last executing test programs: 4.675718545s ago: executing program 3 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0xc18c0014}) 4.624124217s ago: executing program 3 (id=61): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x15) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) close(0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x303}, "f70800", "39566f5a05150335e586650debb4e60f13ba7806e031698086ea35736b9493af", "00008916", "8705be5300"}, 0x38) 4.624018357s ago: executing program 3 (id=62): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0xf) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0xc) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r0, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 4.623980107s ago: executing program 3 (id=63): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000001c0)=""/157, &(0x7f0000000180)=0x9d) 4.623914917s ago: executing program 3 (id=64): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588e2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.067903125s ago: executing program 0 (id=80): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r2, &(0x7f0000000280)=""/51, 0x33) 3.012075347s ago: executing program 0 (id=81): unshare(0x400) socket$nl_audit(0x10, 0x3, 0x9) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 3.011901867s ago: executing program 0 (id=82): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000201050000000000000000000200000853e54f24f208b2c00ed9d9"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 3.011529858s ago: executing program 0 (id=83): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x40, 0xe, 0x8, "6deb7eca77126a9f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.60715869s ago: executing program 3 (id=84): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x1, 0x87, 0x7ffc0201}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.406561516s ago: executing program 1 (id=85): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x67df0df7, @mcast1, 0xb73f}, 0x1c, 0x0}}], 0x2, 0x4001c00) 1.343637671s ago: executing program 1 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 1.343516191s ago: executing program 1 (id=87): unshare(0x22020600) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) 1.300180321s ago: executing program 1 (id=88): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x2) write(r4, &(0x7f0000000280)='0', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.2621986s ago: executing program 1 (id=89): capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000100)={0x0, 0x2eec, 0x0, 0x0, 0x1, 0x1000036}) r0 = syz_open_procfs(0x0, &(0x7f0000008240)='attr\x00') openat(r0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b) 1.200126044s ago: executing program 1 (id=90): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000014c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x40, 0x19, 0x2, "b80d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 796.496606ms ago: executing program 0 (id=91): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x7f0}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000026c0)=""/92, 0x5c}], 0x1}, 0x8}], 0x2, 0x10000, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 676.160304ms ago: executing program 0 (id=92): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x10, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) 128.06344ms ago: executing program 2 (id=95): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000b40)=[{0x0, 0x300}, {&(0x7f0000000540)=""/75, 0x4b}], 0x2, 0x0, 0xfffffffe) 79.263551ms ago: executing program 2 (id=96): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$MON_IOCG_STATS(r2, 0xc0109207, 0x0) 60.733656ms ago: executing program 2 (id=97): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536", 0x50}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423bce", 0x5b}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086a1a2e7f72a", 0x52}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e56b9ba420baffca4", 0x51}, {&(0x7f0000000580)="fb411a9c85180744d674c3699fcb27d2e189c6", 0x13}, {&(0x7f0000000640)="1cc96615eecaacfeb350b8076b6c81828f6cdf330cb6539f08559aac557883119bb42271c062c2b26c2ad805621611135174ea1fda23d1b330707712f0a6727094a6c9aed535e59d97ed4b742ac7c3bd29c5a66d576c5a0bb72826a3ec940c52a66bc0d72a103aace82852fc24e74c54f32186595a", 0x75}], 0x7) write(r0, &(0x7f0000001e00)="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", 0x34a) 171.559µs ago: executing program 2 (id=98): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x4e1f, 0x7, @mcast1, 0xabdf}}, 0x1, 0xd}, 0x90) 66.7µs ago: executing program 2 (id=99): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 0s ago: executing program 2 (id=100): r0 = syz_usb_connect$hid(0x5, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x20, 0xc, 0x28, {0x28, 0x23, "f70ba381cb4f5f3ce5960eb57b0086548d8311dca0560fb30d1f3854f365c5b1d43ee44fbf6f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.207079][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 21.207101][ T36] audit: type=1400 audit(1790834528.220:59): avc: denied { transition } for pid=275 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.212927][ T36] audit: type=1400 audit(1790834528.220:60): avc: denied { noatsecure } for pid=275 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.217738][ T36] audit: type=1400 audit(1790834528.230:61): avc: denied { write } for pid=275 comm="sh" path="pipe:[1568]" dev="pipefs" ino=1568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.221757][ T36] audit: type=1400 audit(1790834528.230:62): avc: denied { rlimitinh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.225230][ T36] audit: type=1400 audit(1790834528.230:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 29.526599][ T36] audit: type=1400 