last executing test programs: 6.453797365s ago: executing program 3 (id=4): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.964284061s ago: executing program 2 (id=3): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000001680)=ANY=[@ANYBLOB="0180c200040ebbbbbbbbbbbb08004b00003c00000002001190"], 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2808008, &(0x7f0000001600)={[{@debug}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x10, &(0x7f00000013c0), 0x0, 0x0, 0x1e9, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getrlimit(0x4, &(0x7f0000000380)) getdents64(r7, &(0x7f0000000400)=""/4096, 0xc00) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000100100"}}}]}, 0x48}}, 0x0) 5.95537427s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x24, &(0x7f0000001640)={0x20, 0x14, 0x2f, "aa8671eaa6821dc3673c49b310cd1d8e5afee3298112f2d7a5d913b3d50f1699cd00f7529ad18c53a072dd2fbf3ebf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x234, &(0x7f0000000ac0)=ANY=[]) 5.944060971s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x200, 0x0, 0x1, 0x80000}) 4.525168756s ago: executing program 2 (id=7): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x14, 0x1, 0x3d, 0x2}}, @mark={{0x10, 0x1, 0x24, 0x200}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x34}}], 0x1, 0x8845) 4.224135106s ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x10004e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900150000000000060000000a008900000000"], 0x34}], 0x1, 0x0, 0x0, 0x40080}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000100)=""/113, 0x71}], 0x2, 0x48, 0x7) pipe(&(0x7f00000002c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 3.700576782s ago: executing program 3 (id=9): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xb, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x1c, &(0x7f0000000200)={0x5, 0xf, 0x1c, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x84, 0x2b, 0x4, 0x457, 0x20}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x10001, 0x0, 0x6}]}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.311691525s ago: executing program 2 (id=10): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x18, &(0x7f0000000380)={0x40, 0x6, 0x5, "361ff0214c"}, 0x0, 0x0, 0x0, 0x0}) 2.53083273s ago: executing program 4 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10003, 0x3, 0x6361, 0x5, 0x800, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0xc044004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x2404c890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.256608648s ago: executing program 0 (id=12): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0000000071103e000000000095"], &(0x7f0000000480)='GPL\x00', 0x3}, 0x94) syz_emit_ethernet(0x196, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x160, 0x2b, 0x1, @empty, @local, {[@hopopts={0x2b, 0x2a, '\x00', [@generic={0x7, 0x155, "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"}]}]}}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x480, &(0x7f000000e6c0)={{{@in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010004"], 0x0) syz_usb_connect$uac1(0x6, 0xab, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x3, 0xf0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x404, 0x6, 0x2, 0x5}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x7, 0x2, "9b7f3b"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x3, 0x2, "a09c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0xc0, 0x1, 0x5, "98", 'F'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xf, 0x7, 0xd}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x1, 0xc, {0x7, 0x25, 0x1, 0xc, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf3, 0x3, 0x10, 0x7f, ')'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x5, 0xff, {0x7, 0x25, 0x1, 0xc, 0x9, 0xa8d8}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x7, 0x9, 0x40, 0x2}, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="050f1d00030a02085a0a031001081001080000ff7f00020f0000000000"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c00}}, {0x50, &(0x7f00000001c0)=@string={0x50, 0x3, "04463f6f6cf9e3832809474dc9f341c82048908fba88bdf9e5c66428754a6d520195cefa56962a13024eb9b3bf055eeb2f462a52df8408da2e90f2f6624310124ea702a73cb9b8ce96905abb1c9a"}}, {0x81, &(0x7f0000000240)=@string={0x81, 0x3, "13ce7039b37016404fe6d713cdb0092a739e68cbdfb92521c585c7675c46531b78898d15d5577297c9775dd95476d30cee2ef75d3441302298da2229ef1e7fc034754774d695e344e14cadf11d071a4c649c4d49123dd6c63cd9dc69b7e1d787781ff7561e95245b183ad310c0e50642610c00d51967c15adbc68808eff221"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0xd6, &(0x7f0000000340)=ANY=[@ANYBLOB="d603c5728e1f2d3c99c7b65015c99d1707c913c2e332df60c2fd688ca1697437f4fd20e4c7944bcf89a69261ee2cc2de0e93ed3890026bd7b30d04597e026410fa49807b6f586c89a594534e0eb42feadb623176a0405beebb4861a338bbdc9f01718e9019387e2d03c1367495650829a21805e06a56ffcfc76f39ed4e78d1730ed9ecab12c9cd638da790a9730782f8c8631dd7ea48cf72f825491a90551b5b2007a85bcea3e5686697cf43f15de1f126b5fb7f8258cd3c6ecc0d9f5155a139b67ae22b806e"]}]}) 2.235211469s ago: executing program 4 (id=13): io_setup(0x400, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x7f, &(0x7f0000000100)) 2.076452684s ago: executing program 4 (id=14): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000440)=0x6, 0x4) 2.064494964s ago: executing program 4 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000440)="0b0ec2a1e3", 0x5}, {&(0x7f0000000500)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b805b34d0056282b7ed43e9c6efe6245152417b356ca23162493370e9055e9320279b93aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a000000809658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d449", 