last executing test programs: 5.549348002s ago: executing program 3 (id=7): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4c21, 0x3, @empty, 0xffffff0e}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/4082, 0xff2}, 0xf8}], 0x1, 0x2040, 0x0) 5.486776833s ago: executing program 3 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 5.403675366s ago: executing program 3 (id=11): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 5.357573637s ago: executing program 1 (id=14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"}) r1 = syz_open_pts(r0, 0x48182) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) write$binfmt_elf64(r2, 0x0, 0x0) 5.131540575s ago: executing program 1 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000008, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200282}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.443170457s ago: executing program 4 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff01000000000000000c4100000014001462"], 0x30}}, 0x0) 4.428637718s ago: executing program 4 (id=22): r0 = syz_io_uring_setup(0x231b, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x20000002, 0x3}, &(0x7f0000000280), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x8, 0x2, 0x0) 4.380373509s ago: executing program 4 (id=23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x2e, 0x0, &(0x7f0000000300)) 4.162326316s ago: executing program 1 (id=24): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000940), 0x1, 0x100) read(r1, &(0x7f0000000280)=""/195, 0xc3) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) 4.123935977s ago: executing program 3 (id=25): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 4.05509711s ago: executing program 1 (id=26): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="003001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.05491322s ago: executing program 4 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x1070bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) 4.05469425s ago: executing program 4 (id=28): syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x208000, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 3.602745734s ago: executing program 0 (id=32): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x9, 0x2007fff, 0x1, 0x4, 0x9, 0x80000000, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x702, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0x4, 0x7, 0x10001, 0x100000, 0x762, 0x1, 0xd, 0xe, 0x2b12, 0x80100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fdf, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd3, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x8, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x200004, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x0, 0x10001, 0x0, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x3, 0x2, 0x800084, 0x100, 0x5, 0x2, 0x6, 0xb, 0x3, 0x20006, 0x5, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffdf]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.547231476s ago: executing program 0 (id=33): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000040)='\b', 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) lseek(r1, 0x101, 0x3) 3.546935646s ago: executing program 2 (id=36): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_opts(r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)) 3.537572146s ago: executing program 2 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x118, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x200, 0x20a, 0x278, 0x200, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0xff, 0x0, 0xff000000], [], 'veth1_macvtap\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf4, 0x118, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x45, 0x5}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x324) 3.526168547s ago: executing program 2 (id=38): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 3.374767311s ago: executing program 0 (id=39): syz_usb_connect(0x0, 0xaf, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101217ad620e71a039008440102030109029d00010000100009044a020288dcb20009050602000202000a090582"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 3.154957918s ago: executing program 4 (id=40): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x9c, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x48, 0x499, 0x1039, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x85, 0xe6d65e2c16ddbb6c, 0x7, {0x8, 0xb, 0x2, 0x2, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x2a, 0x3}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x4, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x2, 0x4, 0x4, [0x1, 0x2, 0x2, 0x0, 0x2]}, @processing_unit={0x9, 0x24, 0x8, 0x3, 0x1, [0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x1, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x0, 0x28, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x10, 0x8000}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.112109414s ago: executing program 3 (id=41): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.094773234s ago: executing program 3 (id=42): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.058182826s ago: executing program 1 (id=43): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc2, 0x53, 0x3d, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f3, 0x8, 0x8, 0x33, 0xff, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x1}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x9, 0x0, 0xbb, 0x4, 0x1d, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x8, 0x1000000000000010, 0x2, 0x4, 0x0, 0x3, 0x4000000000000000], 0x10000, 0x2200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 