last executing test programs: 15m46.877784636s ago: executing program 1 (id=558): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000191c0)=0x40003) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000019200)='.\x00', 0x8000, 0x1b6) fanotify_mark(0xffffffffffffffff, 0x2, 0x800003a, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8994, &(0x7f0000000040)={'bond0\x00', @random="0000330c1100"}) 15m44.305935229s ago: executing program 1 (id=565): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r3 = syz_io_uring_setup(0x7890, &(0x7f0000000340)={0x0, 0xd52b, 0x10000, 0x5, 0x240004f}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 15m43.239518666s ago: executing program 1 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000440)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000004c0)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) mount$overlay(0x0, &(0x7f0000000740)='./bus\x00', &(0x7f0000000780), 0x40, &(0x7f00000007c0)) r6 = getpgid(0xffffffffffffffff) getpgrp(r6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x3}}, './file1/file0\x00'}) sendmsg(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000b00)="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", 0xff}, {&(0x7f0000000c00)="9452a0f76bbd35f48e2bc02cec5bccac4fc904d363ba281c5ad93a", 0x1b}, {&(0x7f0000000c40)="cc45a22813decae9014b89650d409c9df05082f2a5705bf02298d4727690605fe1a573dd1fb577637a62622623a85bf9fb515d8df5ee9517c5f314d4c82d3d01df2fc43115d3fd2899daf04446554147fe9cf0a56ef073bd70b8ed60d371738f7937f2ec9cfb0e461f387ca0b2f64668ad42dfa17cffb6d73d1ad1f13b60d1fba16a669e0322b1a31c58307b524703dff6a020ecef01d8fbadf264c01de2da801df0ebe640c7396b4209ffa817e08b10bb4ffe017f7c4327889560defd481aab7780d9b148260f767bdbc8e0aa5d19f18efc33ecf70a9d7df11daba331fc2bd3a53358231e4b0371f1da32e9a15abc3a0951eaa52a214db95dfaa420c4e9b743321d1512fce86cdda158cdee9e4202e2016d0e0438d112e0d80370a88d349db8979b783c1d1f4e725c8b318f5148cae5aede07a10ffe58c9121fab327b17a8aca190b3dab601140fdf671d1599ccc397c8b096a67b23131122bc7205e2e57536d59ba5182f86d26e8fb909d1fd87e5ab61382d20e0cf091aa1eb9ff36dfc05f917119b95abaa7f77764add586d213b79433f44fcb15212c10d0b28837d9e98e51289fd64d3467ef1bc6ec44ee0c64ee45bcdcd4a872ecbdbf5794fc18a6e0757a643c1e8fb533a79831b37b983712eb4d35d046d28ee3f5fdb39bce971aad79cd09034fcb0318439f70e5dd9bb850547d42991634ebfb94008f3762f5fc07a20738be8f8f341093e5bef2fa3f141a7de46c959251e44d0faf2c22184771ceb35ac7b0773981ccc08d3231cfe9e1d6abd6f3800ecceb8ca97180cc891f214293d014230a8997abb8dbda04a6b5e67727558f15ab8ae19bc3d2b3a4158c2c51690dc6ad8a984450d155dab227f457f836587578d4b888b77f407632b7f615de7c750d5154cd65833847c0311c39cc9f5004a749e908441c2456a8b1ea585aa231aa9087059cfae7aac9cfd4f6ed9bfe69782032f6b544604eeaaaace97c05356c81b4eba69469674ea14721a01b8d1d6b59a85e53ee7b12b7794550d7219556dd01f39fc0790d9915bb80bb40f31758ace3df17d23fe892d322c5cce7bbc95052337bf10d22a872bfc4a089b8e0febd03570728d6775366991d3bccd2deb0bec1f5e1f7ba14c2eba4bd6bba3cce1900d7a32df67fe7e369abd257ec74dfac9f110f1c85c1e38d129bb714bf66aebae4e338eebe85bc9e633198862c10f5516aba5926d0356a01af65d95f929df9ac4a817fdeb6f117b9626e519cd54afb3e3371b01ff93aa6ad7fed38038f27cc72c4395a55877244a2f2145a428368cda45759791fe4f55929951a1ac88a0b8724942ebcb3faeec7de3c09d690e0332544ef6bb32271b5ff227b594a7b37bcc1fa5feb700496e9a384fb115d5b36688febdcaeec6361b90e86728a2c271ad7a9455cfb00f6335ae59a39b9f67e08f32adc95b9d583a5651697c7aeaa0f0abae420a7961f0040a