0x9a}, {&(0x7f00000030c0)="8ce8c35d7b1affb769fccfa96b01041ba03a20539d616b0700eba4a7a196640add27cc85831f5abb721b68f6b700eab89d44cfa3a3eb4ac273250f2750d9f1861d03fed070d600edd9a7d2bfbb032edf0f7b3965df777f32d1a5c0f42cb754079c257f0418fab16206454d9676efe740258c6714457b908fb47425a79584c44bee29f99bb4aba1c90d2064b471631d5fb166c236f705f8055fca40ec442e8356c224acd58e9ff7c936ad0720593b9befebb3587291c2150265b2b350611c45734dc892c386687f139868cea94d4453da5a0e1e07b79175609aeeb565c0c2be84406d190c1539b3382aa37de9cc5986bd31f5bda1ada205d9d38e5854326f141488ecee0edf4e41857332c50585aafa25d9d0b149795d7191cac117f2f4fc25b1d590a248f8acd4cec1b64f663abbd9f77d02f8c5e70a0fdbb44c8f1aff6eca92d3406d58ae9a19f1d1154d65676cbe46caff113e91b3b5228d5af8a1bc5d4d7de6a69660f59a0d17fc39bfdc1346fa0d4b211a6ecff34deafc3235db007dbb4b37964cf3d77560ac8886e32885342e6142aeb0d6c4a994cb07ae3bb81739c8ec555f5858d320b5f4e90edab743bfdebe54e4bc747a36169b0d428a21b275d1c33336731acefd99aad829744a933cd2a9615c7a42799be5953357cb249d6fa438a2727f5469b0c4a1f9d652492fa69ca47e16bfbfe539bf0eccada921ccc3d5cf93fbc8db54cb8a24c79d5d6843f64294f93e2b3817b355efea20396b07194e25c969f69fa9c9eff8709d7afc038ff5ba69038a6155fa128d3715e388771fbbc32069ad3076750baba0def136fe03faa6df60833321371bfe83341eb1863a1c4b2f8e5d8d58906b1e1e5c0464a3c078eeb707f934c261a20e02a0e160727751d83518a79d8d29aec0056528eddbeb35588f073aefde2238d4d297ad340277ba4b65417f20acc5966d73d96df6bb4618d7688fc438d05352869aa903066e97c67ae4d4e9d56e2b991de05bd801119ab6f74f9b4ab8955f8c4e1ffed109cf5888c0d35af82fee1a65f2b6970b3d88bacf559e65a9775a62b6246b3ac39777b2fd5fc92bec4d5fdc03f6bcd4ce035c68b2c183eb6d5a9d69cef0d67beebf848969905d8c02b1a197c6ee58b8ca86b05af3a933e770ad301f2a89e626023abfc1133528820f9f9a08323d30b5feb0e2fddcecb9de0a5ad37c4fdf39f83324a512178293ce6e628163bd8e314839a35b8160f61be1d8d6eac92235df354ff961c8714d7e5a50f1e0962f64c551061b1c4b6fceda2dde8fa89d04620d957f285ca67e0999fd5fe889f81309e91ffc15a1c0be854b777f10d461e723c86b7b295409c3ff7dfeefbad3de6a4ec05985164d69a5129cfe42b9c8bc15954f1636d97ecce5ed8e9c8f222ef50b15d40326573efdbaca6f8331bdd882e56ca1f150237650a625b5f7be7c970f579f3246f1065656705144869f66837678113846f580782e2be5f7f6053c573714a61a4bc581fb5733cbecd7ce7b4c872df94623dd67f65493961bb33cda5ef5c02460396f31e05b65924ce742f4d95a17ffebdad6ca73b8cc6fe882b95e265ea0167d9761761ae7a710c1be078615d753a7af6bb341bdaaa6295f118081a0d9c292d3593153885683da5009bca5ecf3236779a9da7d3bd70f8f37885e5504b348a541ffcb7e2c564d5e6a1c30801fa5f7973d08d0834fbd0ced14a804d8a03f800580ccd01ee9ccf77a067733b11c75ec6ceea1baf88e9e41da2a449bd0e2777d1bfa780311c5b42575f4c88b6e4466c9ddac823728cff9491f0ceea4dd826ff058460ee80c698f270fb57a2f8ecfe996f149354d609e1cd155252d5b0e921c93586c1148071a2e267b8141af9b9be48633a5eb5594da83180625e506bd96b279e39151606521c6aa31fbc52a963d15192c5e23d0e7e3ddbb2fbe3835a1d0dd51d3d3b9dd32322579505b55dc57c8f44e77916b56e5008377049cc370a91edcc5ab5f79f1649cb153da11d0bfb0a0ca62a9b8d593f1149c8cac5d60a857ad1f30531c7859bd7b17c4c96e42e331d15392819d7423709044d9e02dd87fb2e4dd3428df76ac2c05b0b427cfec7feea2c2755f3bd0c532e75b1a76d5566913484cdab2bef5bdd644fd6c1c0809d3436ee7da8bb07aa15fb843bdbe7253b01566586fb3fda998d8e98d7f95968bff783f6a93b8c4c1383c162d8ea50ea435036c3938574bcf4c9aca432f6e5368e724cba7b2e36fa2eac7d3001cb4171063dd90a7f95a37cb439392944e878957a2df3f7b1e1ad5e275d7b6c8ec6028b941c1a694b54b72502a263e542fffb55d9eb91748ee8a1ac93a55615e0b70466191348fdc9b68c257ec523d334f64db6b3fbd304bd60bcf3de0e80000000000000010a660eec2e22806744c7a2ed8949f5582b1c41e1c2df343cc754787ac4b28a1098f716a0f19ffeb3d5838559a9f345f95893784e39393b869d6abd913394f6d1fc7645548b86c234d886b366b7f91fc55076bb3545c9973f8ae548da4a4665ed8f7b78d1b8a7cf8cdb605a127daa3d4d0ba5df0acbbce2de896f57b933d9a649fb8bf70148495e022090da8951c4156517959a627f906c8da390b1e5ab2ef38ca9c49c3ac5c73b4af7bf875107da27fa8435a84a6dd6ef4128ddbb35a762e34244e30d46529bdeedf66ddd7a1da584811ab3d86fe81bfb1c8430fa9542d116c30d6aba15a9b62d0558487d98cb2f5fc2d18150f405418ecc7d5553a754ae229d56faa2e685d2fa202af63614334b8e4e833bf8d4de6b30fe95208a9ec11c940265f0398f2d60a2675f2ee98e302277f69fedee9fb7a6fe5ebc1d03cf25d0fde7e714ee2e45d85f7541a2985eae4f8000dea290d0e1d4c5d38e9151793cc27e8a97438bed0ccb656ee10721dfce787982f2c89382b8faeec89118fe5cf005a55b8adef86cf2367fa32984a1d4a7fbd8806622d1fabe44ac7c87d24847deb85559e9e530c641db6dc0cd8a62826638633a7b276d47326fdd36cf238b6e8642db7e501b30d82507547dda00c7049e675a6748fe2e8992761fa040cf583e546105bb54be494d2cecd5a7b0b727dfcbc143537d8888e11fd8529a456a03cf09d16d38dd41270470c97ac7e5b24dcc4ccecc168518ec4034ad20758cb9bc489fd767a8b7de80b009d10da4d3d81075f4ab082586e4e8db2bc106087d3fd5fde44945b0e459a46ac5267c1221f1135185d9dcc0ec9475ab1213d6eb083619813388e16a66ed9ecf03624c1aab218eeab3321aa9a6e9254ecc30f83cb36981f6824889128a19699522a7beb45c1662a850360efdef032d21962dbd1d1dd715e569aeddc4f6ab776d81808975034b490030ee8da5d0a52a768fd90af8a61664acc8dc15f2a5e3f915eef1eca89719460918c39fe7243f25fc9507d5dded31c9faee44a145f34fff66d2e08840412b48a9f279d62d50ef10c8dd896a893872acd30ecf5ded1819b35eb84b135a49cccb1b9921cbf16e859b94db500aa395a0e7f53f20111109925f3eec139b16e36a23c9ee2458725c803e78cbf4fd81d5de7d53570b7e1580310a928148c66e50fad8a11d441c1742455db9bc43e2e97775a867ffa86723cb8f8b0b7e1c4401d14e4a5cccb1d774966fc26d2a3460e13b35c05007573470a9d06852af7e98575bace7b218fa4f18f078b9113c10f67ad15fd588794e1de612dd2162f9f592febfa635c424e9afac67978c59325764081654b475c2bf6914e95c922741e537ec0fd7e62325426f18bb3976a210cdca8dc19576360ece1f2ac61c9c183314aaff528f0671f6b6c50778c53aadbb7f6d00129963276247c3b00281b562944b4a38039af5030b71f9c9048550f5be8571d27dd53b515e74a02c1c9f5db09c2fdde4a46cb5865c89975a0f382bf1b4fbc3ebd63ba8882af3efad30a5cd5b55a1acae490dbe4924aa5efbae09121a6ae3e30bd854b9d2827a7ce9686949ce73271bd8abb541e526bbcefc3ca7dfcfa89e91d0bb8d86ea24245a8f43271fcc4e27e934c94bbbb50b0f7ccb6582ab9413b5771597319acbfb6ebb3362a4e37e47b833186be4a15b62461f0a7a98784386d0d0ab34d937711c7654169a06668fbb8e621f29954f77a7ed59000e1e9b5e583a21fb4581ce686bae64f93224ce9949cf822694243dc67c1dbc0e2de33e3245f021c8d678747010c48bcbb2e022bc2e34f4605b6b99a405effd94652d08454b9f33f04e6847cdef21749fad0d9b4ff7ab3e18fbc3ee5414fe5bd45b329bf2b8720dbb267e67a3cafddf8aa9fe9efed23d3c15172ee59af1f111309c417eaad4c02ad510e5d0bd08728777056157da657e3e3cd8936043044e6beb6ef3fe152e8dcaa17993ba710537ccc89e9be6bbd333b5754aef57750e7ca6b70f719febc13bb9bf1336af02b07914fcfc70153cdcea23c8006fd2a8100785fd78b05e9fc23aa1aa9e045c9103d979da99f593f66fcae2a1e97f26042b248afa866c7390c42c6fad44e9f546ceec6df2e076714accf0917d983d33e762aab76561eb460aaa403a637669bcb71499f3deeb5f563827e8fee16f1c3ca969c070f3533f396503923d0ac50fd16c537f04e6f0f7544a3a738b33d8348b6d005e4a2fd913afbc1dc228ffae6209ed12341921e0e74adf076361504a3ce05e6a9005485fe4ac4a7e4f4d5eae7a5657e2c5b123c251b402e62f082e7005f8ec3ef24b9bfc6657165fd750bc1203e4ceb7b47a787accb49a44fc727f1e3f1a070aac91dbf0ba8d9bb7a72f9bb0e3678268fe29d75cdcdce58d6de9f2ccc17fc3ad1f64c3061e9a7010cfe5fc2cba4255228cf0ee66b27ed1b6de034d6feff9735cc2d5a68269c53c94f19b9e3f60694a3885b3de119628c1c8ad5128e8f09ef0463ba7d3758c0a84f0440638af22f93f561dee2a0a45698dc2dd68a65827c51f0d33a47e6753a2ed19088423baa68599bfbde71af9c9cef4e375a166a004878949ac7f12f59c45bc845c7ed0c5a6acf70b75477c54a7bcf97bafe8cd23ec38860ace3237152f2980cf392c47d8beacf112e65bb83872a0da8f62af98ca381e5c47d06a2650ca96ffa21a2f4696b7c3e81da381f8a997a65ec18df04c7ff057f9bd1388c5ab16cf7d0c42b7a8ed75d2e504ea274bda9fa96fc8f3bc36ca967e69838a2ec628cb77a1b5b842fae89d7e784634866a246de8fffe4efcce8f8d0d46a38e685fe254d7ad6f817f8cd11a610ebb298b6442691598704a76e67d86d577c6df3cc35fa181e9fd726c745f97f35f696b38a4439ab8e76f141c06a881db1946dc1b56ea58d52bb86487f6baa4c8c8f8771e3e73fb5a12a7fbaa6da2e0aab0be4aa86d776d5a83115312e650955b4675a7af6f8976d712ad15ca070df98e0fa1c2daa9679aa25739b6136f36d0935d2ffe9d1d967b575169ce1a9b64155806c183e9bef771e7a46ccc7d74a89ba471db5cb75b1da504c1733d5df78b2224d43657d35b1c4943c410fa8d9ebe89ed6a3dc64569bcf5e5c6d07d92f1d5cdc44d750a22772076ea17af16425ab110fe512f3", 