933.340639ms ago: executing program 1 (id=44): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 879.239902ms ago: executing program 0 (id=45): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="9451", 0x2}], 0x1}}], 0x2, 0x8000) 879.003692ms ago: executing program 0 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}], 0x3}, 0x20008b88) 878.862232ms ago: executing program 0 (id=47): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x80840) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/82) 504.718664ms ago: executing program 2 (id=48): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 15.575279ms ago: executing program 2 (id=49): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x6, &(0x7f0000000040)=[{0x8001, 0x5, 0x7, 0x7ffc0001}, {0x8, 0xd, 0x81, 0x8}, {0x5b01, 0x4, 0x7, 0x9}, {0xc000, 0x40, 0x1, 0x8001}, {0x7fff, 0xf, 0xc, 0x7}, {0x7ff, 0x0, 0xff, 0x5}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0x0, 0x2c, &(0x7f0000000180)=""/44}, {0x0, 0xffa, &(0x7f0000001d80)=""/4090}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x2000}}}}}}, 0x0) 0s ago: executing program 2 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}], 0x4, 0x2000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 22.345483][ T30] audit: type=1400 audit(1781691242.025:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.349469][ T277] cgroup: Unknown subsys name 'net' [ 22.368778][ T30] audit: type=1400 audit(1781691242.035:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.396188][ T30] audit: type=1400 audit(1781691242.055:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.396727][ T277] cgroup: Unknown subsys name 'devices' [ 22.538323][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.544021][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.654309][ T30] audit: type=1400 audit(1781691242.335:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.677606][ T30] audit: type=1400 audit(1781691242.335:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.702399][ T30] audit: type=1400 audit(1781691242.335:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.721267][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.734456][ T30] audit: type=1400 audit(1781691242.415:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.759959][ T30] audit: type=1400 audit(1781691242.415:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.792639][ T30] audit: type=1400 audit(1781691242.475:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.818227][ T30] audit: type=1400 audit(1781691242.475:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.818264][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.472304][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.479579][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.487260][ T285] device bridge_slave_0 entered promiscuous mode [ 23.495260][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.502450][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.510010][ T285] device bridge_slave_1 entered promiscuous mode [ 23.567568][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.574650][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.582140][ T286] device bridge_slave_0 entered promiscuous mode [ 23.605063][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.612188][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.619744][ T287] device bridge_slave_0 entered promiscuous mode [ 23.626518][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.633574][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.641107][ T286] device bridge_slave_1 entered promiscuous mode [ 23.664503][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.671646][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.679173][ T287] device bridge_slave_1 entered promiscuous mode [ 23.710523][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.717635][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.725114][ T288] device bridge_slave_0 entered promiscuous mode [ 23.734709][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.741831][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.749324][ T288] device bridge_slave_1 entered promiscuous mode [ 23.763883][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.771012][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.778520][ T289] device bridge_slave_0 entered promiscuous mode [ 23.788106][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.795168][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.802603][ T289] device bridge_slave_1 entered promiscuous mode [ 23.955253][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.962358][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.969755][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.976823][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.995360][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.002466][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.009789][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.016855][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.052960][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.060066][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.067385][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.074432][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.086010][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.093104][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.100412][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.107469][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.117698][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.124766][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