audit(1790834536.540:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.530134][ T287] cgroup: Unknown subsys name 'net' [ 29.549280][ T36] audit: type=1400 audit(1790834536.540:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.576722][ T36] audit: type=1400 audit(1790834536.580:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.577243][ T287] cgroup: Unknown subsys name 'devices' [ 29.702877][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.708565][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.823589][ T36] audit: type=1400 audit(1790834536.840:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.846894][ T36] audit: type=1400 audit(1790834536.840:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.872024][ T36] audit: type=1400 audit(1790834536.840:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.890387][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.903968][ T36] audit: type=1400 audit(1790834536.930:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.929504][ T36] audit: type=1400 audit(1790834536.930:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.939701][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.955424][ T36] audit: type=1400 audit(1790834536.940:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.989524][ T36] audit: type=1400 audit(1790834536.940:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.869036][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.876184][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.883347][ T296] bridge_slave_0: entered allmulticast mode [ 30.889777][ T296] bridge_slave_0: entered promiscuous mode [ 30.900572][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.907643][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.914846][ T295] bridge_slave_0: entered allmulticast mode [ 30.921235][ T295] bridge_slave_0: entered promiscuous mode [ 30.927662][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.934814][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.942013][ T295] bridge_slave_1: entered allmulticast mode [ 30.948285][ T295] bridge_slave_1: entered promiscuous mode [ 30.954419][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.961484][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.968574][ T296] bridge_slave_1: entered allmulticast mode [ 30.974873][ T296] bridge_slave_1: entered promiscuous mode [ 30.981079][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.988153][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.995344][ T294] bridge_slave_0: entered allmulticast mode [ 31.001691][ T294] bridge_slave_0: entered promiscuous mode [ 31.009608][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.016712][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.023830][ T294] bridge_slave_1: entered allmulticast mode [ 31.030370][ T294] bridge_slave_1: entered promiscuous mode [ 31.086974][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.094130][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.101315][ T297] bridge_slave_0: entered allmulticast mode [ 31.107612][ T297] bridge_slave_0: entered promiscuous mode [ 31.114204][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.121302][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.128393][ T297] bridge_slave_1: entered allmulticast mode [ 31.134846][ T297] bridge_slave_1: entered promiscuous mode [ 31.269614][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.276734][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.284082][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.291158][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.299292][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.306379][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.313738][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.320804][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.352633][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.359734][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.367187][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.374268][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.393780][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.400904][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.408259][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.415375][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.437408][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.445023][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.452476][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.459695][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.467707][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.475098][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.482726][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.490103][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.508080][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.515194][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.522854][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.529890][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.560764][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.567871][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.585246][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.592341][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.601210][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.608294][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.626881][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.633994][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.650619][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.657717][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.672694][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.679749][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.702459][ T294] veth0_vlan: entered promiscuous mode [ 31.709868][ T296] veth0_vlan: entered promiscuous mode [ 31.731766][ T296] veth1_macvtap: entered promiscuous mode [ 31.745552][ T294] veth1_macvtap: entered promiscuous mode [ 31.789112][ T295] veth0_vlan: entered promiscuous mode [ 31.798238][ T297] veth0_vlan: entered promiscuous mode [ 31.808978][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.842459][ T295] veth1_macvtap: entered promiscuous mode [ 31.857540][ T297] veth1_macvtap: entered promiscuous mode [ 31.912875][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.214396][ T332] Zero length message leads to an empty skb [ 32.258335][ T338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 32.540083][ T317] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.545415][ T339] overlayfs: failed to resolve './bus': -2 [ 32.705823][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.736245][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.756362][ T317] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.779905][ T317] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.799330][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.813307][ T317] usb 3-1: config 0 descriptor?? [ 32.912000][ T344] tipc: Started in network mode [ 32.918173][ T344] tipc: Node identity fe880000000000000000000000000004, cluster identity 4711 [ 32.928980][ T344] tipc: Enabling of bearer rejected, failed to enable media [ 33.068410][ T347] process 'syz.3.12' launched './file0' with NULL argv: empty string added [ 33.177890][ T361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 33.186989][ T361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 33.224809][ T317] usbhid 3-1:0.0: can't add hid device: -71 [ 33.234826][ T317] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.244925][ T317] usb 3-1: USB disconnect, device number 2 [ 33.470039][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.621643][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.631980][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.643174][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 33.652375][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 33.660435][ T10] usb 2-1: SerialNumber: syz [ 33.872942][ T10] usb 2-1: 0:2 : does not exist [ 33.885547][ T10] usb 2-1: USB disconnect, device number 2 [ 33.902969][ T372] tipc: Started in network mode [ 33.907923][ T372] tipc: Node identity ac1414aa, cluster identity 4711 [ 33.915058][ T372] tipc: Enabling of bearer rejected, failed to enable media [ 33.931156][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.350070][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.501068][ T10] usb 1-1: config 2 has an invalid interface number: 36 but max is 0 [ 34.515821][ T10] usb 1-1: config 2 has an invalid descriptor of length 183, skipping remainder of the config [ 34.526197][ T10] usb 1-1: config 2 has no interface number 0 [ 34.532637][ T10] usb 1-1: config 2 interface 36 has no altsetting 0 [ 34.540844][ T10] usb 1-1: New USB device found, idVendor=05c7, idProduct=3000, bcdDevice=69.9a [ 34.550224][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.560744][ T10] usb 1-1: Product: syz [ 34.564987][ T10] usb 1-1: Manufacturer: syz [ 34.569612][ T10] usb 1-1: SerialNumber: syz [ 34.580034][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 34.580051][ T36] audit: type=1400 audit(1790834541.600:162): avc: denied { mmap_zero } for pid=392 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 34.610581][ T36] audit: type=1400 audit(1790834541.630:163): avc: denied { block_suspend } for pid=390 comm="syz.2.26" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.820033][ T66] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.971218][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.982243][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.992070][ T66] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 35.002459][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.011554][ T66] usb 2-1: config 0 descriptor?? [ 35.304371][ T10] cdc_acm 1-1:2.36: Zero length descriptor references [ 35.312633][ T10] cdc_acm 1-1:2.36: probe with driver cdc_acm failed with error -22 [ 35.323052][ T10] usb 1-1: USB disconnect, device number 2 [ 35.399675][ T399] loop8: detected capacity change from 0 to 8 [ 35.416803][ T36] audit: type=1326 audit(1790834542.430:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=396 comm="syz.0.27" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69a319e159 code=0x0 [ 35.464021][ T36] audit: type=1400 audit(1790834542.480:165): avc: denied { append } for pid=396 comm="syz.0.27" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.553793][ T400] kvm: kvm [396]: vcpu1, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 35.619634][ T66] usbhid 2-1:0.0: can't add hid device: -32 [ 35.630061][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 35.920125][ T317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.071121][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.083077][ T317] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 36.092292][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.106615][ T317] usb 3-1: Product: syz [ 36.111215][ T317] usb 3-1: Manufacturer: syz [ 36.116005][ T317] usb 3-1: SerialNumber: syz [ 36.232578][ T36] audit: type=1400 audit(1790834543.250:166): avc: denied { read write } for pid=419 comm="syz.0.34" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.257182][ T36] audit: type=1400 audit(1790834543.250:167): avc: denied { open } for pid=419 comm="syz.0.34" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.281489][ T36] audit: type=1400 audit(1790834543.280:168): avc: denied { ioctl } for pid=419 comm="syz.0.34" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.332148][ T66] usb 3-1: USB disconnect, device number 3 [ 36.405403][ T425] netlink: 'syz.3.36': attribute type 12 has an invalid length. [ 36.453467][ T36] audit: type=1400 audit(1790834543.470:169): avc: denied { bind } for pid=427 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.540473][ T36] audit: type=1400 audit(1790834543.560:170): avc: denied { bind } for pid=435 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.575773][ T36] audit: type=1400 audit(1790834543.590:171): avc: denied { ioctl } for pid=437 comm="syz.3.42" path="socket:[3813]" dev="sockfs" ino=3813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.850011][ T443] netlink: 104 bytes leftover after parsing attributes in process `syz.2.44'. [ 37.530056][ T312] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.585525][ T85] usb 2-1: USB disconnect, device number 3 [ 37.680147][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 37.686779][ T312] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 37.695227][ T312] usb 3-1: config 179 has no interface number 0 [ 37.701605][ T312] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 37.712975][ T312] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 37.724442][ T312] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 37.735763][ T312] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 37.745991][ T312] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 37.759369][ T312] usb 3-1: config 179 interface 65 has no altsetting 0 [ 37.766281][ T312] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 37.770122][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.775356][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.794491][ T312] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input4 [ 37.930119][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 37.936530][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 37.948287][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 37.959351][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 37.969643][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 37.980788][ T85] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.988360][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 38.001931][ T317] usb 3-1: USB disconnect, device number 4 [ 38.001969][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 38.016191][ T317] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 38.027878][ T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 38.036990][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.045078][ T10] usb 4-1: Product: syz [ 38.049408][ T10] usb 4-1: Manufacturer: syz [ 38.054539][ T10] usb 4-1: SerialNumber: syz [ 38.061975][ T10] usb 4-1: config 0 descriptor?? [ 38.069663][ T66] rust_binder: 465: undelivered TRANSACTION_COMPLETE [ 38.086313][ T66] rust_binder: 465: undelivered TRANSACTION_ERROR: 29189 [ 38.140025][ T85] usb 2-1: Using ep0 maxpacket: 32 [ 38.146626][ T85] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 38.156627][ T85] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 38.166420][ T85] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.174392][ T85] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 38.183614][ T85] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.191686][ T85] usb 2-1: Product: syz [ 38.195906][ T85] usb 2-1: Manufacturer: syz [ 38.200724][ T85] usb 2-1: SerialNumber: syz [ 38.206029][ T85] usb 2-1: config 0 descriptor?? [ 38.594622][ T496] loop8: detected capacity change from 0 to 8 [ 39.050138][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.112946][ T528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 39.201092][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.211334][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.222261][ T66] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.236948][ T66] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 39.246140][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.254274][ T66] usb 3-1: Product: syz [ 39.258518][ T66] usb 3-1: Manufacturer: syz [ 39.263173][ T66] usb 3-1: SerialNumber: syz [ 39.370080][ T85] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.521086][ T85] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 39.530281][ T85] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.538949][ T85] usb 1-1: config 0 descriptor?? [ 40.523317][ T10] usb 4-1: USB disconnect, device number 2 [ 40.539607][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 40.539624][ T36] audit: type=1326 audit(1790834547.550:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.3.84" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26159e159 code=0x7ffc0000 [ 40.571043][ T36] audit: type=1326 audit(1790834547.550:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.3.84" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26159e159 code=0x7ffc0000 [ 40.597484][ T36] audit: type=1326 audit(1790834547.550:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.3.84" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd26155e98e code=0x7ffc0000 [ 40.622952][ T36] audit: type=1326 audit(1790834547.550:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.3.84" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd26159ddeb code=0x7ffc0000 [ 40.648014][ T36] audit: type=1326 audit(1790834547.550:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.3.84" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd26159ddeb code=0x7ffc0000 [ 40.673036][ T36] audit: type=1326 audit(1790834547.570:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.3.84" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd26159ddeb code=0x7ffc0000 [ 40.698021][ T36] audit: type=1326 audit(1790834547.570:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.3.84" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd26159ddeb code=0x7ffc0000 [ 40.704684][ T317] usb 2-1: USB disconnect, device number 4 [ 40.770312][ T36] audit: type=1326 audit(1790834547.790:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=534 comm="syz.3.84" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd26159ddeb code=0x7ffc0000 [ 40.774257][ T85] usb 1-1: Cannot set autoneg [ 40.800934][ T36] audit: type=1400 audit(1790834547.820:203): avc: denied { create } for pid=540 comm="syz.1.87" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.806503][ T85] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 40.838538][ T85] usb 1-1: USB disconnect, device number 3 [ 40.847165][ T36] audit: type=1400 audit(1790834547.850:204): avc: denied { ioctl } for pid=540 comm="syz.1.87" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4963 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.882111][ T545] capability: warning: `syz.1.89' uses 32-bit capabilities (legacy support in use) [ 40.900043][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.051294][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.062502][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 41.071591][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.080353][ T10] usb 4-1: config 0 descriptor?? [ 41.150035][ T66] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.289344][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 41.295495][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 41.300183][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 41.307558][ T10] usb 4-1: USB disconnect, device number 3 [ 41.315748][ T66] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 41.324401][ T66] usb 2-1: config 0 has no interface number 0 [ 41.332629][ T66] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 41.343109][ T66] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 41.355068][ T66] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 41.364311][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.372421][ T66] usb 2-1: Product: syz [ 41.376776][ T66] usb 2-1: Manufacturer: syz [ 41.381488][ T66] usb 2-1: SerialNumber: syz [ 41.386977][ T66] usb 2-1: config 0 descriptor?? [ 41.392312][ T547] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 41.399585][ T547] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 41.609025][ T547] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 41.616356][ T547] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 41.660039][ T312] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.730036][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.810027][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 41.816440][ T312] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 41.824949][ T312] usb 1-1: config 0 has no interface number 0 [ 41.831253][ T66] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 41.840991][ T312] usb 1-1: config 0 interface 184 has no altsetting 0 [ 41.849773][ T312] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 41.859495][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.868055][ T312] usb 1-1: Product: syz [ 41.872474][ T312] usb 1-1: Manufacturer: syz [ 41.879003][ T312] usb 1-1: SerialNumber: syz [ 41.886137][ T554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 41.887647][ T312] usb 1-1: config 0 descriptor?? [ 41.900457][ T554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.93'. [ 41.906011][ T85] usb 3-1: USB disconnect, device number 5 [ 41.915712][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.926765][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 41.936540][ T312] smsc75xx v1.0.0 [ 41.938759][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.949486][ T10] usb 4-1: config 0 descriptor?? [ 42.380070][ T85] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.519206][ T312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 42.530081][ T85] usb 3-1: Using ep0 maxpacket: 8 [ 42.531579][ T85] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.535755][ T312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 42.547020][ T85] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.569164][ T85] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 42.578316][ T85] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.587277][ T85] usb 3-1: config 0 descriptor?? [ 42.770850][ T10] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 42.778833][ T10] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 42.797457][ C1] ------------[ cut here ]------------ [ 42.802975][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 42.811645][ C1] index 255 is out of range for type 'const int[34]' [ 42.818351][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 42.818397][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.818421][ C1] Call Trace: [ 42.818429][ C1] [ 42.818438][ C1] __dump_stack+0x21/0x30 [ 42.818479][ C1] dump_stack_lvl+0x140/0x1c0 [ 42.818504][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.818550][ C1] ? common_startup_64+0x13b/0x157 [ 42.818586][ C1] dump_stack+0x19/0x20 [ 42.818621][ C1] ubsan_epilogue+0xe/0x40 [ 42.818635][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 42.818663][ C1] aiptek_irq+0x208d/0x2a00 [ 42.818715][ C1] ? _raw_spin_unlock+0x45/0x60 [ 42.818739][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 42.818769][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 42.818788][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 42.818805][ C1] dummy_timer+0xa3f/0x4900 [ 42.818850][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 42.818876][ C1] ? timerqueue_del+0xd7/0x130 [ 42.818915][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 42.818941][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 42.818958][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 42.819007][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 