9800f663217599c926fc17437779315a88bbafb0ecad0a75509f19c0bf7c628ca38f8b8d958492a41477b92dde0b66dc172f026f92cc835882d30010c539832baadef11231aee87a552a66cfc2bf77e4db9cd2248e08b805b351fcf4f16eeb93229b7114e920b77da0fc85fa5492055e082e479ef90936cbf2cd1da1a75301eb6163346f16df49c9e491f16944d7d600109f06bddfe6ee9394f44cbacd88ecb6fd6e4ed67cdcede0627d88d91f56a3e932318af91d488b8d49b1d8b47d12bf72a4ea691cbcf7d232dd2a066d4f8c169645f36bd42d19e7760351f4be156265c7a0d2abac932de1173324b76f78b880bd055dd44f379db74f69f19460dda087a6ab986e6b25946f886b0298d295afab6d502e74e077938f9b81f7d3ccddfd5f70413ae7274542bb7d8fa60ceadff979691d7d21e746a139a2d58a02876ad08989daa15d349bee9bff1418d9234785495556320aee5c394a768a41fa9c3f344cdf59120664f84bd5e5f0bf3d1c5310ea8ddf5055bdeba4c3845f310a002c33fa03dc3ec804c378d084c6bcbe2d9270b02023338defe061d5b3b593e025f830bf31caf7d21f4541a7fee8aa9ff14c3b8b43571765ab6c7605cd7a2725a0d70ac5b564c8586f12ea9d3b412ce9f3b57ca56add7be83c9cf5ea4ffa096e9c12a8033be17514b178554f735148c68b4f13b2ba5939234c591ccd998a7c67a23ab7666c3ae81d71b846a0e9a3b8e74f9205bce698d24e0212d8103ca811014fd2de1e46a6a0df8ab62bfa179a3fc2c1931318f058a96389e9b6ef3511e475bcf9422e27c3c019c14e26306b4f9ee69fdfa527daf3571c47d58c994a411f923a144b8fe1564d952b64f6037072a1847116718ed59b09c3f31203c026840a7ffd98b59d8e1d6adeea427e48d8fb185ee90b930f1233dfae5ad147d15357c6cc8467169c5bff1545bf9ec9dc2bdd1b62a2e470149bce9d1b6128fe465b4fe59e906038ceaedec92c4ecc24f3a6ca00227933dc69cde3ab66527848b590085ecd9147b76807ce11eaff1ce6bfcfe0ec73b373e9a814dae732f49767e9e3679d0294133cc9af29a80fa02947fc3016125686f8dea0989ec4e23bba43d4e99b7c6c6561527860d002ee0bfae50bed66ae7e51dce974633912740da39ea2fd698efdd724f8dab8c20356f7b6cace225ac954ed7479003485980f515e05759a5ce4fec440674cd27361c341dc4515054cd9f127e9bfb9e010cb2d0cbff4928568456d626e75e1d01082300835cd8050cc91f45ef6121fba0c3f52248c7b201e62fda0c9ba941ceab390144a496c46e66c31ea1409b06cf28d0903a2f9e83f666dd8b8a1d7314f6eaed50114acfde3371a8d01f1a14bc6adff338617f38fa852d8d4004ead2ddf460cacb02aca49cd7c4cc78c5f01f7d88c3a5b01cb60f2997563c0116be3331b730bac0778353f66d28e078f4fcf9f7f21c78f547c162f1577573cb22e90be930560f634f425577f1515856f22e207bd55dcb93e8b00e43406f6d54b91f9e02455d84dc3ed63f311f3452f194cead6b334f2e650af138464589fc16c8fa5dbe53a1da30ac897feef1952443391c9fc4de5a4c163d51aec81bd164e29c40607066081f055e438ba0c2cc42a06007587653a7a730b1abf25039234414deda1253ae37b2500a04bbce670bc499d806fe16f1042cfd7ead7e2b68805fe6bfe609992c23f22356798fc59b107f249ce126606ea7771c813176c2468419a8a9aa73fd9e318dd1ec8963c67a36b37be0ce1bd3f1225bb0681719b9c2542194bf3769d52d7a2801ba0943d1e7791c563f6dcf8ceea10270d2f767c9ab6b82d97ef889e4d5deaf4de20a00ad5df7879b6e50af98c77b0c648ad3ddbe88874e316b6d94a0f8b67c7b85b71c0b415f26988be7aa2f4fe3d0b425b544dd7799047c32c89b485dcdc02877af710b47a6bf647656e457383ffffdec40c6be88b95beaa95e3425d1ee793cd5dbb26d9e86c949f06ad7b6b3f72f6fef982dab775bac1022af95040273dd06ac2e58d475e5b892fc267a159bf7b8a765ea6c0564354bb0ddde7bbb3e2710511b42fece70361f62655be1a7aa38e6d2ff55c2a81c2f77554b843f336176da879fee097bcf0fa35f980adc7f9e6226a02aa43b65acaa10b0078a0fea7f3a33a054feeb88109562d2d54a4e290e0e1a6221489d4a38b4f49673b272c667cbf123bb92d5ab3b543ba1e393a4e4c4c91700cd1b0485dadb479c86313ea40992361f013f60a57344f004318aeb1d74ae76892194d0b3518d604d56bf19615ffaa4583789bba1f6581209792cb08d64d6b317e9da90c880cb71e24d823024ad37a34f3031c8b81fe1105e08c9da09739d7261fce42ef2cd0bdb72699e6d1d1448d36e361ed94cdfda4d