0xf61}], 0x3}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000780)=0x40) 2.049068755s ago: executing program 4 (id=16): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000840)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce6236501dd64c37eeaeec2d13731c56a864da45a465e64de685887f27f84f348e4149ccee167605da33c412d53af0256fc973711375855a0a610654714099f4d540f9cba457b1813b73957a98aa2cc497c1e3ea00", 0x79, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 2.036452555s ago: executing program 4 (id=17): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000980)=ANY=[@ANYBLOB="4003cd00000049fefefc7ac8ad305c626f8e8420e0752d67dba79937abb515fd00000d3b28fb73a61b03f5b25524523cefe81a4a4d8a7d087e3b31b50bfbebb5d166c19710d6b3bf1079c34fe9d4b38837824852a07f8ae108a925f5ee39ba4035b63bd08af772777e0d5077b865f40671137bbeeb43720506af94fadf7660a66cad4d6dd0a5dcdcb0ca296dc05ba77162ab2e583df5030a0407"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.002743636s ago: executing program 3 (id=18): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_create(0x3, 0x0, &(0x7f00000005c0)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) timer_getoverrun(r2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffff}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000740)={0xc, 0xffffffffffff8001}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r6, 0x0, 0x0) 1.935821978s ago: executing program 3 (id=19): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x5, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xfffffff2, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x77, 0x385, 0x3ff, 0x100, 0x2, 0x5, 0x4, 0x7, 0xb9, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x5, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x0, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x1, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff29, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x1, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1.926082739s ago: executing program 3 (id=20): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0}) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) 1.827853082s ago: executing program 1 (id=21): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0}) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa9, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, 0x0) 892.394972ms ago: executing program 0 (id=22): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa128100000086dd60fec00000483a00fc0000000000000000000000000000fdff02000800000000000000000000000102009078000000006018b08800000000fe80000000000000000000000000002cfe8000000000000000000000000000aa1100000000000400fafb17c163a3040b7758ba1b5be6d88a2591786d4399fb16ff327df90f71e95d97a280bf225ed8a029fb10feabd9b88ad001feb37513350f9ad5dda1f9b01faba26df5fb8d2c9983e477690b82ae62195339b26047e37c8c25e5d6fff1fbe496dae4cd0556403a710f925acbdca53a9a21fed12a9e2ccf766652fe00e722b01374eaa59d19f6ef44b72630da755660f5926e01200ba01bb69cc0f978499e308a49f948ee40e022e8de19137a97b067c06e045c1191a4eb3efd89059ebfb24e40d620001c347b0b06f772db35d9af066eb4adc5cd21295db7837f2f32610a0a6523a6f8e519687e72a8465b1b4b00f4d4b5167c4173e220393ae370"], 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) r3 = syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0xffffffff, 0x13580, 0x1, 0xc4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r3, 0x54, 0x4, 0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000841) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001"], 0x30}}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000240)={0x40000000}) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xf401) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 427.136166ms ago: executing program 2 (id=23): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 0s ago: executing program 0 (id=24): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x7d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x499, 0x105d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x9, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x15}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x97, "4f47fb0008a8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0xeb, 0x0, {0x7, 0x25, 0x1, 0xc, 0x2, 0xa1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x9, 0xe2, {0x7, 0x25, 0x1, 0xc, 0x2, 0x200}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 23.874454][ T28] audit: type=1400 audit(1781158858.545:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.877768][ T278] cgroup: Unknown subsys name 'net' [ 23.897289][ T28] audit: type=1400 audit(1781158858.545:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.924464][ T28] audit: type=1400 audit(1781158858.575:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.944445][ T278] cgroup: Unknown subsys name 'devices' [ 24.072150][ T278] cgroup: Unknown subsys name 'hugetlb' [ 24.077780][ T278] cgroup: Unknown subsys name 'rlimit' [ 24.182504][ T28] audit: type=1400 audit(1781158858.855:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.205697][ T28] audit: type=1400 audit(1781158858.855:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.230484][ T28] audit: type=1400 audit(1781158858.855:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.254418][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.263229][ T28] audit: type=1400 audit(1781158858.935:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.288622][ T28] audit: type=1400 audit(1781158858.935:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 24.388985][ T28] audit: type=1400 audit(1781158859.055:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.390304][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.414622][ T28] audit: type=1400 audit(1781158859.055:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.627570][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.634675][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.642385][ T286] device bridge_slave_0 entered promiscuous mode [ 25.649689][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.656826][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.664287][ T286] device bridge_slave_1 entered promiscuous mode [ 25.672022][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.679068][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.686537][ T287] device bridge_slave_0 entered promiscuous mode [ 25.696999][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.704070][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.711557][ T287] device bridge_slave_1 entered promiscuous mode [ 25.832950][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.840032][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.847318][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.854376][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.863000][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.870162][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.877528][ T288] device bridge_slave_0 entered promiscuous mode [ 25.887580][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.894764][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.902587][ T288] device bridge_slave_1 entered promiscuous mode [ 25.960629][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.967694][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.975187][ T289] device bridge_slave_0 entered promiscuous mode [ 25.985441][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.992675][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.000215][ T289] device bridge_slave_1 entered promiscuous mode [ 26.051063][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.058125][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.065606][ T290] device bridge_slave_0 entered promiscuous mode [ 26.075377][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.082598][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.090004][ T290] device bridge_slave_1 entered promiscuous mode [ 26.100347][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.107408][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.114765][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.121829][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.202303][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.209649][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.217015][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.224415][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.233530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.241359][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.285454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.293744][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.300807][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.324013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.332263][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.339307][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.354839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.362947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.371355][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.378404][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.385916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.394277][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.401381][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.428903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.454299][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.462137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.471685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.479898][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.486930][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.494316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.502477][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.509492][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.516932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.538003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.565171][ T287] device veth0_vlan entered promiscuous mode [ 26.572322][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.580893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.588275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.597869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.606430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.614947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.623122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.630631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.638774][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.645835][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.653329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.661415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.669551][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.676694][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.684124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.692584][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.711544][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.720035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.735146][ T287] device veth1_macvtap entered promiscuous mode [ 26.745082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.753381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.762027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.770513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.778445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.786805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.794971][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.802644][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.811336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.819457][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.826512][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.833965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.849912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.858267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.866600][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.873647][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.881774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.890351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.898765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.906686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.927006][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.934854][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.942496][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.943573][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 