.132104][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.139173][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.171127][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.178709][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.186117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.194062][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.201390][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.208569][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.215711][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.223308][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.230892][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.238258][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.245494][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.267907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.276098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.284362][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.291452][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.299412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.307753][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.314838][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.322282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.330290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.348323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.362433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.370932][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.377999][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.385542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.393943][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.401045][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.408521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.416849][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.423899][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.454901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.465334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.472935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.481471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.489809][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.496884][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.504262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.512400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.520408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.528482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.536515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.544642][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.551716][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.559168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.567362][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.574386][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.593061][ T286] device veth0_vlan entered promiscuous mode [ 24.602228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.610723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.619081][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.626144][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.634355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.642532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.650518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.658965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.667306][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.674337][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.682021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.690402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.698490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.706849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.715150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.723313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.731608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.739260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.752342][ T289] device veth0_vlan entered promiscuous mode [ 24.766391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.775016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.783672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.792704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.800958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.809103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.817209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.824719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.835754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.844363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.855991][ T286] device veth1_macvtap entered promiscuous mode [ 24.865907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.874417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.882830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.891016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.899254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.912530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.921038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.932245][ T289] device veth1_macvtap entered promiscuous mode [ 24.953375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.962475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.971133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.979834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.988442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.997293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.005734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.014323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.022700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.031918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.040563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.051385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.059447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.069747][ T288] device veth0_vlan entered promiscuous mode [ 25.076007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.083602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.091224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.099392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.112054][ T287] device veth0_vlan entered promiscuous mode [ 25.121316][ T285] device veth0_vlan entered promiscuous mode [ 25.128371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.135944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.144375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.152562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.160679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.169052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.178498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.186068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.202486][ T287] device veth1_macvtap entered promiscuous mode [ 25.209781][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 25.219119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.228041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.237300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.250562][ T288] device veth1_macvtap entered promiscuous mode [ 25.262629][ T285] device veth1_macvtap entered promiscuous mode [ 25.270611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.279403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.288487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.297097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.305322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.319584][ T308] Zero length message leads to an empty skb [ 25.326502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.334939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.343519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.352155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.428480][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.437097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.463036][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.471655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.631549][ T320] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 26.076503][ T26] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.547002][ T320] syz.3.4 (320) used greatest stack depth: 21736 bytes left [ 26.569779][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.578448][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.588766][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.597738][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.634141][ T328] device syzkaller0 entered promiscuous mode [ 26.667729][ T334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.836256][ T26] usb 3-1: config 0 has no interfaces? [ 26.841900][ T26] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 26.854235][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.886555][ T26] usb 3-1: config 0 descriptor?? [ 27.010346][ T351] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 27.262688][ T356] input: syz0 as /devices/virtual/input/input4 [ 27.319435][ T358] input: syz0 as /devices/virtual/input/input5 [ 27.404416][ T360] kvm: pic: single mode not supported [ 27.467286][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 27.467302][ T30] audit: type=1400 audit(1781691247.155:125): avc: denied { prog_load } for pid=362 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.534913][ T30] audit: type=1400 audit(1781691247.155:126): avc: denied { bpf } for pid=362 comm="syz.4.19" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.573608][ T30] audit: type=1400 audit(1781691247.155:127): avc: denied { perfmon } for pid=362 comm="syz.4.19" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.638970][ T30] audit: type=1400 audit(1781691247.295:128): avc: denied { ioctl } for pid=365 comm="syz.4.20" path="socket:[16581]" dev="sockfs" ino=16581 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.708505][ T30] audit: type=1400 audit(1781691247.355:129): avc: denied { write } for pid=367 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.763496][ T30] audit: type=1400 audit(1781691247.355:130): avc: denied { read } for pid=367 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.798615][ T30] audit: type=1400 audit(1781691247.445:131): avc: denied { setopt } for pid=371 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.028442][ T30] audit: type=1400 audit(1781691247.715:132): avc: denied { ioctl } for pid=380 comm="syz.4.27" path="socket:[15891]" dev="sockfs" ino=15891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.376703][ T30] audit: type=1400 audit(1781691247.845:133): avc: denied { create } for pid=384 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.396363][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.404491][ T30] audit: type=1400 audit(1781691247.845:134): avc: denied { connect } for pid=384 comm="syz.4.28" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.449002][ T391] binder: 390:391 unknown command 0 [ 28.454335][ T391] binder: 390:391 ioctl c0306201 200000000080 returned -22 [ 28.477388][ T313] usb 3-1: USB disconnect, device number 2 [ 28.484627][ T391] binder: BINDER_SET_CONTEXT_MGR already set [ 28.490979][ T391] binder: 390:391 ioctl 4018620d 200000000040 returned -16 [ 28.526256][ T290] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.646241][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 28.766297][ T26] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 28.776132][ T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 28.786122][ T26] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 28.786750][ T290] usb 2-1: Using ep0 maxpacket: 32 [ 28.796926][ T26] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 28.815050][ T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 28.824152][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.916271][ T290] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 28.924420][ T290] usb 2-1: config 0 has no interface number 0 [ 28.930830][ T290] usb 2-1: config 0 interface 12 has no altsetting 0 [ 28.946452][ T313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.996350][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.096314][ T290] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 29.105430][ T290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.113621][ T290] usb 2-1: Product: syz [ 29.117958][ T290] usb 2-1: Manufacturer: syz [ 29.122575][ T290] usb 2-1: SerialNumber: syz [ 29.127868][ T290] usb 2-1: config 0 descriptor?? [ 29.176286][ T412] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.186237][ T313] usb 3-1: Using ep0 maxpacket: 8 [ 29.236228][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 29.306247][ T313] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 29.314381][ T313] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 29.325633][ T313] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 29.335674][ T313] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 29.346953][ T313] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 29.357424][ T313] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 29.370513][ T20] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 29.378710][ T313] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 29.387815][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.398014][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.406212][ T20] usb 1-1: config 0 has no interface number 0 [ 29.412340][ T20] usb 1-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 29.423011][ T20] usb 1-1: config 0 interface 74 has no altsetting 0 [ 29.546379][ T412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.557460][ T412] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 29.566551][ T412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.575427][ T412] usb 5-1: config 0 descriptor?? [ 29.596323][ T20] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 29.605440][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.613513][ T20] usb 1-1: Product: syz [ 29.618509][ T20] usb 1-1: Manufacturer: syz [ 29.623120][ T20] usb 1-1: SerialNumber: syz [ 29.628437][ T20] usb 1-1: config 0 descriptor?? [ 29.916296][ T412] usbhid 5-1:0.0: can't add hid device: -71 [ 29.922349][ T412] usbhid: probe of 5-1:0.0 failed with error -71 [ 29.929793][ T412] usb 5-1: USB disconnect, device number 2 [ 30.387073][ T412] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.670774][ T313] usb 1-1: USB disconnect, device number 2 [ 30.746292][ T412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.757307][ T412] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 30.766396][ T412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.775145][ T412] usb 5-1: config 0 descriptor?? [ 30.994442][ T318] usb 4-1: USB disconnect, device number 2 [ 31.039276][ T26] usb 2-1: USB disconnect, device number 2 [ 31.406287][ T318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.476246][ T60] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 31.556239][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.614828][ T313] usb 3-1: USB disconnect, device number 3 [ 31.706277][ T412] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 31.714212][ T412] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 31.856306][ T60] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 31.864486][ T60] usb 1-1: config 0 has no interface number 0 [ 31.870641][ T60] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 31.936368][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.947355][ T26] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.956528][ T318] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 31.965774][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.973878][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.982195][ T318] usb 4-1: Product: syz [ 31.986663][ T26] usb 2-1: config 0 descriptor?? [ 31.991703][ T318] usb 4-1: Manufacturer: syz [ 31.996360][ T318] usb 4-1: SerialNumber: syz [ 32.006329][ T60] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 32.015382][ T60] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 32.024478][ T60] usb 1-1: Product: syz [ 32.029360][ T60] usb 1-1: SerialNumber: syz [ 32.034616][ T60] usb 1-1: config 0 descriptor?? [ 32.076849][ T60] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 32.236224][ C0] ================================================================================ [ 32.245550][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 32.254174][ C0] index 259 is out of range for type 'const int[34]' [ 32.260869][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 32.267898][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.277968][ C0] Call Trace: [ 32.281264][ C0] [ 32.284123][ C0] __dump_stack+0x21/0x30 [ 32.288483][ C0] dump_stack_lvl+0x110/0x170 [ 32.293172][ C0] ? show_regs_print_info+0x20/0x20 [ 32.298382][ C0] dump_stack+0x15/0x20 [ 32.302546][ C0] ubsan_epilogue+0xe/0x40 [ 32.306975][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 32.312706][ C0] aiptek_irq+0x2045/0x29b0 [ 32.317219][ C0] ? kcov_remote_start+0x217/0x350 [ 32.322338][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 32.327729][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 32.332977][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 32.337846][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 32.343758][ C0] dummy_timer+0xa34/0x31d0 [ 32.348277][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 32.353481][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 32.358684][ C0] call_timer_fn+0x38/0x290 [ 32.363198][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 32.368411][ C0] __run_timers+0x637/0x9a0 [ 32.372955][ C0] ? calc_index+0x200/0x200 [ 32.377468][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 32.382338][ C0] run_timer_softirq+0x6a/0xf0 [ 32.387111][ C0] handle_softirqs+0x250/0x560 [ 32.391885][ C0] ? irqtime_account_irq+0xbe/0x390 [ 32.397086][ C0] __irq_exit_rcu+0x52/0xf0 [ 32.401600][ C0] irq_exit_rcu+0x9/0x10 [ 32.405848][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 32.411481][ C0] [ 32.414420][ C0] [ 32.417387][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 32.423374][ C0] RIP: 0010:default_idle+0xf/0x20 [ 32.428412][ C0] Code: 8c 4b ff ff ff 4c 89 f7 e8 6e d1 f5 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d 43 22 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 32.448025][ C0] RSP: 0018:ffffffff86607d78 EFLAGS: 00000246 [ 32.454105][ C0] RAX: 00000000000057aa RBX: ffffffff8661c400 RCX: 00000000000057aa [ 32.462080][ C0] RDX: 0000000000000001 RSI: ffffffff856380e0 RDI: ffffffff856380a0 [ 32.470055][ C0] RBP: ffffffff86607d78 R08: ffff8881f7038c73 R09: 1ffff1103ee0718e [ 32.478030][ C0] R10: dffffc0000000000 R11: ffffed103ee0718f R12: 0000000000000000 [ 32.486011][ C0] R13: 1ffffffff0cc3880 R14: dffffc0000000000 R15: dffffc0000000000 [ 32.494076][ C0] arch_cpu_idle+0xa/0x10 [ 32.498425][ C0] default_idle_call+0x71/0x1d0 [ 32.503290][ C0] do_idle+0x368/0x620 [ 32.507365][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 32.512573][ C0] ? radix_tree_lookup+0x248/0x290 [ 32.517696][ C0] ? debug_smp_processor_id+0x17/0x20 [ 32.523089][ C0] cpu_startup_entry+0x18/0x20 [ 32.527858][ C0] rest_init+0x10a/0x130 [ 32.532109][ C0] ? time_init+0x40/0x40 [ 32.536355][ C0] arch_call_rest_init+0xe/0x10 [ 32.541207][ C0] start_kernel+0x46d/0x4e0 [ 32.545717][ C0] x86_64_start_reservations+0x2a/0x30 [ 32.551183][ C0] x86_64_start_kernel+0x5b/0x60 [ 32.557177][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 32.563147][ C0] [ 32.566207][ C0] ================================================================================ [ 32.566415][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 32.575513][ C0] ================================================================== [ 32.575524][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x2063/0x29b0 [ 32.575559][ C0] Read of size 4 at addr ffffffff857edcac by task swapper/0/0 [ 32.584956][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 32.589546][ C0] [ 32.589553][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 32.589575][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.589588][ C0] Call Trace: [ 32.589596][ C0] [ 32.600722][ T26] usb 2-1: USB disconnect, device number 3 [ 32.604611][ C0] __dump_stack+0x21/0x30 [ 32.646724][ C0] dump_stack_lvl+0x110/0x170 [ 32.651413][ C0] ? show_regs_print_info+0x20/0x20 [ 32.656736][ C0] ? load_image+0x3f0/0x3f0 [ 32.661286][ C0] ? dump_stack_lvl+0x134/0x170 [ 32.666178][ C0] print_address_description+0x7f/0x2c0 [ 32.671761][ C0] ? aiptek_irq+0x2063/0x29b0 [ 32.676453][ C0] kasan_report+0x10f/0x150 [ 32.680965][ C0] ? aiptek_irq+0x2063/0x29b0 [ 32.685661][ C0] __asan_report_load4_noabort+0x14/0x20 [ 32.691299][ C0] aiptek_irq+0x2063/0x29b0 [ 32.695811][ C0] ? kcov_remote_start+0x217/0x350 [ 32.700943][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 32.706348][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 32.711562][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 32.716427][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 32.722326][ C0] dummy_timer+0xa34/0x31d0 [ 32.726843][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 32.732074][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 32.737301][ C0] call_timer_fn+0x38/0x290 [ 32.741820][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 32.747026][ C0] __run_timers+0x637/0x9a0 [ 32.751541][ C0] ? calc_index+0x200/0x200 [ 32.756051][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 32.760919][ C0] run_timer_softirq+0x6a/0xf0 [ 32.765759][ C0] handle_softirqs+0x250/0x560 [ 32.770573][ C0] ? irqtime_account_irq+0xbe/0x390 [ 32.775801][ C0] __irq_exit_rcu+0x52/0xf0 [ 32.780326][ C0] irq_exit_rcu+0x9/0x10 [ 32.784593][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 32.790249][ C0] [ 32.793209][ C0] [ 32.796168][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 32.802171][ C0] RIP: 0010:default_idle+0xf/0x20 [ 32.807220][ C0] Code: 8c 4b ff ff ff 4c 89 f7 e8 6e d1 f5 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d 43 22 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 32.826932][ C0] RSP: 0018:ffffffff86607d78 EFLAGS: 00000246 [ 32.833018][ C0] RAX: 00000000000057aa RBX: ffffffff8661c400 RCX: 00000000000057aa [ 32.841003][ C0] RDX: 0000000000000001 RSI: ffffffff856380e0 RDI: ffffffff856380a0 [ 32.848994][ C0] RBP: ffffffff86607d78 R08: ffff8881f7038c73 