30eec00ac84320e8e807e4649e6e71fc819d49d4cdc766286520e5d96daa888874dd7da34a058a4d5db2ca0b0a9fe518bbb2d5dc47afb94e45267af685745edfd76ca3fa82db08a79c23923e42af13247239aa5e7aa740b220b4d672a2617133e8b6f590f0eeac37b24dc32a4408707c22b8eee37a4d002160ebb10e386ab7d981779a12e17ddee8825522651c2f550cd55c6781431642aaf39a20d17ecc8e47285aa2052fd65542ae362af93309a4d9bf4b9b6018979ca020927566b82c6dd3afbb264c0802626b875f9f43570d892190f1f301966c0414a511ea87eec00866d042fd2b079fb9ac2e131df0413f5e128bcbad6ac2cff008f81918ef7051e394676a13bdbcf0f4fcf9137afc40e5e45670097a1868861349508778efbc451dd672d871a11d0dc76404a5e7a46227067321d3019385287ec7132965279991693f19168a9c904ecf192ddd54167dd1106ef286f1a7fd06b81f53ba7c76b42867b610a8a3cffa626ff8280b20ebe6d7ad3211c732b0df280efd42f53c81aa7a17d2e18eaa868da323e310c6ae692a57d20d1505b6dd8458485688606e9e342bc2b494e028d72fa54cf2c597d5868e28ed4e5eb25a9c846a1a0597ad11a319c86c77bf0989b46e16a1fed1692fbf9f7d10f447522deca3d3f386271a253a8ebb493b1524a6d7c65f7314d1b0167052ca0794fd0171a12499d5d8bd6d73c363963f624406a6caef7136893a8ce9cc30fdc230fb1673751db7a54d3472cf2cf2a8f7edcfacba077d3f492b232b28416077b700240518965e54a10694467eafb44337548bebad1b17129ad0b3f75867e4956ceb98a78397a0d9122d5f4cb6a0f6481e515dc291b9fb2defa017481f1ad52614e9436a8d7187509ac5290de49e867f50220f8f7a7cb659655cb00cf047218f92d385c75af22636f169099bbd23dd7927b969b90039b89d0fd48a1a9ea14d575044ee3f4e938e70676da7ac1a77e7ff6cd60554535b7b2091cc535ac755ab8a449f309decf4017e3812da8277581a4746a27be1751f5a82bc75eb498f4169e3b82e878ca5f9fe18fa76aef291954cd1113fef9f16a17789dc740ed856b6cd187feeadef66cf528c21671bafe3a1f8aed161ec11628b7770232c9cc3c6262a7bda88efb2be40638153ee4d1db3170178de97431120102607f0df19b246cfdf1265b31029567feb072b92f9dce6c8b9d839c445ac65309895d61b40da390786ea9e9e5ac7dafa400e7740378027cb5ff30c97c1b50b9a7f4eb4af7b10a246b58ce271f51122ffa535208886152499d89aceabea1053eb40f5501f466da22af4fde81a306b610d4070ac638f068142c9a50d70fd91ff3905ee688f78d887f15f85217e9d380522738a2de4b19fec71dfc36d361deb246aa7255158d978eb91affc546bb822cef977a2e944e659e7b37d3c984d0ea053d5af3b0bc01e74791fbe2a2f7ff24a3b9b0b819f6411107b708f39803ee83793d4d6047af2d03b6f831f09a328c41a0e065f7b064a46c20e54e173a6ffbd969a84afd6a625ae638e05e1190ddb98c4b254b9fbd0be3c9d75aa660e74b9b9c6e435e12180661fd3a927c68c0934eac91172e84dd31a9e1ff72bb08ec85e3b14cf583999399a7b5fd1984316f320acda5b59ef105558f5f9b06699ece16e6d922c3a124015d48fde8d193f457657437db7f4c45322af6c0d0ea873135f45dcc2155c2b3020b3abae116678ee8e50db7b03869990a3819d5d671e60bfb7210e07b4cb8be8d6dde1b1d71e016296f2fd68ed4aa1989e6ae486acc91ad7a5be24b86c87868787635f74fb250acd71868c4d43d2460698b36c28fc610f1af024c44595b6cbad5de2cee87626fad3c8c0dcc52b95431e175585479389ca65bc1f0a39396", 0x1000}, {&(0x7f0000001c40)="0e183c6136838a9922e7c6380889daa5d45283ff8cae6f248fd7abf7639de867fef86935432c2d5ed2299208646b21288ac06038591c697edf5564d4498f30b7a7fde544621a78b17b810e96532d98d7776b82e76d30121ae4641dcfa7151efef6f0b3cb98f78ffaff197b41217413dd30fb166a746e17909bbf3a8ae509aaa7e63899504858301a1ba0db7cc656a92706843d369615975864015d70582d55e402e924fa42cab5331ac4220f75a00ac716cf3165bbfa8c01e810341542e300", 0xbf}, {&(0x7f0000001d00)="896b191b702f1d62985b5acf832eb0669e0c7c4ca183e7f288b8649c0be96119bf41a4bf630998d5cd9781930e9821f72bb6a55ea6809e6abf13fd2caa466e0de70e933761ec16441d932a10", 0x4c}, {&(0x7f0000001d80)="73b6b898094d0e690ded0392fb", 