last executing test programs: 5.632290064s ago: executing program 3 (id=6): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="6d9f3c", 0x3}], 0x1}}], 0x1, 0x6008000) 5.598049886s ago: executing program 3 (id=7): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002079217700000000000001090224000100008000090400810103000200092181000001222700090581031000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.021567552s ago: executing program 1 (id=11): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000020bc20005500000000000109022d00010000600209040000050301010009210000360122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0x8, "4f348455"}]}}, 0x0}, 0x0) 3.586523041s ago: executing program 3 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000100)="0000044100000d", 0x7}], 0x2) 3.393640264s ago: executing program 3 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.164313529s ago: executing program 3 (id=27): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x2a, {0x2a, 0x4, "6169ea9641938c58a5238ad60375b149973e9840bbb7c69c1b54867b07c04a96588091576dcad6fb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.301279633s ago: executing program 3 (id=31): syz_usb_connect$uac2(0x5, 0xaf, &(0x7f0000001400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3f02, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0xa8, 0x50, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xa, 0x2d, 0x8}, [@effect_unit={0x9, 0x24, 0x7, 0x4, 0x0, 0x4, [0x3]}, @selector_unit={0x6, 0x24, 0xb, 0x1b, 0x1, 'f'}, @sample_rate={0x9, 0x24, 0xd, 0x3, 0x0, 0x4, [0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x307, 0xff, 0x5, 0x3, 0xe, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0xc, 0x2, 0x1001, 0x40, 0x401, 0xc}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x6, 0x9, {0x8, 0x25, 0x1, 0x81, 0x3f, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x8b, 0x4, {0x8, 0x25, 0x1, 0x80, 0x0, 0x8, 0xf}}}}}}}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0}) 929.880408ms ago: executing program 4 (id=33): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffff3e, 0x2842) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffd6b}) 929.674198ms ago: executing program 4 (id=34): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 657.270096ms ago: executing program 0 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000740)={@val={0xa, 0x9100}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @remote, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x7, 0xa5aa, 0x1, 0xbd}}}}}}}, 0x4a) 641.969097ms ago: executing program 1 (id=40): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x60000, 0x0) 581.558222ms ago: executing program 1 (id=42): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = dup(r0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0e0000"], 0xc1) 581.357851ms ago: executing program 0 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa86dd694fd2cd00032ffffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x42) 573.360642ms ago: executing program 1 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x80000008, 0x0, 0x5, 0x5, 0x12, 0x40, 0x80000000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 481.670398ms ago: executing program 0 (id=46): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) write$khugepaged_scan(r0, &(0x7f0000000080), 0x8) 481.399738ms ago: executing program 0 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x6d8}) 472.769138ms ago: executing program 0 (id=49): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000020c0)) syz_open_pts(r0, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x56d5) 460.224789ms ago: executing program 0 (id=50): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000000, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0}, 0x0) 389.819494ms ago: executing program 2 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000900)={@val={0x0, 0xd}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa010101, @local}, {0x11, 0xa0, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x32) 389.574934ms ago: executing program 1 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0x200000000000000, 0xc000, 0x1, 0x1, 0x23}) 389.357674ms ago: executing program 2 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x3f, 0x0) 383.990034ms ago: executing program 2 (id=55): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x0, 0xffffffff, {0x77359400}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x2, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) 380.351965ms ago: executing program 1 (id=56): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 317.879079ms ago: executing program 2 (id=57): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x469) utime(&(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x9) 317.667489ms ago: executing program 2 (id=58): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0xee01, 0xee01, 0x0) bind$bt_hci(r0, &(0x7f00000041c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 312.175739ms ago: executing program 2 (id=59): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e01"], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 123.791922ms ago: executing program 4 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'lo\x00', 0x0}) dup(0xffffffffffffffff) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000001000)={@void, @void, @eth={@multicast, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x70, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x7, 0x11, 0x0, {0x15, 0x4, 0x2, 0x8, 0x8, 0x64, 0x8, 0x9, 0x6c, 0x3ff, @private=0xa010100, @local, {[@ssrr={0x89, 0xf, 0xd2, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @lsrr={0x83, 0x13, 0x4b, [@loopback, @empty, @loopback, @loopback]}, @timestamp={0x44, 0xc, 0x5b, 0x0, 0x9, [0x80000001, 0x8]}, @timestamp={0x44, 0x10, 0x60, 0x0, 0x4, [0x6, 0x0, 0x6]}]}}}}}}}}, 0x82) 5.69285ms ago: executing program 4 (id=61): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5.50388ms ago: executing program 4 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 0s ago: executing program 4 (id=63): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 22.301220][ T30] audit: type=1400 audit(1775283180.865:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.304423][ T273] cgroup: Unknown subsys name 'net' [ 22.323944][ T30] audit: type=1400 audit(1775283180.865:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.351150][ T30] audit: type=1400 audit(1775283180.895:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.351412][ T273] cgroup: Unknown subsys name 'devices' [ 