R09: 1ffff1103ee0718e [ 32.856986][ C0] R10: dffffc0000000000 R11: ffffed103ee0718f R12: 0000000000000000 [ 32.864972][ C0] R13: 1ffffffff0cc3880 R14: dffffc0000000000 R15: dffffc0000000000 [ 32.872971][ C0] arch_cpu_idle+0xa/0x10 [ 32.877319][ C0] default_idle_call+0x71/0x1d0 [ 32.882186][ C0] do_idle+0x368/0x620 [ 32.886272][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 32.891487][ C0] ? radix_tree_lookup+0x248/0x290 [ 32.896619][ C0] ? debug_smp_processor_id+0x17/0x20 [ 32.902005][ C0] cpu_startup_entry+0x18/0x20 [ 32.906800][ C0] rest_init+0x10a/0x130 [ 32.911073][ C0] ? time_init+0x40/0x40 [ 32.915341][ C0] arch_call_rest_init+0xe/0x10 [ 32.920203][ C0] start_kernel+0x46d/0x4e0 [ 32.924719][ C0] x86_64_start_reservations+0x2a/0x30 [ 32.930194][ C0] x86_64_start_kernel+0x5b/0x60 [ 32.935149][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 32.941060][ C0] [ 32.944091][ C0] [ 32.946429][ C0] The buggy address belongs to the variable: [ 32.952409][ C0] .str.24+0xc/0x20 [ 32.956237][ C0] [ 32.958576][ C0] Memory state around the buggy address: [ 32.964215][ C0] ffffffff857edb80: 00 f9 f9 f9 f9 f9 f9 f9 00 02 f9 f9 00 00 00 00 [ 32.972338][ C0] ffffffff857edc00: 00 03 f9 f9 f9 f9 f9 f9 05 f9 f9 f9 07 f9 f9 f9 [ 32.980412][ C0] >ffffffff857edc80: 00 05 f9 f9 04 f9 f9 f9 00 f9 f9 f9 07 f9 f9 f9 [ 32.988484][ C0] ^ [ 32.993896][ C0] ffffffff857edd00: 06 f9 f9 f9 07 f9 f9 f9 00 00 00 00 00 00 00 00 [ 33.001973][ C0] ffffffff857edd80: f9 f9 f9 f9 00 00 f9 f9 00 01 f9 f9 00 01 f9 f9 [ 33.010042][ C0] ================================================================== [ 33.018118][ C0] Disabling lock debugging due to kernel taint [ 33.024285][ C0] ================================================================================ [ 33.033571][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 33.042178][ C0] index 260 is out of range for type 'const int[34]' [ 33.048863][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 [ 33.057284][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.067358][ C0] Call Trace: [ 33.070694][ C0] [ 33.073552][ C0] __dump_stack+0x21/0x30 [ 33.077913][ C0] dump_stack_lvl+0x110/0x170 [ 33.082640][ C0] ? show_regs_print_info+0x20/0x20 [ 33.087874][ C0] dump_stack+0x15/0x20 [ 33.092781][ C0] ubsan_epilogue+0xe/0x40 [ 33.097240][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 33.102998][ C0] aiptek_irq+0x1f14/0x29b0 [ 33.107537][ C0] ? kcov_remote_start+0x217/0x350 [ 33.112675][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 33.118063][ C0] usb_hcd_giveback_urb+0x11d/0x3f0 [ 33.123284][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 33.128151][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 33.134061][ C0] dummy_timer+0xa34/0x31d0 [ 33.138598][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 33.143820][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 33.149034][ C0] call_timer_fn+0x38/0x290 [ 33.153565][ C0] ? dummy_free_streams+0x5c0/0x5c0 [ 33.158786][ C0] __run_timers+0x637/0x9a0 [ 33.163317][ C0] ? calc_index+0x200/0x200 [ 33.167844][ C0] ? sched_clock_cpu+0x18/0x3d0 [ 33.172712][ C0] run_timer_softirq+0x6a/0xf0 [ 33.177495][ C0] handle_softirqs+0x250/0x560 [ 33.182280][ C0] ? irqtime_account_irq+0xbe/0x390 [ 33.187496][ C0] __irq_exit_rcu+0x52/0xf0 [ 33.192026][ C0] irq_exit_rcu+0x9/0x10 [ 33.196296][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 33.201950][ C0] [ 33.204901][ C0] [ 33.207844][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 33.213845][ C0] RIP: 0010:default_idle+0xf/0x20 [ 33.218901][ C0] Code: 8c 4b ff ff ff 4c 89 f7 e8 6e d1 f5 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d 43 22 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 33.238523][ C0] RSP: 0018:ffffffff86607d78 EFLAGS: 00000246 [ 33.244616][ C0] RAX: 00000000000057aa RBX: ffffffff8661c400 RCX: 00000000000057aa [ 33.252606][ C0] RDX: 0000000000000001 RSI: ffffffff856380e0 RDI: ffffffff856380a0 [ 33.260604][ C0] RBP: ffffffff86607d78 R08: ffff8881f7038c73 R09: 1ffff1103ee0718e [ 33.268599][ C0] R10: dffffc0000000000 R11: ffffed103ee0718f R12: 0000000000000000 [ 33.276591][ C0] R13: 1ffffffff0cc3880 R14: dffffc0000000000 R15: dffffc0000000000 [ 33.284591][ C0] arch_cpu_idle+0xa/0x10 [ 33.289033][ C0] default_idle_call+0x71/0x1d0 [ 33.293909][ C0] do_idle+0x368/0x620 [ 33.297996][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 33.303216][ C0] ? radix_tree_lookup+0x248/0x290 [ 33.308345][ C0] ? debug_smp_processor_id+0x17/0x20 [ 33.313740][ C0] cpu_startup_entry+0x18/0x20 [ 33.318523][ C0] rest_init+0x10a/0x130 [ 33.322788][ C0] ? time_init+0x40/0x40 [ 33.327050][ C0] arch_call_rest_init+0xe/0x10 [ 33.331921][ C0] start_kernel+0x46d/0x4e0 [ 33.336448][ C0] x86_64_start_reservations+0x2a/0x30 [ 33.341933][ C0] x86_64_start_kernel+0x5b/0x60 [ 33.346889][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 33.352804][ C0] [ 33.355834][ C0] ================================================================================ [ 33.367591][ T313] usb 5-1: USB disconnect, device number 3 [ 33.378506][ T20] usb 1-1: USB disconnect, device number 3 [ 33.736237][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.028112][ T318] usb 4-1: USB disconnect, device number 3 [ 34.096306][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.107348][ T26] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 34.116442][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.125087][ T26] usb 2-1: config 0 descriptor?? [ 34.206276][ T26] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 34.213925][ T26] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 34.224666][ T26] usb 2-1: USB disconnect, device number 4