998][ T992] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 61.209113][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 61.224249][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 61.239493][ T992] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.250383][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.260511][ T992] usb 2-1: Product: syz [ 61.265323][ T992] usb 2-1: Manufacturer: syz [ 61.271331][ T992] usb 2-1: SerialNumber: syz [ 61.277434][ T992] usb 2-1: config 0 descriptor?? [ 61.285122][ T992] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 61.327114][ T995] usb 1-1: device descriptor read/64, error -71 [ 61.487638][ T992] usb 2-1: USB disconnect, device number 23 [ 61.577100][ T995] usb 1-1: device descriptor read/64, error -71 [ 61.817117][ T995] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 61.957101][ T995] usb 1-1: device descriptor read/64, error -71 [ 61.967251][ T992] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 61.998520][ T1100] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=1100 comm=syz.1.234 [ 62.012599][ T36] audit: type=1400 audit(1775882810.319:301): avc: denied { mounton } for pid=1099 comm="syz.1.234" path="/46/file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.117504][ T36] audit: type=1400 audit(1775882810.429:302): avc: denied { map } for pid=1111 comm="syz.1.238" path="socket:[7656]" dev="sockfs" ino=7656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.127069][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 62.173769][ T992] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 62.188539][ T1120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1120 comm=syz.4.241 [ 62.204639][ T992] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 62.214645][ T992] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 62.225544][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.229404][ T36] audit: type=1400 audit(1775882810.539:303): avc: denied { mount } for pid=1119 comm="syz.4.241" name="/" dev="ramfs" ino=7745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.238520][ T995] usb 1-1: device descriptor read/64, error -71 [ 62.280167][ T992] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.293593][ T992] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.310525][ T992] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 62.321081][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.331927][ T992] usb 4-1: config 0 descriptor?? [ 62.417206][ T995] usb usb1-port1: attempt power cycle [ 62.496809][ T1128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=1128 comm=syz.4.242 [ 62.534152][ T1131] netlink: 'syz.1.243': attribute type 25 has an invalid length. [ 62.556221][ T992] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 62.584510][ T992] usb 4-1: USB disconnect, device number 24 [ 62.598593][ T992] usblp0: removed [ 62.700142][ T1135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1135 comm=syz.4.244 [ 62.718202][ T1135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1135 comm=syz.4.244 [ 62.777166][ T995] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 62.807110][ T1005] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 62.808444][ T995] usb 1-1: device descriptor read/8, error -71 [ 62.948357][ T995] usb 1-1: device descriptor read/8, error -71 [ 62.968468][ T1005] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.981137][ T1005] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 62.995326][ T1005] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.007007][ T1005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.016668][ T1005] usb 2-1: Product: syz [ 63.021485][ T1005] usb 2-1: Manufacturer: syz [ 63.026468][ T1005] usb 2-1: SerialNumber: syz [ 63.034299][ T1005] cdc_mbim 2-1:1.0: skipping garbage [ 63.057240][ T992] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 63.197084][ T995] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 63.217075][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 63.224015][ T995] usb 1-1: device descriptor read/8, error -71 [ 63.231727][ T992] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.234082][ T1131] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.241180][ T992] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.258868][ T992] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.269945][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.283348][ T992] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.295814][ T992] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.310282][ T992] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.320176][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.329018][ T992] usb 4-1: config 0 descriptor?? [ 63.368252][ T995] usb 1-1: device descriptor read/8, error -71 [ 63.477134][ T995] usb usb1-port1: unable to enumerate USB device [ 63.537132][ T992] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.853380][ T1131] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.861941][ T1005] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 64.065693][ T1005] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 64.074536][ T1005] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 64.084189][ T1148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 64.087226][ T1005] wwan wwan0: port wwan0mbim0 attached [ 64.101128][ T1005] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 3e:84:b6:33:45:8c [ 64.247894][ T149] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 64.268902][ T1005] usb 2-1: USB disconnect, device number 24 [ 64.277605][ T1005] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 64.327083][ T992] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 64.357036][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 64.371783][ T1005] wwan wwan0: port wwan0mbim0 disconnected [ 64.511060][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.521064][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 64.532602][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 64.548284][ T45] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 64.558887][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.567190][ T45] usb 1-1: Product: syz [ 64.571642][ T45] usb 1-1: Manufacturer: syz [ 64.576657][ T45] usb 1-1: SerialNumber: syz [ 64.788682][ T45] usb 1-1: Can't get UAC3 power state for id 10 [ 64.807655][ T45] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 64.818128][ T45] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 64.832228][ T45] usb 1-1: USB disconnect, device number 28 [ 64.846132][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.872711][ T1003] usb 4-1: USB disconnect, device number 25 [ 64.880357][ T1003] usblp0: removed [ 64.910395][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 64.910413][ T36] audit: type=1400 audit(1775882813.219:308): avc: denied { create } for pid=1196 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 64.946850][ T36] audit: type=1400 audit(1775882813.249:309): avc: denied { sys_admin } for pid=1196 comm="syz.3.250" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 65.173714][ T36] audit: type=1400 audit(1775882813.479:310): avc: denied { ioctl } for pid=1207 comm="syz.4.255" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.177067][ T995] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 65.497061][ T995] usb 2-1: Using ep0 maxpacket: 32 [ 65.504772][ T995] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 65.514037][ T995] usb 2-1: config 2 has no interface number 0 [ 65.521992][ T995] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 65.534741][ T995] usb 2-1: config 2 interface 88 has no altsetting 0 [ 65.546156][ T995] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 65.562765][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.576837][ T995] usb 2-1: Product: syz [ 65.583239][ T995] usb 2-1: Manufacturer: syz [ 65.587905][ T1003] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 65.590262][ T995] usb 2-1: SerialNumber: syz [ 65.628405][ T1195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 65.757085][ T1003] usb 1-1: Using ep0 maxpacket: 8 [ 65.766145][ T1003] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 65.777521][ T1003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.786832][ T1003] usb 1-1: Product: syz [ 65.792052][ T1003] usb 1-1: Manufacturer: syz [ 65.796764][ T1003] usb 1-1: SerialNumber: syz [ 65.845572][ T1195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.007798][ T1003] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 66.049669][ T1003] usb 1-1: USB disconnect, device number 29 [ 66.288900][ T1222] 9pnet_fd: p9_fd_create_tcp (1222): problem connecting socket to 127.0.0.1 [ 66.456196][ T1195] netlink: 'syz.1.251': attribute type 6 has an invalid length. [ 66.677229][ T1195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.686026][ T1195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.777039][ T992] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 66.847129][ T1003] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 66.939220][ T992] usb 1-1: not running at top speed; connect to a high speed hub [ 66.948060][ T995] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 66.958966][ T995] asix 2-1:2.88: probe with driver asix failed with error -71 [ 66.967424][ T992] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 66.981407][ T995] usb 2-1: USB disconnect, device number 25 [ 66.989922][ T992] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.000887][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.010472][ T992] usb 1-1: Product: 幄勸꟧ఢᅎ凷킞豭ꡟጡຑ尺∤ [ 67.018718][ T992] usb 1-1: Manufacturer: 䆏ᓻ␀㢒䷷ꖯ汶䘎鯺堹릷욣浬붩庬挋ⲇ놅ᦄ᧥훕缸Ѵ簃묩鰴廴廢功ធ獮掳〕Ь萭㵟䛄ㅻﰴꢢ퓕⹋戲椨䏀㎹岗雕踔迉ἅٛ醑䕹내ਮ愂峖턉幟翏쪇繚㽳㪸፜嗓赝⥰锆ꕂ〗곧㨉섖흴稴ኮ␅禫䵣맴糣靄뀧벴券젂⹏笰忁ᄄ [ 67.019567][ T1003] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.062672][ T992] usb 1-1: SerialNumber: 궘뾻蕩⯣绚୮㖞桥瀾ꌪ抠拶綐䚛翶з暶촩ᚈ糬剄얹葙뎻闅ﰛ薐搆᥽蛇ጞ鐾ꆯ蒙⸷闭ሲ숴䬪兜ܱ⭡ࠤ͹ۘ䍭磁乲㲿곐뾍럋髺廐ⓜ䬎뙇Ἁⅹ㗥厃ᴗ㡜㯂㑤섧अ󃑌줂巑託鐡至⃈䣁誺免í鬮䥙吒䰈뙍䣟和㯧炊瓵쀰Ú┡駼㐆 [ 67.100846][ T1003] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.111133][ T1003] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.128913][ T1003] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.140858][ T1003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.152640][ T1003] usb 5-1: Product: syz [ 67.158921][ T1003] usb 5-1: Manufacturer: syz [ 67.164694][ T1003] usb 5-1: SerialNumber: syz [ 67.172561][ T1003] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 67.181278][ T1003] cdc_ncm 5-1:1.0: bind() failure [ 67.203464][ T36] audit: type=1400 audit(1775882815.509:311): avc: denied { module_load } for pid=1245 comm="syz.3.266" path="/71/file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 67.203499][ T1246] Invalid ELF header len 6 [ 67.376679][ T1005] usb 5-1: USB disconnect, device number 22 [ 67.501585][ T1230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.512984][ T1230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.528589][ T992] cdc_ncm 1-1:1.0: bind() failure [ 67.534928][ T992] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 67.555735][ T992] cdc_ncm 1-1:1.1: bind() failure [ 67.567285][ T992] usb 1-1: USB disconnect, device number 30 [ 67.731041][ T1280] fuse: Bad value for 'fd' [ 67.751939][ T1280] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 67.859277][ T1005] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 67.878085][ T1284] TCP: TCP_TX_DELAY enabled [ 68.061646][ T1286] overlayfs: failed to clone upperpath [ 68.079296][ T1005] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 68.091820][ T1005] usb 5-1: config 0 has no interface number 1 [ 68.111386][ T1005] usb 5-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 68.140277][ T1005] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 68.167594][ T1005] usb 5-1: config 0 interface 199 has no altsetting 0 [ 68.179070][ T1005] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 68.196525][ T1005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.224454][ T1005] usb 5-1: SerialNumber: syz [ 68.241003][ T1005] usb 5-1: config 0 descriptor?? [ 68.260868][ T1290] fuse: Bad value for 'fd' [ 68.483230][ T36] audit: type=1400 audit(1775882816.789:312): avc: denied { read } for pid=1291 comm="syz.1.277" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.519090][ T1005] usb 5-1: Found UVC 0.00 device (0002:0000) [ 68.526933][ T1005] usb 5-1: No valid video chain found. [ 68.570298][ T1005] usb 5-1: USB disconnect, device number 23 [ 68.577773][ T36] audit: type=1400 audit(1775882816.789:313): avc: denied { open } for pid=1291 comm="syz.1.277" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.827901][ T993] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 68.988675][ T993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.999836][ T993] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.010045][ T993] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.020284][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.028739][ T993] usb 2-1: SerialNumber: syz [ 69.117040][ T995] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 69.245323][ T993] usb 2-1: 0:2 : does not exist [ 69.265231][ T993] usb 2-1: USB disconnect, device number 26 [ 69.280155][ T995] usb 1-1: Using ep0 maxpacket: 32 [ 69.287343][ T995] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.297605][ T995] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 69.306613][ T995] usb 1-1: config 0 has no interface number 0 [ 69.314258][ T995] usb 1-1: config 0 interface 251 has no altsetting 0 [ 69.323428][ T995] usb 1-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 69.332668][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.341404][ T995] usb 1-1: Product: syz [ 69.347619][ T995] usb 1-1: Manufacturer: syz [ 69.352570][ T995] usb 1-1: SerialNumber: syz [ 69.358564][ T995] usb 1-1: config 0 descriptor?? [ 69.457060][ T1005] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 69.567740][ T1301] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 69.583502][ T1301] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 69.595498][ T1313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.605561][ T1313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.617467][ T1005] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.625756][ T995] usb 1-1: USB disconnect, device number 31 [ 69.629595][ T1005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.644311][ T1005] usb 5-1: Product: syz [ 69.648728][ T1005] usb 5-1: Manufacturer: syz [ 69.653977][ T1005] usb 5-1: SerialNumber: syz [ 69.664651][ T36] audit: type=1400 audit(1775882817.969:314): avc: denied { ioctl } for pid=1316 comm="syz.0.285" path="socket:[8955]" dev="sockfs" ino=8955 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.894997][ T1322] fuse: Bad value for 'fd' [ 69.987071][ T995] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 70.007075][ T45] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 70.138404][ T995] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 70.150641][ T995] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 70.165180][ T995] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 70.168558][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.175352][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.187739][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.197456][ T995] usb 1-1: Product: syz [ 70.210102][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 70.212414][ T995] usb 1-1: Manufacturer: syz [ 70.224200][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.229880][ T995] usb 1-1: SerialNumber: syz [ 70.238327][ T45] usb 2-1: Product: syz [ 70.248296][ T45] usb 2-1: Manufacturer: syz [ 70.253953][ T45] usb 2-1: SerialNumber: syz [ 70.451928][ T995] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 70.461572][ T995] usb 1-1: clock source 0 is not valid, cannot use [ 70.468810][ T995] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 70.476186][ T995] usb 1-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 70.490209][ T995] usb 1-1: USB disconnect, device number 32 [ 70.522924][ T45] usb 2-1: 0:1 : does not exist [ 70.528433][ T45] usb 2-1: unit 4 not found! [ 70.534075][ T45] usb 2-1: unit 0 not found! [ 70.544374][ T45] usb 2-1: USB disconnect, device number 27 [ 70.560882][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.583466][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.680003][ T36] audit: type=1400 audit(1775882818.989:315): avc: denied { accept } for pid=1304 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.009490][ T1005] cdc_ncm 5-1:1.0: bind() failure [ 71.026283][ T1005] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 71.037483][ T1005] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 71.049518][ T1005] usb 5-1: USB disconnect, device number 24 [ 71.196341][ T1334] : renamed from vlan0 (while UP) [ 71.457047][ T1005] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 71.486276][ T1359] random: crng reseeded on system resumption [ 71.486278][ T36] audit: type=1400 audit(1775882819.789:316): avc: denied { write } for pid=1358 comm="syz.4.302" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.526909][ T36] audit: type=1400 audit(1775882819.809:317): avc: denied { ioctl } for pid=1358 comm="syz.4.302" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.540518][ T1361] usb usb8: usbfs: process 1361 (syz.4.303) did not claim interface 0 before use [ 71.617254][ T1005] usb 2-1: device descriptor read/64, error -71 [ 71.867139][ T995] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 71.887061][ T1005] usb 2-1: device descriptor read/64, error -71 [ 72.018909][ T995] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.030640][ T995] usb 5-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 72.046381][ T995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.057615][ T995] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 72.067606][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.076256][ T995] usb 5-1: Product: syz [ 72.080879][ T995] usb 5-1: Manufacturer: syz [ 72.086121][ T995] usb 5-1: SerialNumber: syz [ 72.127143][ T1005] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 72.214291][ T36] audit: type=1326 audit(1775882820.519:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1344 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d659c819 code=0x7fc00000 [ 72.267134][ T1005] usb 2-1: device descriptor read/64, error -71 [ 72.294309][ T995] usb 5-1: 0:1 : does not exist [ 72.303082][ T995] usb 5-1: BAAD GENERIC IO: no channels? [ 72.307081][ T406] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 72.314016][ T995] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.333423][ T995] usb 5-1: USB disconnect, device number 25 [ 72.345456][ T1132] udevd[1132]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.467096][ T406] usb 1-1: Using ep0 maxpacket: 16 [ 72.475594][ T406] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 198, changing to 7 [ 72.487869][ T406] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 72.502187][ T406] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.511948][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.520098][ T1005] usb 2-1: device descriptor read/64, error -71 [ 72.527070][ T406] usb 1-1: Product: ꥢ氽侁쭠€䋨䗽⭦鮰㨹൙命鄸₦陽뺡衈ﱅ㥒팫꓉藠ᇉ渻뭞Ƴⓝ罿鲐礟忙ᣠ탡癓荡묎ඎႪ扼Ⲱ釀䛕ۊ转딃샠ྩꮉ餮 [ 72.546355][ T406] usb 1-1: Manufacturer: 湝損摰雬镧ђƓ縀ݎꑕ泇鰚찏∲瞦獽绠侷쉓岒鍐ᨔ藪⊭䘯壑獙ᔚ떣ύ鳎暶寈첡퍙㲓砷妼ㅙ쯵뤭餸鹻雿殀촺鈘쾙밥ጦ꿈㹯⮷逺嵡豧倉 [ 72.569278][ T406] usb 1-1: SerialNumber:   [ 72.637291][ T1005] usb usb2-port1: attempt power cycle [ 72.780337][ T1379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.790734][ T1379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.799982][ T36] audit: type=1400 audit(1775882821.109:319): avc: denied { read append } for pid=1378 comm="syz.0.309" name="ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 72.804559][ T406] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 72.828742][ T36] audit: type=1400 audit(1775882821.109:320): avc: denied { open } for pid=1378 comm="syz.0.309" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 72.837466][ T406] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 72.876193][ T406] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 72.901019][ T406] usb 1-1: USB disconnect, device number 33 [ 72.987024][ T1005] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 73.008326][ T1005] usb 2-1: device descriptor read/8, error -71 [ 73.023216][ T36] audit: type=1400 audit(1775882821.329:321): avc: denied { mounton } for pid=1398 comm="syz.3.317" path="/91/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 73.031589][ T1399] netlink: 'syz.3.317': attribute type 9 has an invalid length. [ 73.056113][ T1399] netlink: 'syz.3.317': attribute type 2 has an invalid length. [ 73.138285][ T1005] usb 2-1: device descriptor read/8, error -71 [ 73.187059][ T1003] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 73.337113][ T1003] usb 5-1: Using ep0 maxpacket: 32 [ 73.343980][ T1003] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 73.356002][ T1003] usb 5-1: config 0 interface 0 has no altsetting 0 [ 73.362988][ T1003] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 73.372620][ T1003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.381984][ T1005] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 73.390581][ T1003] usb 5-1: config 0 descriptor?? [ 73.408625][ T1005] usb 2-1: device descriptor read/8, error -71 [ 73.538355][ T1005] usb 2-1: device descriptor read/8, error -71 [ 73.647184][ T1005] usb usb2-port1: unable to enumerate USB device [ 73.805531][ T1391] netlink: 388 bytes leftover after parsing attributes in process `syz.4.314'. [ 73.816290][ T1391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.825622][ T1391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.834915][ T1003] hid (null): unknown global tag 0xc [ 73.840603][ T1003] hid (null): unknown global tag 0xc [ 73.846286][ T1003] hid (null): bogus close delimiter [ 73.853090][ T1003] uclogic 0003:28BD:0074.000A: interface is invalid, ignoring [ 74.058858][ T1003] usb 5-1: USB disconnect, device number 26 [ 74.281837][ T36] audit: type=1400 audit(1775882822.589:322): avc: denied { create } for pid=1437 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.317023][ T36] audit: type=1400 audit(1775882822.589:323): avc: denied { load_policy } for pid=1437 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 74.330463][ T1438] SELinux: failed to load policy [ 74.350141][ T1441] Invalid ELF header len 1 [ 74.495472][ T36] audit: type=1326 audit(1775882822.799:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1445 comm="syz.1.335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43eff9c819 code=0x0 [ 74.605560][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.617731][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.625696][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.635926][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.637183][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.644393][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.659029][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.667755][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.675540][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.683619][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.691879][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.700144][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.708644][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.717249][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.725540][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.733337][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.741543][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.749829][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.758034][ T1003] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 74.766608][ T1003] hid-generic 0003:0003:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 74.781110][ T1003] hid (null): invalid report_count 20487 [ 74.787550][ T1003] hid (null): unknown global tag 0x6f [ 74.793499][ T1003] hid (null): unknown global tag 0x63 [ 74.800967][ T1462] fido_id[1462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.823816][ T1003] hid (null): report_id 0 is invalid [ 74.830964][ T1003] hid-generic 0000:0003:5DA9.000C: unknown main item tag 0x1 [ 74.839835][ T406] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 74.848670][ T1003] hid-generic 0000:0003:5DA9.000C: invalid report_count 20487 [ 74.857892][ T1003] hid-generic 0000:0003:5DA9.000C: item 0 2 1 9 parsing failed [ 74.867427][ T1003] hid-generic 0000:0003:5DA9.000C: probe with driver hid-generic failed with error -22 [ 75.008170][ T406] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.021314][ T406] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 75.040412][ T406] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 75.058614][ T406] usb 2-1: New USB device found, idVendor=0525, idProduct=0010, bcdDevice= 0.40 [ 75.068448][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.077321][ T406] usb 2-1: SerialNumber: syz [ 75.294199][ T1003] usb 2-1: USB disconnect, device number 32 [ 75.391651][ T1500] syz.3.353 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.447101][ T406] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 75.600211][ T406] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 75.610290][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.621540][ T406] usb 1-1: Product: syz [ 75.626493][ T406] usb 1-1: Manufacturer: syz [ 75.631898][ T406] usb 1-1: SerialNumber: syz [ 75.638010][ T406] usb 1-1: config 0 descriptor?? [ 75.644442][ T406] hub 1-1:0.0: bad descriptor, ignoring hub [ 75.651058][ T406] hub 1-1:0.0: probe with driver hub failed with error -5 [ 75.818278][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 75.818298][ T36] audit: type=1326 audit(1775882824.129:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.1.354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43eff9c819 code=0x0 [ 75.851602][ T1473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.342'. [ 75.869610][ T36] audit: type=1326 audit(1775882824.179:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1501 comm="syz.1.354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43eff9c819 code=0x0 [ 75.967145][ T993] usb 1-1: USB disconnect, device number 34 [ 76.092370][ T36] audit: type=1400 audit(1775882824.399:330): avc: denied { accept } for pid=1508 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.144329][ T36] audit: type=1400 audit(1775882824.449:331): avc: denied { getopt } for pid=1508 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.246666][ T36] audit: type=1400 audit(1775882824.549:332): avc: denied { read } for pid=1512 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.697061][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.703586][ T1461] Bluetooth: hci0: command 0x1003 tx timeout [ 77.007004][ T36] audit: type=1400 audit(1775882825.279:333): avc: denied { associate } for pid=1536 comm="syz.3.366" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 77.177014][ T995] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 77.417813][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.436075][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.446419][ T995] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 77.456096][ T995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.465729][ T995] usb 2-1: config 0 descriptor?? [ 77.563604][ T36] audit: type=1400 audit(1775882825.869:334): avc: denied { create } for pid=1561 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.610688][ T36] audit: type=1400 audit(1775882825.919:335): avc: denied { bind } for pid=1570 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.617837][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 77.633023][ T36] audit: type=1400 audit(1775882825.929:336): avc: denied { setopt } for pid=1570 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.671423][ T1571] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 77.680571][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 77.690910][ T1571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 77.701636][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 77.711816][ T1571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 77.738675][ T36] audit: type=1400 audit(1775882826.049:337): avc: denied { mounton } for pid=1572 comm="syz.4.381" path="/101/file0" dev="tmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.773253][ T1573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 77.881819][ T995] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 77.892520][ T995] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 77.957036][ T995] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 77.966091][ T995] hid-steam 0003:28DE:1142.000D: No HID_FEATURE_REPORT submitted - nothing to read [ 77.980405][ T995] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 77.997114][ T995] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 78.217940][ T1592] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 78.335205][ T1611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.358344][ T1611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.369837][ T1617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1617 comm=syz.3.397 [ 78.382015][ T995] usb 2-1: USB disconnect, device number 33 [ 78.468334][ T995] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 78.667006][ T1003] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 78.837124][ T1003] usb 1-1: Using ep0 maxpacket: 32 [ 78.844091][ T1003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 78.855772][ T1003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.868087][ T1003] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 78.878497][ T995] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 78.880736][ T1003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 78.902436][ T1003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 78.918066][ T1003] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 78.928401][ T1003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.938085][ T1003] usb 1-1: Product: syz [ 78.942414][ T1003] usb 1-1: Manufacturer: syz [ 78.948130][ T1003] usb 1-1: SerialNumber: syz [ 78.953672][ T1003] usb 1-1: config 0 descriptor?? [ 78.961611][ T1003] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 78.966210][ T1643] overlayfs: failed to clone lowerpath [ 79.057122][ T995] usb 2-1: Using ep0 maxpacket: 16 [ 79.064493][ T995] usb 2-1: unable to get BOS descriptor set [ 79.071264][ T993] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 79.080969][ T995] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 79.089878][ T995] usb 2-1: can't read configurations, error -61 [ 79.227078][ T995] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 79.236652][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.248601][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.259367][ T993] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 79.269845][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.279734][ T993] usb 5-1: config 0 descriptor?? [ 79.377033][ T995] usb 2-1: Using ep0 maxpacket: 16 [ 79.383783][ T995] usb 2-1: unable to get BOS descriptor set [ 79.391714][ T995] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 79.401011][ T995] usb 2-1: can't read configurations, error -61 [ 79.407936][ T995] usb usb2-port1: attempt power cycle [ 79.495446][ T993] usbhid 5-1:0.0: can't add hid device: -71 [ 79.505435][ T993] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.519841][ T993] usb 5-1: USB disconnect, device number 27 [ 79.526670][ T1652] overlayfs: unescaped trailing colons in lowerdir mount option. [ 79.600449][ T1666] netlink: 'syz.4.416': attribute type 27 has an invalid length. [ 79.617650][ T1666] gretap0: left promiscuous mode [ 79.631882][ T1666] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.747037][ T995] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 79.767595][ T995] usb 2-1: Using ep0 maxpacket: 16 [ 79.774849][ T995] usb 2-1: unable to get BOS descriptor set [ 79.783609][ T995] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 79.792257][ T995] usb 2-1: can't read configurations, error -61 [ 79.927031][ T995] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 79.947464][ T995] usb 2-1: Using ep0 maxpacket: 16 [ 79.954334][ T995] usb 2-1: unable to get BOS descriptor set [ 79.962503][ T995] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 79.970881][ T995] usb 2-1: can't read configurations, error -61 [ 79.977378][ T995] usb usb2-port1: unable to enumerate USB device [ 80.208832][ T1688] overlayfs: failed to clone upperpath [ 80.235779][ T1692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1692 comm=syz.3.428 [ 80.900655][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 80.900673][ T36] audit: type=1400 audit(1775882829.209:346): avc: denied { ioctl } for pid=1711 comm="syz.3.436" path="socket:[11439]" dev="sockfs" ino=11439 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.947092][ T1003] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 80.968515][ T36] audit: type=1400 audit(1775882829.279:347): avc: denied { accept } for pid=1714 comm="syz.3.437" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.108369][ T1003] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 81.121004][ T1003] usb 5-1: config 0 has no interface number 0 [ 81.130008][ T1003] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 81.145124][ T1003] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 81.158621][ T1003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.170243][ T1003] usb 5-1: Product: syz [ 81.176316][ T1003] usb 5-1: Manufacturer: syz [ 81.182781][ T1003] usb 5-1: SerialNumber: syz [ 81.189080][ T1003] usb 5-1: config 0 descriptor?? [ 81.195876][ T1708] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 81.207782][ T1003] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 5e:ed:c0:39:3b:9b [ 81.253783][ T995] usb 1-1: USB disconnect, device number 35 [ 81.408168][ T993] usb 5-1: USB disconnect, device number 28 [ 81.419695][ T993] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 81.475530][ T36] audit: type=1400 audit(1775882829.779:348): avc: denied { create } for pid=1741 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.532116][ T36] audit: type=1400 audit(1775882829.829:349): avc: denied { create } for pid=1741 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 81.957063][ T1003] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 82.117014][ T1003] usb 2-1: Invalid ep0 maxpacket: 64 [ 82.247035][ T1003] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 82.397037][ T1003] usb 2-1: Invalid ep0 maxpacket: 64 [ 82.403611][ T1003] usb usb2-port1: attempt power cycle [ 82.467018][ T406] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 82.595679][ T1795] input: syz0 as /devices/virtual/input/input13 [ 82.607021][ T36] audit: type=1400 audit(1775882830.909:350): avc: denied { ioctl } for pid=1794 comm="syz.0.453" path="socket:[12930]" dev="sockfs" ino=12930 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.634706][ T406] usb 5-1: Using ep0 maxpacket: 8 [ 82.644793][ T406] usb 5-1: string descriptor 0 read error: -22 [ 82.651387][ T406] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 82.661599][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.747172][ T1003] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 82.767610][ T1003] usb 2-1: Invalid ep0 maxpacket: 64 [ 82.878213][ T1790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.890668][ T1790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.907417][ T1003] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 82.935839][ T406] usb 5-1: USB disconnect, device number 29 [ 82.944674][ T1003] usb 2-1: Invalid ep0 maxpacket: 64 [ 82.953458][ T1003] usb usb2-port1: unable to enumerate USB device [ 83.517596][ T36] audit: type=1400 audit(1775882831.829:351): avc: denied { block_suspend } for pid=1814 comm="syz.4.460" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.540206][ T406] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 83.540228][ T36] audit: type=1400 audit(1775882831.829:352): avc: denied { write } for pid=1814 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.697130][ T406] usb 1-1: device descriptor read/64, error -71 [ 83.937076][ T406] usb 1-1: device descriptor read/64, error -71 [ 84.177132][ T406] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 84.317112][ T406] usb 1-1: device descriptor read/64, error -71 [ 84.557086][ T406] usb 1-1: device descriptor read/64, error -71 [ 84.592645][ T36] audit: type=1400 audit(1775882832.899:353): avc: denied { create } for pid=1830 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 84.597619][ T1831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.465'. [ 84.644156][ T36] audit: type=1326 audit(1775882832.949:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b39c819 code=0x0 [ 84.669688][ T36] audit: type=1326 audit(1775882832.949:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1838 comm="syz.4.467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e9b39c819 code=0x0 [ 84.696391][ T406] usb usb1-port1: attempt power cycle [ 84.987116][ T1003] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 85.037061][ T406] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 85.058363][ T406] usb 1-1: device descriptor read/8, error -71 [ 85.137132][ T1003] usb 2-1: Using ep0 maxpacket: 8 [ 85.145061][ T1003] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 85.155397][ T1003] usb 2-1: config 179 has no interface number 0 [ 85.163822][ T1003] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 85.177938][ T1003] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 85.191238][ T1003] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.204844][ T1003] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 85.219360][ T1003] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 85.235194][ T1003] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 85.246582][ T1003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.259883][ T406] usb 1-1: device descriptor read/8, error -71 [ 85.269052][ T1831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.482173][ T995] usb 2-1: USB disconnect, device number 42 [ 85.482286][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.498177][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 85.507035][ T406] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 85.528367][ T406] usb 1-1: device descriptor read/8, error -71 [ 85.658336][ T406] usb 1-1: device descriptor read/8, error -71 [ 85.707130][ T1842] netlink: 'syz.3.468': attribute type 58 has an invalid length. [ 85.767169][ T406] usb usb1-port1: unable to enumerate USB device [ 86.277060][ T406] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 86.361389][ T1861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.475'. [ 86.382499][ T1863] veth1_vlan: entered allmulticast mode [ 86.408408][ T36] audit: type=1400 audit(1775882834.719:356): avc: denied { create } for pid=1864 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 86.458407][ T406] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 86.466891][ T406] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 86.476472][ T406] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 86.486007][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.497410][ T406] usb 2-1: config 0 descriptor?? [ 86.505660][ T406] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 86.514544][ T406] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 86.524032][ T406] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 86.708493][ T406] usb 2-1: USB disconnect, device number 43 [ 86.737084][ T995] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 86.887087][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 86.894403][ T995] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.906855][ T995] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.917103][ T995] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 86.930830][ T995] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.937851][ T995] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 86.947153][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.956334][ T995] usb 1-1: config 0 descriptor?? [ 87.276523][ T1872] FAT-fs (rnullb0): bogus number of reserved sectors [ 87.287051][ T1872] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 87.297465][ T36] audit: type=1400 audit(1775882835.609:357): avc: denied { map } for pid=1871 comm="syz.1.480" path="socket:[12262]" dev="sockfs" ino=12262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.325175][ T36] audit: type=1400 audit(1775882835.609:358): avc: denied { read } for pid=1871 comm="syz.1.480" path="socket:[12262]" dev="sockfs" ino=12262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.365908][ T995] hid (null): report_id 55080 is invalid [ 87.371882][ T995] hid (null): unknown global tag 0xe [ 87.377513][ T995] hid (null): unknown global tag 0xc [ 87.384008][ T995] hid (null): unknown global tag 0xc [ 87.389999][ T995] hid (null): unknown global tag 0xe [ 87.473028][ T1886] sit0: entered promiscuous mode [ 87.479783][ T1886] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 87.488248][ T1886] netlink: 1 bytes leftover after parsing attributes in process `syz.3.485'. [ 87.518275][ T1890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 87.567612][ T995] usb 1-1: USB disconnect, device number 40 [ 87.857257][ T406] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 87.917105][ T1005] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 88.017092][ T406] usb 2-1: Using ep0 maxpacket: 16 [ 88.024414][ T406] usb 2-1: config 0 has no interfaces? [ 88.031013][ T406] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.041095][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.049961][ T406] usb 2-1: SerialNumber: syz [ 88.055868][ T406] usb 2-1: config 0 descriptor?? [ 88.068467][ T1005] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 88.080187][ T1005] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.091918][ T1005] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.102466][ T1005] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 88.115724][ T1005] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.122896][ T1005] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 88.133249][ T1005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.143025][ T1005] usb 5-1: config 0 descriptor?? [ 88.263866][ T992] usb 2-1: USB disconnect, device number 44 [ 88.337184][ T995] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 88.497068][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 88.504418][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.517296][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.528243][ T995] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 88.539480][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.550091][ T995] usb 1-1: config 0 descriptor?? [ 88.554084][ T1005] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 88.565713][ T1005] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 88.573545][ T1005] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 88.581484][ T1005] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 88.586783][ T1907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 88.589003][ T1005] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 88.609615][ T1005] ryos 0003:1E7D:3138.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 88.798990][ T995] ntrig 0003:1B96:0008.0011: unknown main item tag 0x1 [ 88.805067][ T1005] usb 5-1: USB disconnect, device number 30 [ 88.810749][ T995] ntrig 0003:1B96:0008.0011: unknown main item tag 0x5 [ 88.825767][ T995] ntrig 0003:1B96:0008.0011: hidraw1: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0 [ 88.849469][ T36] audit: type=1400 audit(1775882837.159:359): avc: denied { setopt } for pid=1927 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.896620][ T1925] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 88.958117][ T36] audit: type=1400 audit(1775882837.269:360): avc: denied { bind } for pid=1932 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.980311][ T36] audit: type=1400 audit(1775882837.269:361): avc: denied { connect } for pid=1932 comm="syz.1.502" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.141181][ T995] usb 1-1: USB disconnect, device number 41 [ 89.208872][ T1005] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 89.250771][ T1944] 9pnet_fd: Insufficient options for proto=fd [ 89.267028][ T45] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 89.367078][ T1005] usb 5-1: Using ep0 maxpacket: 32 [ 89.374254][ T1005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.386778][ T1005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.397287][ T1005] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.406682][ T1005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.416508][ T1005] usb 5-1: config 0 descriptor?? [ 89.423104][ T1005] hub 5-1:0.0: USB hub found [ 89.430112][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.439386][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 89.448845][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 89.462127][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 89.472048][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.480798][ T45] usb 2-1: Product: syz [ 89.485681][ T45] usb 2-1: Manufacturer: syz [ 89.490818][ T45] usb 2-1: SerialNumber: syz [ 89.498211][ T1934] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.506863][ T1934] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.623670][ T1005] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 89.723835][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 89.732063][ T45] usb 2-1: too many endpoints [ 89.741355][ T45] usb 2-1: USB disconnect, device number 45 [ 90.007078][ T992] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 90.096999][ T1931] syzkaller0: entered promiscuous mode [ 90.102869][ T1931] syzkaller0: entered allmulticast mode [ 90.147139][ T992] usb 1-1: device descriptor read/64, error -71 [ 90.268933][ T1005] usbhid 5-1:0.0: can't add hid device: -71 [ 90.278578][ T1005] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 90.307845][ T1005] usb 5-1: USB disconnect, device number 31 [ 90.387077][ T992] usb 1-1: device descriptor read/64, error -71 [ 90.476815][ T36] audit: type=1400 audit(1775882838.779:362): avc: denied { create } for pid=1988 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.497216][ T45] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 90.512495][ T36] audit: type=1400 audit(1775882838.819:363): avc: denied { create } for pid=1990 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.535540][ T36] audit: type=1400 audit(1775882838.829:364): avc: denied { accept } for pid=1990 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.637035][ T992] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 90.647014][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 90.653960][ T45] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 90.663328][ T45] usb 2-1: config 0 has no interface number 0 [ 90.672706][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 90.682778][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.691807][ T45] usb 2-1: Product: syz [ 90.696687][ T45] usb 2-1: Manufacturer: syz [ 90.702138][ T45] usb 2-1: SerialNumber: syz [ 90.713286][ T45] usb 2-1: config 0 descriptor?? [ 90.721855][ T45] smsc95xx v2.0.0 [ 90.787007][ T992] usb 1-1: device descriptor read/64, error -71 [ 90.797026][ T36] audit: type=1400 audit(1775882839.099:365): avc: denied { execmem } for pid=2003 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.027076][ T992] usb 1-1: device descriptor read/64, error -71 [ 91.107095][ T1003] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 91.137299][ T992] usb usb1-port1: attempt power cycle [ 91.268795][ T1003] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.279495][ T1003] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 91.292019][ T1003] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 91.306375][ T1003] usb 5-1: string descriptor 0 read error: -22 [ 91.314569][ T1003] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 91.325782][ T1003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.477068][ T992] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 91.498360][ T992] usb 1-1: device descriptor read/8, error -71 [ 91.543339][ T995] usb 5-1: USB disconnect, device number 32 [ 91.628406][ T992] usb 1-1: device descriptor read/8, error -71 [ 91.776537][ T2026] overlayfs: failed to clone upperpath [ 91.819194][ T2035] tipc: Started in network mode [ 91.824918][ T2035] tipc: Node identity ac14140f, cluster identity 4711 [ 91.832272][ T2035] tipc: New replicast peer: 255.255.255.255 [ 91.839044][ T2035] tipc: Enabled bearer , priority 10 [ 91.867069][ T992] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 91.888486][ T992] usb 1-1: device descriptor read/8, error -71 [ 91.941852][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 91.954252][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 91.964997][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 91.976559][ T45] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 91.987878][ T45] usb 2-1: USB disconnect, device number 46 [ 92.018522][ T992] usb 1-1: device descriptor read/8, error -71 [ 92.127376][ T992] usb usb1-port1: unable to enumerate USB device [ 92.700596][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 92.700613][ T36] audit: type=1400 audit(1775882841.009:367): avc: denied { write } for pid=2054 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.729366][ T36] audit: type=1400 audit(1775882841.009:368): avc: denied { nlmsg_write } for pid=2054 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.909636][ T36] audit: type=1400 audit(1775882841.219:369): avc: denied { write } for pid=2065 comm="syz.0.553" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.967011][ T992] tipc: Node number set to 2886997007 [ 93.040374][ T2080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 93.217061][ T992] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 93.297038][ T995] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 93.367008][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 93.374360][ T992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.384325][ T992] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.395274][ T992] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.407511][ T992] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 93.419112][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.427516][ T992] usb 5-1: Product: syz [ 93.431899][ T992] usb 5-1: Manufacturer: syz [ 93.436877][ T992] usb 5-1: SerialNumber: syz [ 93.448141][ T995] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 93.456904][ T995] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 93.465589][ T995] usb 1-1: config 0 has no interface number 0 [ 93.472152][ T995] usb 1-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 93.483618][ T995] usb 1-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 93.497614][ T995] usb 1-1: config 0 interface 49 has no altsetting 0 [ 93.505121][ T995] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 93.515352][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.524778][ T995] usb 1-1: config 0 descriptor?? [ 93.645891][ T992] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.654835][ T992] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 93.663486][ T992] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 93.671226][ T992] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 93.683741][ T992] usb 5-1: USB disconnect, device number 33 [ 93.693073][ T1132] udevd[1132]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.735880][ T995] usb 1-1: string descriptor 0 read error: -71 [ 93.742716][ T2087] netlink: 'syz.0.560': attribute type 40 has an invalid length. [ 93.750834][ T995] ftdi_sio 1-1:0.49: FTDI USB Serial Device converter detected [ 93.762941][ T995] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 93.763341][ T36] audit: type=1400 audit(1775882842.069:370): avc: denied { set_context_mgr } for pid=2088 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.774136][ T995] usb 1-1: USB disconnect, device number 46 [ 93.801922][ T995] ftdi_sio 1-1:0.49: device disconnected [ 94.627071][ T1003] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 94.788608][ T1003] usb 5-1: config 0 has no interfaces? [ 94.795437][ T1003] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 94.806410][ T1003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.815974][ T1003] usb 5-1: config 0 descriptor?? [ 94.836134][ T36] audit: type=1400 audit(1775882843.139:371): avc: denied { write } for pid=2111 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.023101][ T995] usb 5-1: USB disconnect, device number 34 [ 95.467158][ T45] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 95.607358][ T45] usb 5-1: device descriptor read/64, error -71 [ 95.814441][ T36] audit: type=1400 audit(1775882844.119:372): avc: denied { accept } for pid=2136 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.847033][ T45] usb 5-1: device descriptor read/64, error -71 [ 95.860275][ T2140] netlink: 'syz.1.576': attribute type 2 has an invalid length. [ 96.061479][ T36] audit: type=1326 audit(1775882844.369:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2163 comm="syz.1.583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43eff9c819 code=0x0 [ 96.107253][ T45] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 96.131034][ T36] audit: type=1400 audit(1775882844.439:374): avc: denied { mount } for pid=2163 comm="syz.1.583" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 96.177024][ T1003] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 96.247027][ T45] usb 5-1: device descriptor read/64, error -71 [ 96.348571][ T1003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.362492][ T1003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.379073][ T1003] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 96.394258][ T1003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.413625][ T1003] usb 1-1: config 0 descriptor?? [ 96.507042][ T45] usb 5-1: device descriptor read/64, error -71 [ 96.570446][ T36] audit: type=1400 audit(1775882844.879:375): avc: denied { create } for pid=2173 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.645106][ T45] usb usb5-port1: attempt power cycle [ 96.838252][ T1003] hkems 0003:2006:0118.0012: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 96.856911][ T1003] hkems 0003:2006:0118.0012: no inputs found [ 96.864063][ T1003] hkems 0003:2006:0118.0012: force feedback init failed [ 96.872563][ T2177] ================================================================== [ 96.881627][ T2177] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xbf/0x100 [ 96.891740][ T2177] Read of size 7 at addr ffff888135764660 by task fido_id/2177 [ 96.899871][ T2177] [ 96.902538][ T2177] CPU: 0 UID: 0 PID: 2177 Comm: fido_id Not tainted syzkaller #0 f9bdc9161095fb91188de70574256d407725efc9 [ 96.902570][ T2177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.902583][ T2177] Call Trace: [ 96.902592][ T2177] [ 96.902601][ T2177] __dump_stack+0x21/0x30 [ 96.902632][ T2177] dump_stack_lvl+0x140/0x1c0 [ 96.902656][ T2177] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.902681][ T2177] print_address_description+0x71/0x210 [ 96.902708][ T2177] print_report+0x4a/0x70 [ 96.902730][ T2177] kasan_report+0x162/0x1a0 [ 96.902750][ T2177] ? read_report_descriptor+0xbf/0x100 [ 96.902773][ T2177] ? read_report_descriptor+0xbf/0x100 [ 96.902794][ T2177] kasan_check_range+0x25a/0x2b0 [ 96.902814][ T2177] ? read_report_descriptor+0xbf/0x100 [ 96.902835][ T2177] __asan_memcpy+0x31/0x80 [ 96.902865][ T2177] read_report_descriptor+0xbf/0x100 [ 96.902886][ T2177] ? __cfi_read_report_descriptor+0x10/0x10 [ 96.902907][ T2177] sysfs_kf_bin_read+0x1c6/0x200 [ 96.902934][ T2177] ? __cfi_sysfs_kf_bin_read+0x10/0x10 [ 96.902958][ T2177] kernfs_fop_read_iter+0x30e/0x580 [ 96.902980][ T2177] vfs_read+0x654/0xcb0 [ 96.903005][ T2177] ? __cfi_vfs_read+0x10/0x10 [ 96.903028][ T2177] ? __kasan_slab_free+0x6a/0x80 [ 96.903047][ T2177] ? putname+0x113/0x150 [ 96.903073][ T2177] ? putname+0x113/0x150 [ 96.903099][ T2177] ? __kasan_check_read+0x15/0x20 [ 96.903122][ T2177] ksys_read+0x145/0x260 [ 96.903146][ T2177] ? __cfi_ksys_read+0x10/0x10 [ 96.903170][ T2177] ? __kasan_check_read+0x15/0x20 [ 96.903193][ T2177] __x64_sys_read+0x7f/0x90 [ 96.903217][ T2177] x64_sys_call+0x2638/0x2ee0 [ 96.903243][ T2177] do_syscall_64+0x57/0xf0 [ 96.903270][ T2177] ? clear_bhb_loop+0x50/0xa0 [ 96.903288][ T2177] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.903316][ T2177] RIP: 0033:0x7f9519aa7407 [ 96.903340][ T2177] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 96.903357][ T2177] RSP: 002b:00007ffc11f59720 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 96.903379][ T2177] RAX: ffffffffffffffda RBX: 00007f951a272880 RCX: 00007f9519aa7407 [ 96.903394][ T2177] RDX: 0000000000001000 RSI: 00007ffc11f59770 RDI: 0000000000000004 [ 96.903408][ T2177] RBP: 0000561654c9c2c0 R08: 0000000000000000 R09: 0000000000000000 [ 96.903420][ T2177] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561654c9b4c0 [ 96.903434][ T2177] R13: 00007ffc11f59770 R14: 0000000000000004 R15: 00005616359b04d8 [ 96.903450][ T2177] [ 96.903457][ T2177] [ 97.067034][ T45] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 97.068995][ T2177] Allocated by task 1003: [ 97.069011][ T2177] kasan_save_track+0x3e/0x80 [ 97.118022][ T45] usb 5-1: device descriptor read/8, error -71 [ 97.123384][ T2177] kasan_save_alloc_info+0x40/0x50 [ 97.123420][ T2177] __kasan_kmalloc+0x96/0xb0 [ 97.194829][ T2178] overlayfs: disabling nfs_export due to verity=require [ 97.195799][ T2177] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 97.239098][ T2177] kmemdup_noprof+0x31/0x80 [ 97.243713][ T2177] hid_open_report+0x200/0x1110 [ 97.249868][ T2177] ems_probe+0x25/0x740 [ 97.254904][ T2177] hid_device_probe+0x2c4/0x5d0 [ 97.260941][ T2177] really_probe+0x2d8/0x890 [ 97.266447][ T2177] __driver_probe_device+0x198/0x280 [ 97.273323][ T2177] driver_probe_device+0x54/0x3f0 [ 97.279325][ T2177] __device_attach_driver+0x2f1/0x4b0 [ 97.287006][ T2177] bus_for_each_drv+0x267/0x300 [ 97.292715][ T2177] __device_attach+0x2c9/0x3c0 [ 97.297889][ T2177] device_initial_probe+0x1e/0x30 [ 97.304159][ T2177] bus_probe_device+0x18b/0x270 [ 97.310334][ T2177] device_add+0x80c/0xbf0 [ 97.318211][ T45] usb 5-1: device descriptor read/8, error -71 [ 97.318453][ T2177] hid_add_device+0x39b/0x560 [ 97.330469][ T2177] usbhid_probe+0xde3/0x12b0 [ 97.335964][ T2177] usb_probe_interface+0x6a9/0xc00 [ 97.341286][ T2177] really_probe+0x2d8/0x890 [ 97.346523][ T2177] __driver_probe_device+0x198/0x280 [ 97.352842][ T2177] driver_probe_device+0x54/0x3f0 [ 97.358972][ T2177] __device_attach_driver+0x2f1/0x4b0 [ 97.364955][ T2177] bus_for_each_drv+0x267/0x300 [ 97.370094][ T2177] __device_attach+0x2c9/0x3c0 [ 97.375434][ T2177] device_initial_probe+0x1e/0x30 [ 97.380962][ T2177] bus_probe_device+0x18b/0x270 [ 97.386818][ T2177] device_add+0x80c/0xbf0 [ 97.391425][ T2177] usb_set_configuration+0x1acf/0x20b0 [ 97.397354][ T2177] usb_generic_driver_probe+0x95/0x160 [ 97.403194][ T2177] usb_probe_device+0x1d1/0x380 [ 97.408507][ T2177] really_probe+0x2d8/0x890 [ 97.413810][ T2177] __driver_probe_device+0x198/0x280 [ 97.420337][ T2177] driver_probe_device+0x54/0x3f0 [ 97.426340][ T2177] __device_attach_driver+0x2f1/0x4b0 [ 97.432088][ T2177] bus_for_each_drv+0x267/0x300 [ 97.437405][ T2177] __device_attach+0x2c9/0x3c0 [ 97.442359][ T2177] device_initial_probe+0x1e/0x30 [ 97.447585][ T2177] bus_probe_device+0x18b/0x270 [ 97.453095][ T2177] device_add+0x80c/0xbf0 [ 97.458060][ T2177] usb_new_device+0x9f8/0x15b0 [ 97.463981][ T2177] hub_event+0x30c6/0x4700 [ 97.469935][ T2177] process_scheduled_works+0x7d1/0x1020 [ 97.475697][ T2177] worker_thread+0xc70/0x10b0 [ 97.480622][ T2177] kthread+0x2c6/0x370 [ 97.484976][ T2177] ret_from_fork+0x67/0xa0 [ 97.490031][ T2177] ret_from_fork_asm+0x1a/0x30 [ 97.495517][ T2177] [ 97.498723][ T2177] Freed by task 1003: [ 97.503211][ T2177] kasan_save_track+0x3e/0x80 [ 97.508011][ T2177] kasan_save_free_info+0x4a/0x60 [ 97.513584][ T2177] __kasan_slab_free+0x5f/0x80 [ 97.518707][ T2177] kfree+0x158/0x440 [ 97.522877][ T2177] hid_close_report+0x628/0x6f0 [ 97.527932][ T2177] hid_device_probe+0x523/0x5d0 [ 97.533509][ T2177] really_probe+0x2d8/0x890 [ 97.538745][ T2177] __driver_probe_device+0x198/0x280 [ 97.544179][ T2177] driver_probe_device+0x54/0x3f0 [ 97.550060][ T2177] __device_attach_driver+0x2f1/0x4b0 [ 97.556241][ T2177] bus_for_each_drv+0x267/0x300 [ 97.562775][ T2177] __device_attach+0x2c9/0x3c0 [ 97.567692][ T2177] device_initial_probe+0x1e/0x30 [ 97.573272][ T2177] bus_probe_device+0x18b/0x270 [ 97.579015][ T2177] device_add+0x80c/0xbf0 [ 97.583536][ T2177] hid_add_device+0x39b/0x560 [ 97.589133][ T2177] usbhid_probe+0xde3/0x12b0 [ 97.594470][ T2177] usb_probe_interface+0x6a9/0xc00 [ 97.599950][ T2177] really_probe+0x2d8/0x890 [ 97.604817][ T2177] __driver_probe_device+0x198/0x280 [ 97.610372][ T2177] driver_probe_device+0x54/0x3f0 [ 97.615615][ T2177] __device_attach_driver+0x2f1/0x4b0 [ 97.621276][ T2177] bus_for_each_drv+0x267/0x300 [ 97.626496][ T2177] __device_attach+0x2c9/0x3c0 [ 97.631890][ T2177] device_initial_probe+0x1e/0x30 [ 97.637366][ T2177] bus_probe_device+0x18b/0x270 [ 97.643654][ T2177] device_add+0x80c/0xbf0 [ 97.648030][ T2177] usb_set_configuration+0x1acf/0x20b0 [ 97.653804][ T2177] usb_generic_driver_probe+0x95/0x160 [ 97.659994][ T2177] usb_probe_device+0x1d1/0x380 [ 97.665227][ T2177] really_probe+0x2d8/0x890 [ 97.667052][ T45] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 97.670116][ T2177] __driver_probe_device+0x198/0x280 [ 97.670147][ T2177] driver_probe_device+0x54/0x3f0 [ 97.670164][ T2177] __device_attach_driver+0x2f1/0x4b0 [ 97.696140][ T2177] bus_for_each_drv+0x267/0x300 [ 97.702240][ T2177] __device_attach+0x2c9/0x3c0 [ 97.707288][ T2177] device_initial_probe+0x1e/0x30 [ 97.713702][ T2177] bus_probe_device+0x18b/0x270 [ 97.717996][ T45] usb 5-1: device descriptor read/8, error -71 [ 97.719184][ T2177] device_add+0x80c/0xbf0 [ 97.719216][ T2177] usb_new_device+0x9f8/0x15b0 [ 97.738440][ T2177] hub_event+0x30c6/0x4700 [ 97.743426][ T2177] process_scheduled_works+0x7d1/0x1020 [ 97.749533][ T2177] worker_thread+0xc70/0x10b0 [ 97.754368][ T2177] kthread+0x2c6/0x370 [ 97.758894][ T2177] ret_from_fork+0x67/0xa0 [ 97.763355][ T2177] ret_from_fork_asm+0x1a/0x30 [ 97.769025][ T2177] [ 97.771559][ T2177] The buggy address belongs to the object at ffff888135764660 [ 97.771559][ T2177] which belongs to the cache kmalloc-8 of size 8 [ 97.787706][ T2177] The buggy address is located 0 bytes inside of [ 97.787706][ T2177] freed 8-byte region [ffff888135764660, ffff888135764668) [ 97.802231][ T2177] [ 97.804576][ T2177] The buggy address belongs to the physical page: [ 97.811878][ T2177] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x135764 [ 97.822056][ T2177] flags: 0x4000000000000000(zone=1) [ 97.827622][ T2177] page_type: f5(slab) [ 97.832175][ T2177] raw: 4000000000000000 ffff888100041500 dead000000000122 0000000000000000 [ 97.841761][ T2177] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 97.853444][ T2177] page dumped because: kasan: bad access detected [ 97.864651][ T2177] page_owner tracks the page as allocated [ 97.872911][ T2177] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 292, tgid 292 (syz-executor), ts 96564512255, free_ts 96564484902 [ 97.899711][ T2177] post_alloc_hook+0x3b8/0x3f0 [ 97.906222][ T2177] prep_new_page+0x20/0x120 [ 97.912001][ T2177] get_page_from_freelist+0x496e/0x4a20 [ 97.918706][ T45] usb 5-1: device descriptor read/8, error -71 [ 97.919014][ T2177] __alloc_pages_noprof+0x35f/0x7e0 [ 97.931422][ T36] audit: type=1400 audit(1775882846.229:376): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 97.932226][ T2177] alloc_slab_page+0x6b/0x1e0 [ 97.967254][ T2177] allocate_slab+0x69/0x420 [ 97.972600][ T2177] ___slab_alloc+0x5a2/0x8d0 [ 97.978381][ T2177] __kmalloc_node_noprof+0x2ea/0x4f0 [ 97.984152][ T2177] __vmalloc_node_range_noprof+0x549/0x1480 [ 97.992905][ T2177] vzalloc_noprof+0x103/0x1d0 [ 97.999276][ T2177] alloc_counters+0x78/0x530 [ 98.003563][ T36] audit: type=1400 audit(1775882846.229:377): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.005128][ T2177] do_ipt_get_ctl+0xac7/0x1200 [ 98.005154][ T2177] nf_getsockopt+0x288/0x2b0 [ 98.040782][ T2177] ip_getsockopt+0x15b/0x200 [ 98.046027][ T2177] tcp_getsockopt+0x106/0x130 [ 98.052193][ T2177] sock_common_getsockopt+0xb2/0xd0 [ 98.059483][ T2177] page last free pid 292 tgid 292 stack trace: [ 98.063636][ T45] usb usb5-port1: unable to enumerate USB device [ 98.066968][ T2177] free_unref_page+0xbcf/0xf80 [ 98.067003][ T2177] __free_pages+0x6b/0x3b0 [ 98.067020][ T2177] vfree+0x3ea/0x5b0 [ 98.067036][ T2177] do_ipt_get_ctl+0xee0/0x1200 [ 98.067050][ T2177] nf_getsockopt+0x288/0x2b0 [ 98.067063][ T2177] ip_getsockopt+0x15b/0x200 [ 98.067084][ T2177] tcp_getsockopt+0x106/0x130 [ 98.067097][ T2177] sock_common_getsockopt+0xb2/0xd0 [ 98.067113][ T2177] do_sock_getsockopt+0x3a4/0x6c0 [ 98.081768][ T36] audit: type=1400 audit(1775882846.229:378): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.085564][ T2177] __x64_sys_getsockopt+0x1d4/0x280 [ 98.085599][ T2177] x64_sys_call+0x10db/0x2ee0 [ 98.102748][ T36] audit: type=1400 audit(1775882846.229:379): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.105834][ T2177] do_syscall_64+0x57/0xf0 [ 98.123565][ T36] audit: type=1400 audit(1775882846.229:380): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.146760][ T2177] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.146802][ T2177] [ 98.146807][ T2177] Memory state around the buggy address: [ 98.146817][ T2177] ffff888135764500: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 98.146829][ T2177] ffff888135764580: fc fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 98.146841][ T2177] >ffff888135764600: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 98.146850][ T2177] ^ [ 98.196286][ T36] audit: type=1400 audit(1775882846.229:381): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.214827][ T2177] ffff888135764680: fa fc fc fc 06 fc fc fc fc fc fc fc fa fc fc fc [ 98.214845][ T2177] ffff888135764700: fc fc fc fc fc fc fc fc fa fc fc fc fa fc fc fc [ 98.214854][ T2177] ================================================================== [ 98.220979][ T2177] Disabling lock debugging due to kernel taint [ 98.265425][ T36] audit: type=1400 audit(1775882846.229:382): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.362214][ T36] audit: type=1400 audit(1775882846.229:383): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.386578][ T36] audit: type=1400 audit(1775882846.369:384): avc: denied { ioctl } for pid=2102 comm="syz.4.564" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.277386][ T992] usb 1-1: USB disconnect, device number 47