22.525146][ T273] cgroup: Unknown subsys name 'hugetlb' [ 22.530742][ T273] cgroup: Unknown subsys name 'rlimit' [ 22.670940][ T30] audit: type=1400 audit(1775283181.235:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.694120][ T30] audit: type=1400 audit(1775283181.235:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.719027][ T30] audit: type=1400 audit(1775283181.235:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.734569][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.751072][ T30] audit: type=1400 audit(1775283181.315:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.776627][ T30] audit: type=1400 audit(1775283181.315:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.810573][ T30] audit: type=1400 audit(1775283181.375:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.836125][ T30] audit: type=1400 audit(1775283181.375:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.836160][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.593095][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.600192][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.607785][ T281] device bridge_slave_0 entered promiscuous mode [ 23.614705][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.621745][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.629123][ T281] device bridge_slave_1 entered promiscuous mode [ 23.735582][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.742637][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.750073][ T285] device bridge_slave_0 entered promiscuous mode [ 23.758969][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.766125][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.773588][ T285] device bridge_slave_1 entered promiscuous mode [ 23.808282][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.815341][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.822729][ T283] device bridge_slave_0 entered promiscuous mode [ 23.836467][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.843525][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.850875][ T282] device bridge_slave_0 entered promiscuous mode [ 23.857520][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.864604][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.871883][ T283] device bridge_slave_1 entered promiscuous mode [ 23.886154][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.893189][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.900630][ T282] device bridge_slave_1 entered promiscuous mode [ 23.957076][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.964204][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.971476][ T288] device bridge_slave_0 entered promiscuous mode [ 23.980754][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.987822][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.995183][ T288] device bridge_slave_1 entered promiscuous mode [ 24.033394][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.040442][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.047727][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.054762][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.119925][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.126971][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.134234][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.141260][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.170227][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.177287][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.184568][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.191595][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.203687][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.210733][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.218007][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.225037][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.237322][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.244400][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.251629][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.258671][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.274943][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.282295][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.290091][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.297292][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.304714][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.312007][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.319230][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.326390][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.333646][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.340828][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.348499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.355908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.380048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.399362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.407611][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.414690][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.422185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.430428][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.437484][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.444813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.452899][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.459938][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.467309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.475496][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.482506][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.489970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.497910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.516631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.524503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.532606][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.539652][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.547237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.555738][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.562770][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.596295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.605576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.613774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.621110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.630957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.639544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