0xd}, {&(0x7f0000001dc0)="bc9a15fb6f506723b37a64a71cb7dfa91000203d37c4314d55a2d055c4b3d1558d77586a4ab79b0b20f6453a413f945b141dca927955e8ac54eab6e15197fb315ea462457ec1efd470af421a47d329e2c0c80e72f9dfdb969b88bea0338d193f2e35a8e6dc2eaadf485152b969e7db50c8370c0b5145b6fdccedd0ff5fe943cebc8156bbc885ca6232a6120f4932aa7361852a63e198cb19f4e7e6b09aa2680f13b702f8af52", 0xa6}, {&(0x7f0000001e80)="ecb46188152b123e1c73f24a50648cea83ed1d0dd28e696b48b4730b348690", 0x1f}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="9fc22634ffa5520544cf6f020cc099840bb92d925d01d2e3", 0x18}], 0xa, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], 0x250}, 0x4000) chdir(&(0x7f0000003180)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000031c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000003200)='./file0\x00', 0x2) 15m41.548103064s ago: executing program 1 (id=571): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m35.293221308s ago: executing program 1 (id=581): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, &(0x7f0000019280)={0x77359400}, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f00000192c0)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 15m34.251522472s ago: executing program 1 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r5 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x3c, r4, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 15m18.57447124s ago: executing program 32 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r5 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x3c, r4, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 22.977860329s ago: executing program 0 (id=3077): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r2, &(0x7f0000001640)="8b", 0x11) 20.863186132s ago: executing program 0 (id=3078): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640)="8b", 0x11) 18.984225386s ago: executing program 0 (id=3083): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x800000000004) r3 = inotify_init() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8010) inotify_add_watch(r3, &(0x7f0000000200)='./cgroup\x00', 0xa000032a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x8000, 0x5a) r5 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000200200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) read$nci(r6, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x109942, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000840)={@loopback, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast}, 0xc) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000580)) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x4, 0xe, 0x7}]}) close_range(r7, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000817000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) io_uring_setup(0x7, &(0x7f00000007c0)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b03, 0x0) 16.920070912s ago: executing program 5 (id=3088): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r2, &(0x7f0000001640)="8b", 0x11) 15.865544636s ago: executing program 5 (id=3089): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.755849538s ago: executing program 4 (id=3090): r0 = socket(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r1 = syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a240c000000000000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a0505030000000000000000000000090401000001023000090401010101023000090501"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r2 = socket(0x1, 0x1, 0x4a9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000005c0), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000600)=0xffffffff) write$dsp(r5, &(0x7f0000000640)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="13af3446f7da49b8820589e415537082bb2532cb0c1dc58ac9a703ada7cabfa910f497fad39e314673fce88aea4e13601bcb5fb2e0bd17fb60ddf8acd8cd0e4ad6060cad852009eb098dee824b6f83ae1246e9bbe4de928aeb1d559fad9729c5ddd43dcadf6afd47c9e36d0d07bb5878c882a8ab6c2f7fe4380ede3d6376568aff74eda609435c7b0351bb06819962cc7a28239dc82258662129cf3be3c83ff13a079ecdc0ef9a4fccbc9169dcb5863727312367798f7def1b87e2f4d376a153db4ab6ce5ffa6e7f41927c8462f021b695e34062eb89449c060bef741703aa", @ANYRESHEX=r1, @ANYRES64=r4, @ANYRES64=0x0], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) r9 = getpgrp(0x0) sched_setaffinity(r9, 0x8, &(0x7f00000000c0)=0x5) sched_setattr(r9, &(0x7f0000000140)={0x38, 0x6, 0x40, 0x3, 0x8, 0x3, 0x8, 0x7fffffffffffffff, 0x4, 0x7fff}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8000}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x50}}, 0x20040044) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xffe0, 0xffe0}, {}, {0x0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x6}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff8, 0x6, 0x2, 0x6, 0x4, {0xa, 0x0, 0x53e, 0x5, 0x1, 0x7ff}, {0x1, 0x1, 0x80, 0x101, 0x4325, 0x3}, 0xd0ab, 0x8, 0x92}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 12.493616532s ago: executing program 5 (id=3093): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 12.107874967s ago: executing program 5 (id=3094): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r1, 0x5) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c90012000e00050017420a008000000200020a0040"], 0x17) syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b000100000000090444", @ANYBLOB="e173"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0xffffff6a) recvmmsg(r3, 0x0, 0x0, 0x700000000000000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newsa={0xf8, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in6=@empty, 0x7, 0x4000, 0x4e24, 0x8001, 0x0, 0x80, 0x0, 0x87}, {@in6=@local, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x204000, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x70bd29, 0x3503, 0xa, 0x5}, [@sa_dir={0x5, 0x21, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x800) 11.273957281s ago: executing program 0 (id=3095): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640)="8b", 0x11) 11.229117086s ago: executing program 4 (id=3096): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000000)={0x1, 0xc}) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004841}, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0xc8bc0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f0000000440)) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000280), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000006bdf313e23408b01b390f366b11dfa35ca0177c363094b1d649508b0c874e5b8d1b5688899a81d1c45b1ab14618b7ebbd613e1dcbb23066e2de8272129340ab9d6b45c037188ceac827eed7100ebe8fe6b78914ac5008ac4fa70a8961ae2b567a100a73d828416d5114bd1e7caa3ab772c644b45cca6277d47dbf27d61a1cf2b5197be70c90d28bd7338c894"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) userfaultfd(0x80001) gettid() r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 8.282657258s ago: executing program 2 (id=3098): memfd_secret(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) syz_ublk_setup_io_uring(0x2b88, &(0x7f0000000680)={0x0, 0xdaed, 0x40, 0x4, 0xfe}, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x40, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000e80)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000ec0), &(0x7f0000000f00)=0x8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f40), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000001080)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r5, &(0x7f00000030c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000003140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000007380)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r5, &(0x7f00000073c0)="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", 0x2000, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000009480)={0x18, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f00000094c0)=[{&(0x7f0000009500)='n', 0xfdef}], 0x1) creat(&(0x7f0000009540)='./file0\x00', 0x34) dup3(r5, r7, 0x6700000000000000) syz_fuse_handle_req(r5, &(0x7f0000009580)="90b70e8c198e3d550c5dd5e5ea85bc10e491ece4dd2adf6920b6c9924bd498131ef1318132ea60e54a0bc0b2f7dbf9be266bedb7995fb8528e1be1ccc340a28a90485e5ee4c4c6a9f452c6207d8aff0fb923b2428b54e6b196957f4dc1846886cf14dccb92ba7aabde1fdfffe886aa09d51a32febd13d50ee2cdb0ef76cd06753b8bbda79a866528abddf8c12ed442a8c989de4e15bfc4178e661deffbbf86c2c70d5f2597ab70917a42bb836b6418f506839eeb12ef89a9a321b11ebe696061016ff0b8f4cc2e8259aef760f4c4bd320e08b99950e0280b1cb82b91e55ed09d5c3b57c4401806455b58e3a6ade4bc70e03f06b5e700ccf4cfaf6cf54bb764aa9bfcb9b4eec271f3e02236737e79d2e16a1e364cd8d30d0369fb9746f58daa4ee418177654ca460e1ab2581a0bfa03151a1c052df1a4d299c7926795ec8ab2d4f12bde23ef79db7364252fe873791d5b45fd73f9665018123c53a65210f53e5713d8eb23840277b57843aad57ef0e54ce0fec0dbbb854331f44e24b0cd833a01d59ebbcdb55363d96f122d90aa238e0fb4a2b3041b5b37354805639db94ebc50c171e067661916665512874442eb1fd435253e3f98914a63b8c511f5d5fa77693355a2b5a4dcb605b9e012049d5d4590ed59ced7323f26b921fa59f5bcf14aabfa6dd9026e41cf896d898e3b2a0389b53a6b9cb8d19092b25fc6593eda84130d89f8c1227347417e9967cd59dda73c3143aa0265240e080cd7786af18c0061bb4f18d8492bab6435ab185de8ed9bc4e8dcbcd36281ee4a8f42aa5db53a945d46714f529888a743498bde29ff3a3e9632e743628e5f138c642f62f68a4dc872ae12548a8c87a3a5246f123990d8cd0522e800bcc84d636b986b42d6f6aa1703043d1280f2c51c6b8e3cb5001c8bc741606dc255552c6da6f1f451dff0d04dae1f57120197c9e1052c880f26e028b85d757473b36cbc4dcbacfbd45f48c8aa71efe912f1d0fa123d298398c4fa7c80034c83655460c87aeb98d369d088d2a3d3801caa01685e9767d2961abc87c9fe9a1434d8bceec132595eef8b788afbb0c650c29991336341220cf51b4ac4a3f3791a9027e4d312fdf1e5a04a858cc23e093ea03362f731539061baced85fb5493370c409b1292a53b781edd6aa4247bd3921233380137b8834a6e826500a9af7053d8577053998549b12f9f8d375b79fe9322ea0f85051d1066d8666d575041faadccc49a1635f94a70f2007582e1e821be93b007611939471864ac35ce2f1ad2c1d20423f719797b53220a34aeca63e9b338b4be645ce07e00b17243a536aeea8f41dcb0b67e8e2f442802f6136d66610714d5f97376e330244f0a6aadd39aef651eda9eead563e433277a748917db682d8eb3e3309b42b535bab01f97bac61b28823cfaf1cc495cdb0d7fab775d6854f5b8515402208d898af7076cfbb751b85fc7601d929c5aea5dbd207101fbe1a5cac6f33dc88b0c803aac6b24f23e907cef6986f0b9537580db25c14c49451fff52ddd9d0c206bfadc250a7c12d446d072738cbfec51a40d3b946c41642b8ead048e3646997881dad3357ac751b11cf4d02cdc31061d5f59dddde5f157627565dbfaf5a