26.953998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.966242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.974917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.983321][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.991733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.999655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.008134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.024919][ T289] device veth0_vlan entered promiscuous mode [ 27.032231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.040746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.048847][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.057646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.071987][ T286] device veth0_vlan entered promiscuous mode [ 27.085737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.094307][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.102888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.111447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.121998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.130160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.139916][ T288] device veth0_vlan entered promiscuous mode [ 27.147784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.155388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.163240][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.171641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.179752][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.187305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.198017][ T290] device veth0_vlan entered promiscuous mode [ 27.209375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.217918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.228078][ T286] device veth1_macvtap entered promiscuous mode [ 27.237542][ T288] device veth1_macvtap entered promiscuous mode [ 27.249653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.257648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.265887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.274088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.282342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.290909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.298510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.306859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.316324][ T290] device veth1_macvtap entered promiscuous mode [ 27.325110][ T289] device veth1_macvtap entered promiscuous mode [ 27.337320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.345222][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.352944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.361473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.370818][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.379074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.392172][ T292] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.402487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.410770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.419063][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.427499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.436002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.444355][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.453607][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.461944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.483247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.492094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.501285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.509547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.574193][ T320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.583209][ T292] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.608929][ T292] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.632133][ T292] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.649488][ T321] loop2: detected capacity change from 0 to 4096 [ 27.660325][ T292] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 27.669880][ T321] EXT4-fs: Ignoring removed mblk_io_submit option [ 27.676785][ T292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.685334][ T321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 27.694118][ T292] usb 4-1: Product: syz [ 27.698373][ T292] usb 4-1: Manufacturer: syz [ 27.703590][ T321] EXT4-fs (loop2): Test dummy encryption mode enabled [ 27.711382][ T292] usb 4-1: SerialNumber: syz [ 27.718118][ T321] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 27.732577][ T292] usb 4-1: selecting invalid altsetting 1 [ 27.738597][ T292] usb 4-1: unit 6 not found! [ 27.744845][ T321] System zones: 0-5 [ 27.766689][ T321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.879922][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.977454][ T333] ======================================================= [ 27.977454][ T333] WARNING: The mand mount option has been deprecated and [ 27.977454][ T333] and is ignored by this kernel. Remove the mand [ 27.977454][ T333] option from the mount to silence this warning. [ 27.977454][ T333] ======================================================= [ 28.050191][ T333] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 28.969895][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.977653][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 28.977667][ T28] audit: type=1400 audit(1781158863.645:113): avc: denied { write } for pid=290 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.017689][ T28] audit: type=1400 audit(1781158863.685:114): avc: denied { remove_name } for pid=290 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.041893][ T28] audit: type=1400 audit(1781158863.685:115): avc: denied { rmdir } for pid=290 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.055271][ T290] EXT4-fs (loop2): unmounting filesystem. [ 29.066241][ T28] audit: type=1400 audit(1781158863.685:116): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 29.090883][ T28] audit: type=1400 audit(1781158863.685:117): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.116272][ T28] audit: type=1400 audit(1781158863.685:118): avc: denied { unlink } for pid=290 comm="syz-executor" name=66696C6507 dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 29.119924][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 29.145684][ T292] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 29.154563][ T6] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 