.647462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.655523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.663573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.670931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.679115][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.686136][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.693634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.701700][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.708736][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.716097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.724258][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.731265][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.738670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.746807][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.753843][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.761123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.769055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.787452][ T281] device veth0_vlan entered promiscuous mode [ 24.794078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.802843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.811045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.819098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.828115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.836109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.844207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.858093][ T282] device veth0_vlan entered promiscuous mode [ 24.871064][ T285] device veth0_vlan entered promiscuous mode [ 24.881066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.889778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.897747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.906086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.914511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.922347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.930629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.938507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.946615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.954205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.961571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.969113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.977300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.987193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.994768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.008383][ T282] device veth1_macvtap entered promiscuous mode [ 25.016072][ T281] device veth1_macvtap entered promiscuous mode [ 25.024521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.032699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.040928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.048668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.063133][ T285] device veth1_macvtap entered promiscuous mode [ 25.071285][ T288] device veth0_vlan entered promiscuous mode [ 25.079418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.088025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.096483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.104692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.112787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.120669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.128680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.136120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.145867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.154092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.168464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.176774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.185245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.193805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.202001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.210297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.218674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.226925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.235715][ T283] device veth0_vlan entered promiscuous mode [ 25.250264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.258655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.261757][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 25.289653][ T288] device veth1_macvtap entered promiscuous mode [ 25.305120][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.313721][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.321818][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.331964][ T283] device veth1_macvtap entered promiscuous mode [ 25.361504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.369990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.378733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.387007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.401944][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.410887][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.427543][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.436227][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.480444][ T318] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 25.559416][ T328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.623340][ T26] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.643373][ T289] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.763340][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.783370][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.853359][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.983334][ T26] usb 2-1: config 120 has an invalid interface number: 138 but max is 0 [ 25.991774][ T26] usb 2-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 26.002339][ T26] usb 2-1: config 120 has no interface number 0 [ 26.008699][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 26.013585][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.014040][ T26] usb 2-1: config 120 interface 138 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 26.025404][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.038237][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 26.048228][ T289] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 26.053945][ T26] usb 2-1: config 120 interface 138 has no altsetting 0 [ 26.062411][ T289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.078442][ T289] usb 5-1: config 0 descriptor?? [ 26.103390][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 