593cc0ec4ca52277def45cae26af8a60e62f8ffde23b430a87997764ef49d6d72dbc818dae141114aa2842b3d718276edda46585b6b106d0daf871cdc9cbb49a757930b8d076454b9c03904db89f8720a28e59bdacb6d86c69c54f53cb234636e9cb3c9c1cc80e778c3d458be16ef9b40945f765a1d48ac8bf1cac85a800a9b246778fecac255bffedbe02e34fbc3cf3981fc6fd3849484d0bf9766e70a6e0f67d2d33c03d8287396018c9fc267e012c393a4039c61d613963b22c6bd88eaa099d8692d9e2aa3cc189c8d93eb142906998bce52c458cbb083070e850c20350d1df35092c61a31afb606081f07c895b61b1aac7572c07380005313ef2532715f3f293770efbb98acbd510daba8d59f03a6cfbd20c546b829d2bf360303048e2c2622dd8033840bda80b2138e7c8c7a1473ac741db4ecdb39e5bf5a241470a0236f3e2b185fc8f2764382b3a7c6b96904eb0ab728b39c276bace8debc20c5c4f8e91bbb790c601630e3a88d02215ad377a3df334b7ef4ed2331656a13f4f1a13b828662675766346ce6de5cb8714f9dd5a68c4f5af30c42842135b1463ea648226671f0307218753b2eadf8465d39f817fd152811803650d0bc287e42219b521f45cc48d056f70dd70d11e7837946abb94fb69dfffa4f029e848e7312e247993e46bc94a6eb73c9427f3e7d290a089637e647b9ff37a1ec38bfd6c5227bb437c892a4ca74781c8626d0233d1bbd1bcbe16bd4608f7da117ad7052a20da1d6b33c10c73ab7fdeb51353ca706077677904e1877c6ebbcc7f04d3fac41c1930bc3c1aeeb2e4ff0ea67a28a96dc4ef4404cd12a8c9d85f53daee4cea5f81982c0ae0f97b7197cf305c4a45af2b2c127186bd35be11b999cc190bea97a1fdcf7bec845526bf80e2cc00537c6b690a88477688e15c8debed367d3421b6dfa38552c98452d3a98dd615760fb445a398dcf3718534b4b0ccbfbdf9e3bd783a235f8919d66b4b0deeade001dc89391813d58113693b3a543a2ed9fa398c9d7d9420384e1d021c8b467c1500e007964bda70ea616d3c0422c682b80f8990217a464347918fe09ba83bdd76015833a4c76888a5cc6fa5c37a766d64f301c61f2eafba3a8bc64b9d402feba216e3049fee68d21cadc4cc8de19fe10c89bd43c4a2d1227ab85ae41680a8c06ed77a75447cb498928c1dedb5a61a00f636a67f59e86028166a08cfa61fd8d408eea6c35db51a1ee21c455de55d8dfc2ab2f976491f5b6c5b54492f539624e1da89b1171bd099b6971d23bf2c788acfb07f9eaf720daa518249bd8cd41e03e87c6de17c5cf14c1f1be318350e4624b7a89c20de3221759539430026e06c5192b120f82e36586c490cb084046e8fb5ddecb234f2dfea4752ff94cb819150c9b09220c8a7625904b92a159885d7123a77404d52f362aaafc4e56c97d45b1729e80a0bb2646fb5d019d2d91151431cb04f32730d1abb88e9823dd7b0bc7a407fe5ee3273d2d497563414f620c1a56d4fd4ebcbff2bfbc11c8d4ba0922095d850572d90b1b12b973371bbee36bf6fb67422ef325367e1a6a47fdc0f05382a6cfdabd96893b8a33b9431e4c470b615af17a2f583b5abed8e8f277a15ed51c180dd5ca13e16b3f6a996b2e56035d09bb241e160ef6dabeb37e9ca62c3381272017789762aa8381d46ecfe565f6c5646bc7d67b35abacbcbde89782a0cdc93b696155513e2d1dff96e43e72bf678be389a061dbbcd1b9fd03427d8258115bab3ef6281de402ea05bea729ec97886281f8d4e002dc6428f7715ee6772ae687c2f54e84fed500198a6fb87a3367aa14c9527c6e7d1fdc93aae93155923b9445c5f21ca90411f0c4622df6e7a959712eb00b47f59d027bf115078c79e8222083d5cfbe954d5cbd39567c641f6feb8eca6535c5b1866a720e32b61ea7b133bdec267ab83fa243765f83f5a2f5a3c4bb4c8a290da52aedb2eb2d752e5decdbb001e06359ac9c9d898559a56609bd53ee26b336161d9e66e71db56c7dc017b30545c614482a0b8db64b2289fc07c4670b0edb89c127dc01caa02107d6ef3686f1f02661f8086565a1e1870e5ed7b947f5ab1e1349230180d692aef54ca9f4b7515cc446d8bd0a76ce4376069fabee5594042333ebf23016cffa0ae063c04d876f56a462365ba7e1f429f70c324fa5a9ae376c2541c80dc1e2e33ca1c90b0e6369191a8e6ba8818da1bff830aec1219b7bda2ec14ffa7528601ec307a225e1f6128a44bda65017a98cf217a6521e1b41ab7df4f876329a228cf3640178b2763869d37bd8d346514191b9098fb8bcd44249d11ef27eac67d2152218128dc5d21ed083f092286b89522be034a3d96fac4ee7cb58b460a7695c9048426a6d3bc4c676f784393b89f7a981fad728