29.162955][ T323] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 29.170858][ T6] usb 2-1: config 0 has no interface number 0 [ 29.177157][ T6] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 29.177810][ T292] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 29.188337][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.205301][ T28] audit: type=1400 audit(1781158863.865:119): avc: denied { write } for pid=336 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.223890][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.224721][ T6] usb 2-1: config 0 interface 196 has no altsetting 0 [ 29.242367][ T292] usb 4-1: USB disconnect, device number 2 [ 29.247076][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.262776][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.281666][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 29.293347][ T19] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.302858][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.311016][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.319702][ T6] usb 2-1: Product: syz [ 29.324157][ T19] usb 1-1: config 0 descriptor?? [ 29.329169][ T6] usb 2-1: Manufacturer: syz [ 29.334716][ T6] usb 2-1: SerialNumber: syz [ 29.340974][ T6] usb 2-1: config 0 descriptor?? [ 29.346195][ T316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 29.426499][ T341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 29.445120][ T28] audit: type=1400 audit(1781158864.095:120): avc: denied { perfmon } for pid=338 comm="syz.2.8" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.467373][ T28] audit: type=1400 audit(1781158864.115:121): avc: denied { write } for pid=338 comm="syz.2.8" name="udp" dev="proc" ino=4026532694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.863302][ T19] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 29.874307][ T323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 29.884647][ T19] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 29.897342][ T323] usb 5-1: not running at top speed; connect to a high speed hub [ 29.908874][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.914529][ T323] usb 5-1: string descriptor 0 read error: -22 [ 29.916495][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.922687][ T323] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 29.938396][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.001689][ T6] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 30.029452][ T28] audit: type=1400 audit(1781158864.695:122): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.130269][ T292] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.169311][ T341] syz.2.8 (341) used greatest stack depth: 21632 bytes left [ 30.197096][ T323] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.319835][ T292] usb 4-1: Using ep0 maxpacket: 8 [ 30.326022][ T292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.333071][ T292] usb 4-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 30.342150][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.351522][ T292] usb 4-1: config 0 descriptor?? [ 30.405895][ T323] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 30.423452][ T323] usb 5-1: USB disconnect, device number 2 [ 30.469871][ T19] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.659806][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 30.666104][ T19] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.677115][ T19] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.688438][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 30.697559][ T19] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 30.705958][ T19] usb 3-1: Product: syz [ 30.710204][ T19] usb 3-1: Manufacturer: syz [ 30.718501][ T19] hub 3-1:4.0: USB hub found [ 30.760220][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.767340][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.774433][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.781509][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.788580][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.795666][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.802768][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.809869][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.816939][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.824024][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.831090][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.838187][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.845377][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.852486][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.859599][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.866669][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.873770][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.880881][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.887950][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.895046][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.902149][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.909221][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.916298][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.923423][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.930530][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.931438][ T19] hub 3-1:4.0: 2 ports detected [ 30.937592][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.949582][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.956680][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.964528][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.971944][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.981910][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.989240][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 30.996387][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.003575][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.010434][ T364] device syzkaller0 entered promiscuous mode [ 31.010976][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.023839][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.026254][ T364] fuse: Bad value for 'fd' [ 