26.153412][ T42] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.164564][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.171160][ T42] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 26.180270][ T60] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 26.193377][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.201612][ T60] usb 1-1: config 0 interface 0 has no altsetting 0 [ 26.208561][ T42] usb 4-1: config 0 descriptor?? [ 26.213656][ T60] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 26.222701][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.232773][ T60] usb 1-1: config 0 descriptor?? [ 26.237851][ T26] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 26.246983][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.255679][ T26] usb 2-1: Product: syz [ 26.259835][ T26] usb 2-1: Manufacturer: syz [ 26.264526][ T26] usb 2-1: SerialNumber: syz [ 26.273556][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.375029][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.385186][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.394215][ T20] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 26.404673][ T20] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 26.543766][ T26] ums-usbat 2-1:120.138: USB Mass Storage device detected [ 26.552187][ T26] ums-usbat 2-1:120.138: This device (03f0,0307,0001 S ee P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 26.552187][ T26] Please send a copy of this message to and [ 26.584453][ T289] arvo 0003:1E7D:30D4.0001: unknown global tag 0xe [ 26.591131][ T289] arvo 0003:1E7D:30D4.0001: item 0 4 1 14 parsing failed [ 26.598406][ T289] arvo 0003:1E7D:30D4.0001: parse failed [ 26.604202][ T20] usb 3-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 26.609528][ T26] usb 2-1: USB disconnect, device number 2 [ 26.613241][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.613567][ T289] arvo: probe of 0003:1E7D:30D4.0001 failed with error -22 [ 26.634330][ T20] usb 3-1: Product: syz [ 26.638486][ T20] usb 3-1: Manufacturer: syz [ 26.643061][ T20] usb 3-1: SerialNumber: syz [ 26.694694][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.701775][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.709019][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.716855][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.724090][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.731167][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.738178][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.745288][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.752215][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.759233][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.766354][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.773486][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.780446][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.787452][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.794506][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.801541][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.808624][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.815594][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.820386][ T289] usb 5-1: USB disconnect, device number 2 [ 26.822540][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.835485][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.842532][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.849685][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.856659][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.863716][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.870670][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.877657][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.884708][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.891743][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.898823][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.905807][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.912819][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.920103][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.927194][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.934178][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.941239][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.948334][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.955340][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.962312][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.969287][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.976326][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 26.983397][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.990347][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 26.997414][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.004556][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.011575][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.016849][ T20] usb 3-1: 0:1 : does not exist [ 27.018651][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.024272][ T20] usb 3-1: unit 1 not found! [ 27.030589][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.044070][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.051166][ T20] usb 3-1: USB disconnect, device number 2 [ 27.051819][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.068786][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.075888][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.083015][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.090181][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.097270][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.104394][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.111351][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.118437][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.125452][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.132514][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.139592][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.146584][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.153550][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.160784][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.167903][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.174885][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.181848][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.188848][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.195893][ T42] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 27.203112][ T42] uclogic 