42.819041][ C1] ? read_tsc+0xd/0x20 [ 42.819074][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 42.819095][ C1] hrtimer_run_softirq+0x159/0x560 [ 42.819111][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 42.819163][ C1] handle_softirqs+0x1aa/0x620 [ 42.819189][ C1] __irq_exit_rcu+0x47/0xb0 [ 42.819216][ C1] irq_exit_rcu+0xd/0x30 [ 42.819232][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 42.819256][ C1] [ 42.819261][ C1] [ 42.819267][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 42.819313][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 42.819348][ C1] Code: cc cc cc cc cc cc cc b8 fb 7f 3f 21 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 42.819372][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 42.819395][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366df00 RCX: ffffffff85a5753d [ 42.819408][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000679ec [ 42.819418][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 42.819449][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 42.819467][ C1] R13: 1ffff110206cdbe0 R14: dffffc0000000000 R15: ffffffff87ececa8 [ 42.819487][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 42.819526][ C1] default_idle+0x17/0x30 [ 42.819540][ C1] arch_cpu_idle+0xd/0x20 [ 42.819553][ C1] default_idle_call+0x3e/0x80 [ 42.819567][ C1] do_idle+0x2fc/0x570 [ 42.819607][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 42.819636][ C1] cpu_startup_entry+0x47/0x60 [ 42.819664][ C1] start_secondary+0x12e/0x140 [ 42.819692][ C1] common_startup_64+0x13b/0x157 [ 42.819718][ C1] [ 42.819724][ C1] ---[ end trace ]--- [ 43.112481][ C1] ------------[ cut here ]------------ [ 43.117985][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 43.126599][ C1] index 256 is out of range for type 'const int[34]' [ 43.133280][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 43.133310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.133325][ C1] Call Trace: [ 43.133333][ C1] [ 43.133348][ C1] __dump_stack+0x21/0x30 [ 43.133376][ C1] dump_stack_lvl+0x140/0x1c0 [ 43.133421][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.133454][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 43.133486][ C1] dump_stack+0x19/0x20 [ 43.133508][ C1] ubsan_epilogue+0xe/0x40 [ 43.133522][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 43.133568][ C1] aiptek_irq+0x1f3c/0x2a00 [ 43.133606][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 43.133638][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 43.133657][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 43.133673][ C1] dummy_timer+0xa3f/0x4900 [ 43.133717][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 43.133751][ C1] ? timerqueue_del+0xd7/0x130 [ 43.133791][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 43.133816][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 43.133834][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 43.133885][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 43.133919][ C1] ? read_tsc+0xd/0x20 [ 43.133952][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 43.133973][ C1] hrtimer_run_softirq+0x159/0x560 [ 43.133989][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 43.134039][ C1] handle_softirqs+0x1aa/0x620 [ 43.134065][ C1] __irq_exit_rcu+0x47/0xb0 [ 43.134092][ C1] irq_exit_rcu+0xd/0x30 [ 43.134107][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 43.134130][ C1] [ 43.134135][ C1] [ 43.134142][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 43.134189][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 43.134224][ C1] Code: cc cc cc cc cc cc cc b8 fb 7f 3f 21 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 43.134248][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 43.134263][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366df00 RCX: ffffffff85a5753d [ 43.134276][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000000679ec [ 43.134286][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 43.134319][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 43.134337][ C1] R13: 1ffff110206cdbe0 R14: dffffc0000000000 R15: ffffffff87ececa8 [ 43.134357][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 43.134398][ C1] default_idle+0x17/0x30 [ 43.134411][ C1] arch_cpu_idle+0xd/0x20 [ 43.134425][ C1] default_idle_call+0x3e/0x80 [ 43.134439][ C1] do_idle+0x2fc/0x570 [ 43.134474][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 43.134505][ C1] cpu_startup_entry+0x47/0x60 [ 43.134530][ C1] start_secondary+0x12e/0x140 [ 43.134562][ C1] common_startup_64+0x13b/0x157 [ 43.134588][ C1] [ 43.134594][ C1] ---[ end trace ]--- [ 43.427142][ T66] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 43.444155][ T66] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 43.454804][ T66] asix 2-1:0.34: probe with driver asix failed with error -71 [ 43.464338][ T66] usb 2-1: USB disconnect, device number 5 [ 43.641175][ T85] ryos 0003:1E7D:3138.0001: unknown main item tag 0x2 [ 43.649851][ T85] ryos 0003:1E7D:3138.0001: invalid report_count 46350 [ 43.656864][ T85] ryos 0003:1E7D:3138.0001: item 0 2 1 9 parsing failed [ 43.664084][ T85] ryos 0003:1E7D:3138.0001: parse failed [ 43.669783][ T85] ryos 0003:1E7D:3138.0001: probe with driver ryos failed with error -22 [ 43.739582][ T66] usb 4-1: USB disconnect, device number 4 [ 43.745502][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 43.842028][ T46] usb 3-1: USB disconnect, device number 6 [ 43.865080][ T312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 43.876201][ T312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 43.886002][ T312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 43.895543][ T312] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 43.905092][ T312] usb 1-1: USB disconnect, device number 4