31.030934][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.042784][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.049901][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.057000][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.064155][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.071268][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.078356][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.085685][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.092779][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.099893][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.106957][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.114054][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.121126][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.128183][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.135274][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.142659][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.150172][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.157265][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.164378][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.171551][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.178624][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.185715][ T292] appleir 0003:05AC:8240.0002: unknown main item tag 0x0 [ 31.192796][ T292] appleir 0003:05AC:8240.0002: report_id 0 is invalid [ 31.199589][ T292] appleir 0003:05AC:8240.0002: item 0 0 1 8 parsing failed [ 31.207050][ T292] appleir 0003:05AC:8240.0002: parse failed [ 31.213018][ T292] appleir: probe of 0003:05AC:8240.0002 failed with error -22 [ 31.223014][ T292] usb 4-1: USB disconnect, device number 3 [ 31.237528][ T24] usb 1-1: USB disconnect, device number 2 [ 31.511498][ T379] Zero length message leads to an empty skb [ 31.649829][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.664492][ T313] usb 2-1: USB disconnect, device number 2 [ 31.720668][ T313] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 31.739801][ T292] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.831007][ T24] usb 1-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 31.842660][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 31.852007][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.860105][ T39] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 31.867586][ T24] usb 1-1: Product: syz [ 31.871922][ T24] usb 1-1: Manufacturer: syz [ 31.876661][ T24] usb 1-1: SerialNumber: syz [ 31.882497][ T24] usb 1-1: config 0 descriptor?? [ 31.888292][ T24] cdc_acm 1-1:0.0: skipping garbage [ 31.921005][ T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.931968][ T292] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.941485][ T292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.950319][ T292] usb 5-1: config 0 descriptor?? [ 32.050929][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.061994][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.071891][ T313] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 32.079353][ T39] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 32.096371][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.099142][ T19] usb 1-1: USB disconnect, device number 3 [ 32.106989][ T39] usb 4-1: config 0 descriptor?? [ 32.157845][ T331] hub 3-1:4.0: activate --> -90 [ 32.163712][ T292] usbhid 5-1:0.0: can't add hid device: -71 [ 32.169719][ T292] usbhid: probe of 5-1:0.0 failed with error -71 [ 32.177199][ T292] usb 5-1: USB disconnect, device number 3 [ 32.270946][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.282553][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.292421][ T313] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 32.301568][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.311159][ T313] usb 2-1: config 0 descriptor?? [ 32.521920][ T39] hid-generic 0003:0C70:F0B6.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 32.562876][ T39] usb 3-1: USB disconnect, device number 2 [ 32.564080][ T331] usb 3-1-port2: config error [ 32.720824][ T313] hid-generic 0003:0C70:F0B6.0004: hidraw1: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 32.732563][ T292] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.741333][ T405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'. [ 32.774441][ T407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.784235][ T407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.930954][ T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.941914][ T292] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 32.950991][ T292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.959826][ T292] usb 5-1: config 0 descriptor?? [ 32.972638][ T408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.981232][ T408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.040858][ T409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.049447][ T409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.349834][ T331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.530797][ T331] usb 3-1: config 118 interface 0 has no altsetting 0 [ 33.538934][ T331] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 33.548019][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.556090][ T331] usb 3-1: Product: syz [ 33.560317][ T331] usb 3-1: Manufacturer: syz [ 33.564940][ T331] usb 3-1: SerialNumber: syz [ 33.729836][ T323] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.777983][ T331] usb 3-1: USB disconnect, device number 3 [ 33.780515][ T292] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 33.791802][ T292] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input4 [ 33.851688][ T335] usb 2-1: USB disconnect, device number 3 [ 33.910957][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.921942][ T323] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.931076][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.941329][ T323] usb 1-1: config 0 descriptor?? [ 34.150320][ T323] usbhid 1-1:0.0: can't add hid device: -71 [ 34.156819][ T323] usbhid: probe of 1-1:0.0 failed with error -71 [ 34.164146][ T323] usb 1-1: USB disconnect, device number 4 [ 34.178669][ C1] ================================================================================ [ 34.187951][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 34.196641][ C1] index 38062 is out of range for type 'const int[34]' [ 34.203486][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 34.210503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.220560][ C1] Call Trace: [ 34.223843][ C1] [ 34.226684][ C1] __dump_stack+0x21/0x24 [ 34.231047][ C1] dump_stack_lvl+0x110/0x170 [ 34.235733][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.240794][ C1] dump_stack+0x15/0x24 [ 34.244959][ C1] ubsan_epilogue+0xe/0x40 [ 34.249392][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 34.255141][ C1] ? __kasan_check_write+0x14/0x20 [ 34.260273][ C1] aiptek_irq+0x208d/0x29b0 [ 34.264785][ C1] ? kcov_remote_start+0x2c9/0x370 [ 34.269909][ C1] __usb_hcd_giveback_urb+0x364/0x520 [ 34.275307][ C1] usb_hcd_giveback_urb+0x11c/0x410 [ 34.280509][ C1] dummy_timer+0x88c/0x3070 [ 34.285028][ C1] ? __kasan_check_write+0x14/0x20 [ 34.290158][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 34.295096][ C1] ? timerqueue_del+0xd3/0x120 [ 34.299869][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 34.304819][ C1] __hrtimer_run_queues+0x3bb/0x8e0 [ 34.310028][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 34.315146][ C1] hrtimer_run_softirq+0x19b/0x260 [ 34.320260][ C1] handle_softirqs+0x1d7/0x600 [ 34.325032][ C1] ? irqtime_account_irq+0xc4/0x240 [ 34.329895][ T331] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.330240][ C1] __irq_exit_rcu+0x52/0xf0 [ 34.342197][ C1] irq_exit_rcu+0x9/0x10 [ 34.346441][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 34.352064][ C1] [ 34.354991][ C1] [ 34.357922][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 34.363912][ C1] RIP: 0010:default_idle+0xf/0x20 [ 34.368938][ C1] Code: 37 e5 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 34.388547][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 34.394604][ C1] RAX: ffff8881f6f00000 RBX: ffff888100332880 RCX: 5592bf14d49b1d00 [ 34.402570][ C1] RDX: 0000000000000001 RSI: ffffffff85ca8cc0 RDI: ffffffff85ca8c80 [ 34.410541][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 34.418510][ C1] R10: 0000000000000000 R11: ffffffff85023e50 R12: dffffc0000000000 [ 34.426490][ C1] R13: 0000000000000001 R14: ffff888100332880 R15: dffffc0000000000 [ 34.434455][ C1] ? __cfi_default_idle+0x10/0x10 [ 34.439481][ C1] arch_cpu_idle+0x1c/0x20 [ 34.443890][ C1] default_idle_call+0x71/0x1d0 [ 34.448733][ C1] do_idle+0x354/0x640 [ 34.452798][ C1] ? irqentry_exit+0x30/0x40 [ 34.457382][ C1] ? sysvec_call_function_single+0x61/0xc0 [ 34.463196][ C1] ? asm_sysvec_call_function_single+0x1b/0x20 [ 34.469358][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 34.474551][ C1] ? do_idle+0x6/0x640 [ 34.478611][ C1] cpu_startup_entry+0x43/0x60 [ 34.483370][ C1] start_secondary+0x119/0x120 [ 34.488129][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 34.494012][ C1] [ 34.497022][ C1] ================================================================================ [ 34.506283][ C1] ================================================================================ [ 34.511608][ T331] usb 3-1: config 118 interface 0 has no altsetting 0 [ 34.515548][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 34.524570][ T331] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 34.530891][ C1] index 38063 is out of range for type 'const int[34]' [ 34.530904][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 34.539961][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.546765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.553806][ T331] usb 3-1: Product: syz [ 34.561755][ C1] Call Trace: [ 34.561763][ C1] [ 34.561771][ C1] __dump_stack+0x21/0x24 [ 34.571899][ T331] usb 3-1: Manufacturer: syz [ 34.575997][ C1] dump_stack_lvl+0x110/0x170 [ 34.579276][ T331] usb 3-1: SerialNumber: syz [ 34.582127][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.605305][ C1] dump_stack+0x15/0x24 [ 34.609470][ C1] ubsan_epilogue+0xe/0x40 [ 34.613882][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 34.619605][ C1] aiptek_irq+0x1f6d/0x29b0 [ 34.624104][ C1] __usb_hcd_giveback_urb+0x364/0x520 [ 34.629475][ C1] usb_hcd_giveback_urb+0x11c/0x410 [ 34.634671][ C1] dummy_timer+0x88c/0x3070 [ 34.639193][ C1] ? __kasan_check_write+0x14/0x20 [ 34.644306][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 34.649245][ C1] ? timerqueue_del+0xd3/0x120 [ 34.654007][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 34.658942][ C1] __hrtimer_run_queues+0x3bb/0x8e0 [ 34.664209][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 34.669321][ C1] hrtimer_run_softirq+0x19b/0x260 [ 34.674433][ C1] handle_softirqs+0x1d7/0x600 [ 34.679193][ C1] ? irqtime_account_irq+0xc4/0x240 [ 34.684396][ C1] __irq_exit_rcu+0x52/0xf0 [ 34.688894][ C1] irq_exit_rcu+0x9/0x10 [ 34.693129][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 34.698772][ C1] [ 34.701696][ C1] [ 34.704624][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 34.710614][ C1] RIP: 0010:default_idle+0xf/0x20 [ 34.715639][ C1] Code: 37 e5 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 34.730796][ T6] usb 4-1: USB disconnect, device number 4 [ 34.735244][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 34.747117][ C1] RAX: ffff8881f6f00000 RBX: ffff888100332880 RCX: 5592bf14d49b1d00 [ 34.755084][ C1] RDX: 0000000000000001 RSI: ffffffff85ca8cc0 RDI: ffffffff85ca8c80 [ 34.763049][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 34.769864][ T323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.771014][ C1] R10: 0000000000000000 R11: ffffffff85023e50 R12: dffffc0000000000 [ 34.786437][ C1] R13: 0000000000000001 R14: ffff888100332880 R15: dffffc0000000000 [ 34.794405][ C1] ? __cfi_default_idle+0x10/0x10 [ 34.799438][ C1] arch_cpu_idle+0x1c/0x20 [ 34.803871][ C1] default_idle_call+0x71/0x1d0 [ 34.808735][ C1] do_idle+0x354/0x640 [ 34.812803][ C1] ? irqentry_exit+0x30/0x40 [ 34.817411][ C1] ? sysvec_call_function_single+0x61/0xc0 [ 34.823224][ C1] ? asm_sysvec_call_function_single+0x1b/0x20 [ 34.829383][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 34.834577][ C1] ? do_idle+0x6/0x640 [ 34.838670][ C1] cpu_startup_entry+0x43/0x60 [ 34.843434][ C1] start_secondary+0x119/0x120 [ 34.848198][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 34.854101][ C1] [ 34.857110][ C1] ================================================================================ [ 34.878784][ T19] usb 5-1: USB disconnect, device number 4 [ 34.878893][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 34.950850][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.961826][ T323] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 34.970896][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.979844][ T323] usb 1-1: config 0 descriptor?? [ 35.389381][ T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.397891][ T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.820212][ T323] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 35.827807][ T323] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 36.115878][ T39] usb 1-1: USB disconnect, device number 5 [ 36.115907][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 36.288067][ T292] usb 3-1: USB disconnect, device number 4