0003:2179:0077.0002: No inputs registered, leaving [ 27.210531][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.217519][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.224761][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.231822][ T42] uclogic 0003:2179:0077.0002: hidraw0: USB HID v0.81 Device [HID 2179:0077] on usb-dummy_hcd.3-1/input0 [ 27.243105][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.251779][ T42] usb 4-1: USB disconnect, device number 2 [ 27.257749][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.265187][ T60] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 27.278646][ T60] aureal 0003:0755:2626.0003: hidraw0: USB HID v0.0b Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 27.291901][ T60] usb 1-1: USB disconnect, device number 2 [ 27.295287][ T304] udevd[304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.319666][ T341] fido_id[341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 27.357555][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 27.357567][ T30] audit: type=1400 audit(1775283185.925:109): avc: denied { create } for pid=342 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.384706][ T30] audit: type=1400 audit(1775283185.955:110): avc: denied { setopt } for pid=342 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.417817][ T30] audit: type=1400 audit(1775283185.955:111): avc: denied { ioctl } for pid=342 comm="syz.4.12" path="socket:[15747]" dev="sockfs" ino=15747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.443312][ T30] audit: type=1400 audit(1775283185.955:112): avc: denied { write } for pid=342 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.473333][ T6] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 27.521278][ T356] ======================================================= [ 27.521278][ T356] WARNING: The mand mount option has been deprecated and [ 27.521278][ T356] and is ignored by this kernel. Remove the mand [ 27.521278][ T356] option from the mount to silence this warning. [ 27.521278][ T356] ======================================================= [ 27.557852][ T357] fido_id[357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 27.572417][ T30] audit: type=1400 audit(1775283186.135:113): avc: denied { unlink } for pid=355 comm="syz.4.18" name="#1" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.572943][ T354] device syzkaller1 entered promiscuous mode [ 27.612395][ T30] audit: type=1400 audit(1775283186.135:114): avc: denied { mount } for pid=355 comm="syz.4.18" name="/" dev="overlay" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.654616][ T30] audit: type=1400 audit(1775283186.175:115): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.676225][ T30] audit: type=1400 audit(1775283186.175:116): avc: denied { append } for pid=358 comm="syz.4.19" name="pfkey" dev="proc" ino=4026532714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.698779][ T30] audit: type=1400 audit(1775283186.175:117): avc: denied { create } for pid=358 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.736957][ T30] audit: type=1400 audit(1775283186.215:118): avc: denied { write } for pid=361 comm="syz.4.20" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.759467][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.804823][ T365] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 27.814093][ T365] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 27.833322][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.850558][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.861710][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.871619][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 27.886300][ T6] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 27.895534][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.904485][ T6] usb 2-1: config 0 descriptor?? [ 27.974329][ T386] netlink: 'syz.0.29': attribute type 11 has an invalid length. [ 28.063348][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.163359][ T26] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 28.170976][ T26] usb 3-1: can't read configurations, error -61 [ 28.183399][ T303] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.243387][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 28.249337][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 28.253382][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.258859][ T6] usb 2-1: USB disconnect, device number 3 [ 28.333317][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.423581][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.434530][ T303] usb 4-1: Using ep0 maxpacket: 16 [ 28.439657][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.449684][ T20] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 28.458777][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.467663][ T20] usb 5-1: config 0 descriptor?? [ 28.553353][ T303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.564409][ T303] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.577195][ T303] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 28.586256][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.594968][ T303] usb 4-1: config 0 descriptor?? [ 28.623381][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.634758][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.713337][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.723360][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 28.732490][ T60] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 28.740544][ T60] usb 1-1: Manufacturer: syz [ 28.745742][ T60] usb 1-1: config 0 descriptor?? [ 28.753362][ T26] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 28.760958][ T26] usb 3-1: can't read configurations, error -61 [ 28.767329][ T26] usb usb3-port1: attempt power cycle [ 28.944069][ T20] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 28.951662][ T20] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 28.962884][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 29.074078][ T303] holtek_mouse 0003:04D9:A081.0005: ignoring exceeding usage max [ 29.083052][ T303] holtek_mouse 0003:04D9:A081.0005: invalid report_count 37697 [ 29.090781][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.100903][ T303] holtek_mouse 0003:04D9:A081.0005: item 0 2 1 9 parsing failed [ 29.108594][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.119606][ T303] holtek_mouse 0003:04D9:A081.0005: hid parse failed: -22 [ 29.126750][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.136522][ T303] holtek_mouse: probe of 0003:04D9:A081.0005 failed with error -22 [ 29.145980][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.158945][ T20] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 29.167065][ T6] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 29.176169][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.183405][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.186398][ T6] usb 2-1: config 0 descriptor?? [ 29.275732][ T42] usb 4-1: USB disconnect, device number 3 [ 29.443380][ T26] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 29.451109][ T26] usb 3-1: can't read configurations, error -61 [ 29.583406][ T20] cp2112 0003:10C4:EA90.0004: error setting SMBus config [ 29.590993][ T20] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71 [ 29.599466][ T20] usb 5-1: USB disconnect, device number 3 [ 29.613401][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.620697][ T389] fido_id[389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 29.674229][ T6] betop 0003:20BC:5500.0007: item fetching failed at offset 1/5 [ 29.682053][ T6] betop 0003:20BC:5500.0007: parse failed [ 29.687828][ T6] betop: probe of 0003:20BC:5500.0007 failed with error -22 [ 29.863395][ T60] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 29.872369][ T60] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 29.880513][ T60] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 29.888824][ T26] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 29.896519][ T26] usb 3-1: can't read configurations, error -61 [ 29.902881][ T26] usb usb3-port1: unable to enumerate USB device [ 29.909181][ T20] usb 2-1: USB disconnect, device number 4 [ 29.915192][ T60] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 29.922687][ T60] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 29.931423][ T60] usb 1-1: USB disconnect, device number 3 [ 30.063310][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.431011][ T410] device syzkaller1 entered promiscuous mode [ 30.463424][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.478863][ T42] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 30.489099][ T42] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 30.520032][ T419] fido_id[419]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.543370][ T6] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 30.587598][ T421] kvm [420]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 30.599914][ T421] kvm [420]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 30.655538][ T440] device syzkaller1 entered promiscuous mode [ 30.723389][ T6] usb 4-1: New USB device found, idVendor=041e, idProduct=3f02, bcdDevice= 0.40 [ 30.733508][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.741534][ T6] usb 4-1: Product: syz [ 30.746051][ T6] usb 4-1: Manufacturer: syz [ 30.750657][ T6] usb 4-1: SerialNumber: syz [ 30.903362][ T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.965698][ T458] device syzkaller1 entered promiscuous mode [ 30.973439][ T303] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.043301][ T332] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 31.057874][ T462] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 31.072165][ T462] overlayfs: overlapping lowerdir path [ 31.089949][ T464] ================================================================== [ 31.098011][ T464] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 31.107199][ T464] Read of size 1 at addr ffff88811535abf8 by task syz.4.63/464 [ 31.113674][ T6] usb 4-1: 1:1 : bogus bTerminalLink 8 [ 31.114726][ T464] [ 31.114735][ T464] CPU: 1 PID: 464 Comm: syz.4.63 Not tainted syzkaller #0 [ 31.129612][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.133473][ T6] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 31.139668][ T464] Call Trace: [ 31.149595][ T464] [ 31.152532][ T464] __dump_stack+0x21/0x30 [ 31.156877][ T464] dump_stack_lvl+0x110/0x170 [ 31.161541][ T464] ? show_regs_print_info+0x20/0x20 [ 31.166738][ T464] ? load_image+0x3e0/0x3e0 [ 31.171253][ T464] ? unwind_get_return_address+0x4d/0x90 [ 31.176887][ T464] print_address_description+0x7f/0x2c0 [ 31.182435][ T464] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 31.188946][ T464] kasan_report+0xf1/0x140 [ 31.193368][ T464] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 31.199893][ T464] __asan_report_load1_noabort+0x14/0x20 [ 31.205526][ T464] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 31.211854][ T464] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 31.218010][ T464] ? xfrm_netlink_rcv+0x72/0x90 [ 31.222862][ T464] ? netlink_unicast+0x876/0xa40 [ 31.227808][ T464] ? netlink_sendmsg+0x879/0xb80 [ 31.232751][ T464] ? ____sys_sendmsg+0x5b7/0x8f0 [ 31.237713][ T464] ? ___sys_sendmsg+0x236/0x2e0 [ 31.242571][ T464] ? x64_sys_call+0x4b/0x9a0 [ 31.247166][ T464] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.253235][ T464] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 31.259399][ T464] xfrm_policy_inexact_insert+0x70/0x1130 [ 31.265118][ T464] ? __kasan_check_write+0x14/0x20 [ 31.270232][ T464] ? _raw_spin_lock_bh+0x94/0xf0 [ 31.275168][ T464] ? policy_hash_bysel+0x13f/0x6f0 [ 31.280280][ T464] xfrm_policy_insert+0x126/0x9a0 [ 31.285307][ T464] ? xfrm_policy_construct+0x54f/0x1f00 [ 31.290860][ T464] xfrm_add_policy+0x4ed/0x850 [ 31.295624][ T464] ? xfrm_dump_sa_done+0xc0/0xc0 [ 31.300558][ T464] xfrm_user_rcv_msg+0x4dc/0x7b0 [ 31.305494][ T464] ? xfrm_netlink_rcv+0x90/0x90 [ 31.310378][ T464] ? avc_has_perm_noaudit+0x490/0x490 [ 31.315758][ T464] ? x64_sys_call+0x4b/0x9a0 [ 31.320354][ T464] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 31.325724][ T464] netlink_rcv_skb+0x1f5/0x440 [ 31.330490][ T464] ? xfrm_netlink_rcv+0x90/0x90 [ 31.335346][ T464] ? netlink_ack+0xb50/0xb50 [ 31.339940][ T464] ? wait_for_completion_killable_timeout+0x10/0x10 [ 31.346538][ T464] ? __netlink_lookup+0x387/0x3b0 [ 31.351563][ T464] xfrm_netlink_rcv+0x72/0x90 [ 31.356338][ T464] netlink_unicast+0x876/0xa40 [ 31.361104][ T464] netlink_sendmsg+0x879/0xb80 [ 31.365867][ T464] ? netlink_getsockopt+0x530/0x530 [ 31.371083][ T464] ? do_futex+0xde8/0x2800 [ 31.375497][ T464] ? security_socket_sendmsg+0x82/0xa0 [ 31.380952][ T464] ? netlink_getsockopt+0x530/0x530 [ 31.386144][ T464] ____sys_sendmsg+0x5b7/0x8f0 [ 31.390942][ T464] ? __sys_sendmsg_sock+0x40/0x40 [ 31.395981][ T464] ? import_iovec+0x7c/0xb0 [ 31.400483][ T464] ___sys_sendmsg+0x236/0x2e0 [ 31.405161][ T464] ? __sys_sendmsg+0x280/0x280 [ 31.409926][ T464] ? __fdget+0x1a1/0x230 [ 31.414169][ T464] __x64_sys_sendmsg+0x206/0x2f0 [ 31.419106][ T464] ? ___sys_sendmsg+0x2e0/0x2e0 [ 31.423980][ T464] ? __kasan_check_write+0x14/0x20 [ 31.429092][ T464] ? switch_fpu_return+0x15d/0x2c0 [ 31.434205][ T464] x64_sys_call+0x4b/0x9a0 [ 31.438620][ T464] do_syscall_64+0x4c/0xa0 [ 31.443047][ T464] ? clear_bhb_loop+0x50/0xa0 [ 31.447725][ T464] ? clear_bhb_loop+0x50/0xa0 [ 31.452406][ T464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.458307][ T464] RIP: 0033:0x7fcb10a10819 [ 31.462724][ T464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.482351][ T464] RSP: 002b:00007fcb0f46b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.490792][ T464] RAX: ffffffffffffffda RBX: 00007fcb10c89fa0 RCX: 00007fcb10a10819 [ 31.498761][ T464] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 31.506730][ T464] RBP: 00007fcb10aa6c91 R08: 0000000000000000 R09: 0000000000000000 [ 31.514699][ T464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.522671][ T464] R13: 00007fcb10c8a038 R14: 00007fcb10c89fa0 R15: 00007ffe55849138 [ 31.530655][ T464] [ 31.533671][ T464] [ 31.535993][ T464] Allocated by task 464: [ 31.540225][ T464] __kasan_kmalloc+0xda/0x110 [ 31.544897][ T464] __kmalloc+0x13d/0x2c0 [ 31.549133][ T464] sk_prot_alloc+0xed/0x320 [ 31.553634][ T464] sk_alloc+0x38/0x430 [ 31.557703][ T464] pfkey_create+0x12a/0x660 [ 31.562202][ T464] __sock_create+0x38d/0x7a0 [ 31.566792][ T464] __sys_socket+0xec/0x190 [ 31.571207][ T464] __x64_sys_socket+0x7a/0x90 [ 31.575886][ T464] x64_sys_call+0x8c5/0x9a0 [ 31.580384][ T464] do_syscall_64+0x4c/0xa0 [ 31.584797][ T464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.590690][ T464] [ 31.593015][ T464] The buggy address belongs to the object at ffff88811535a800 [ 31.593015][ T464] which belongs to the cache kmalloc-1k of size 1024 [ 31.607067][ T464] The buggy address is located 1016 bytes inside of [ 31.607067][ T464] 1024-byte region [ffff88811535a800, ffff88811535ac00) [ 31.620509][ T464] The buggy address belongs to the page: [ 31.626139][ T464] page:ffffea000454d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115358 [ 31.636370][ T464] head:ffffea000454d600 order:3 compound_mapcount:0 compound_pincount:0 [ 31.644688][ T464] flags: 0x4000000000010200(slab|head|zone=1) [ 31.650765][ T464] raw: 4000000000010200 ffffea00044a9800 0000000200000002 ffff888100043080 [ 31.659362][ T464] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 31.667948][ T464] page dumped because: kasan: bad access detected [ 31.674361][ T464] page_owner tracks the page as allocated [ 31.680073][ T464] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 103, ts 5178191681, free_ts 0 [ 31.698141][ T464] post_alloc_hook+0x192/0x1b0 [ 31.702921][ T464] prep_new_page+0x1c/0x110 [ 31.707429][ T464] get_page_from_freelist+0x2d3a/0x2dc0 [ 31.712981][ T464] __alloc_pages+0x1a2/0x460 [ 31.717576][ T464] new_slab+0xa1/0x4d0 [ 31.721648][ T464] ___slab_alloc+0x381/0x810 [ 31.726237][ T464] __slab_alloc+0x49/0x90 [ 31.730562][ T464] __kmalloc_track_caller+0x169/0x2c0 [ 31.736391][ T464] __alloc_skb+0x21a/0x740 [ 31.740817][ T464] netlink_sendmsg+0x611/0xb80 [ 31.745588][ T464] ____sys_sendmsg+0x5b7/0x8f0 [ 31.750359][ T464] ___sys_sendmsg+0x236/0x2e0 [ 31.755035][ T464] __x64_sys_sendmsg+0x206/0x2f0 [ 31.759988][ T464] x64_sys_call+0x4b/0x9a0 [ 31.764432][ T464] do_syscall_64+0x4c/0xa0 [ 31.768853][ T464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.774763][ T464] page_owner free stack trace missing [ 31.780139][ T464] [ 31.782476][ T464] Memory state around the buggy address: [ 31.788102][ T464] ffff88811535aa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.796158][ T464] ffff88811535ab00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.804213][ T464] >ffff88811535ab80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 31.812284][ T464] ^ [ 31.820284][ T464] ffff88811535ac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.828336][ T464] ffff88811535ac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.836671][ T464] ================================================================== [ 31.844734][ T464] Disabling lock debugging due to kernel taint [ 31.851756][ T6] usb 4-1: unit 5 not found! [ 31.856599][ T6] usb 4-1: unit 3: unexpected type 0x0d [ 31.893956][ T303] usb 2-1: Using ep0 maxpacket: 16 [ 31.900956][ T6] usb 4-1: USB disconnect, device number 4 [ 31.943367][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.954395][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.964199][ T332] usb 3-1: Using ep0 maxpacket: 8 [ 31.969409][ T20] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.978515][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.987306][ T20] usb 1-1: config 0 descriptor?? [ 32.013368][ T303] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.024931][ T303] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.031525][ T303] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 32.041023][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.049714][ T303] usb 2-1: config 0 descriptor?? [ 32.083380][ T332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.094219][ T332] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 32.103378][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.111890][ T332] usb 3-1: config 0 descriptor?? [ 32.123849][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.153839][ T332] usb 3-1: Found UVC 0.00 device (2833:0201) [ 32.160780][ T332] usb 3-1: No valid video chain found. [ 32.354543][ T455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 32.414861][ T332] usb 3-1: USB disconnect, device number 7 [ 32.463894][ T20] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 32.473810][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input4 [ 32.534763][ T303] hid-generic 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 32.555260][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 32.555271][ T30] audit: type=1400 audit(1775283191.125:165): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=590 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.583765][ T20] keytouch 0003:0926:3333.0009: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 32.598719][ T30] audit: type=1400 audit(1775283191.125:166): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=590 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.621915][ T30] audit: type=1400 audit(1775283191.125:167): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=590 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.665558][ T42] usb 1-1: USB disconnect, device number 4 [ 32.993693][ T332] usb 2-1: USB disconnect, device number 5