a4997ffa1ffb412d56771e31c435658dd1fac7b5bb8db5ab637fbd653c55d3db4bf43c7d91524b18dc2860a1c060b96f00d579171c11c42ce91437e2ec15fc47617afff7145b17e965eecc01518cf6f4a245d722d6bb243aac8254da9a50ce79b04825444cd4c16b39b290528db1e7e0a3b5f07272e9a0cd7b92073bdee27a21e03bca75ef4da3bbf0476453479ec33aad301a32f7271924e96dde781266dc6a308fbd69589483189ea92d7cd18463758cca4802c86e73437d75079a3c16631c7bab19204c3225f74751652dd43ba33ae54bf768870ec43a9c83bd5797774f0efa371e434d808e3887c56d044340e7c01dc192cdd1bd9a174aae042695e6c4a689dd265290db2d49eac1f36ab8b3b1f5d055cd3de74575f96df9bb9491472a078274be830246b7c2518e6c6f516aca013837cfed7f71b6a5c479c5e92619051f78bd29673ed047db4a877a1f00a1817a08782e043dda6f6014717c834c7416f2fc67ade230b245e66188841e7abc58a569e6cf17357336ba739e17323314bf46b75cfce51e91fdeaf17d13ddcd8dd7c6cad4f31bd1b4947b79fbbd3396bea562e59c85af361a5b05171984ae721c463f2a7e172dc0fcf6b974458a21a5c99096c53173f7393593b50b8b36ea7e79b82c278a0f833967c0919fc8de07edcd6b51fc06e67243b5cf143511ab1d755a7ef234db2d31ce913e35889f6ff9f75ae63ade38033d4bc6b51149e4d0901af9e83d59001590260bb400903c038423c14369b2a597160f0537f4a6d4ccd0b7a95ab8cc55938e06f3d8df2edae0984f850da371e585b7b8d726164d2dd555316884735a3d849f5fc20983644131fb19d8ca251488734dff7e08c6d732a240b8b101e7edc41c6970e65da8651eeec1734e97a499a564606a808c13e2d340d893ed84c01b307419f6e3bde7fe285ffff3cad43941cacc0776e99df96a45fc0fbf8db247a8bdbe5b6b5b5507876bf41efe4195f78850c2640181682f6b059718d28da9344cb5a4e6e1da020f4813c615cdf89a9968f2ffffd0dc22b1d9041b26a6b10818811639de9a5cdab8811489bd8452c4af81f14586c551aadcdfb51b417d5bcf7304273accabbe093286517e0da67d1664e8722062c24c03fb51f669d8c0c7fc29b5a90d1f25d340d377632b634706b854efeb99e10f952b60a59bdf24d836462b6403b2577452ee70c451546a3cf60f0e508190147b8c0cf34458abe9aecbce9a7be1c65b92757876bf92c73488e2b9835cab471eaf28a8af37d28e3f2b3e4fd0dc6992e3d22026508ca8bd67f2990dfd7d4598b2e93ebe076e784860a17545ddb16fce09e2e649b26ae6c84983d67fafae569fef0eb042b68f0c8a6fdb57e6ffdd5768f7d7383bdbce8337cb2d91d36090499ac377dec4f38c5bf194a2a5bf656d5b0dd1b364589bac9637b2e44b13eeb507c56ff8f561f1d205c2fcdacb92ef2d991e0583bc0b1e216ad6c10a0ef195a4781e74013f7414bebd3cfc875faa3deef8f65ac983dea3c430fd57a62b18f8309c1c50d5f4e775e52281a1bdc6f9ed2f1d1c67724ecbb3001495d67ebf7025636841fd1d2a63385495e16f642433680e6611b6202f8d9c2f48ddcfabf235803f12f8d560ca691e4a8c627edee29a85d8f03a4d118807d689176addc439e1c0b561214bbbf937737e61feefd0760c683a02e4f775f3c12349a07362386b9b596625bdce87ebad21e40d2681fb84bd6d73cbbf10d56c58a7d57dcdfebd73fb80a441b8d278644b1eaf0e5ccbb8b151ef90056291a635c5c21bec5be45f77de012f3a6384ba515ec2e1a9a6f73f9793bbab736330cb4dfce95dc624c13d70c21b3feffd2087ebec7623b982a84eb4423e4a485eff4e034ebc2884d209f422f81230edf7c636ec34b7a8e056a408ae449a0e697ab6adb0ad698a6ee005f382757bde75a4e2b91d2aaa681b5613314e32754c9e34edbc265cea8ad3a388ec7a891cdb2ec8d403242bde9299209d96a71bea294d321da9a19ee08276efaa8597368a7171d14ae33ce9ad72683b43140b6446c468b9969daa69fcc5d3cc3ae5df855de9ca17608481e7067bf589222d0606163b2c804f4400616cb3ac42af63b4081a19baea6f387d1b8f7a63bdf93d0c43d7ea37258bf39eb4d7c66c754e64c6afcf3429b84ccf653c343b644cfc59a4559070fe43456b0403c8a8aaf229cdbf4642124b6271e00d048cf6e835ff18246f9f72a7e7d558c2c6bafa5b84af3a2114d387e40cd6de13f7db17191975aeb488666d3dbeab2b8e88e14ee0923af01c9cf9a2d4d972ac0fa27f6f4c6bbbd18571a314fd7a279ec43c4b153edc602123e3d6ed6b13352d303b1ba8c7cf2be896b87714d1889257e2c8ef0f90f1c6c9af9f4b86469e0712911783030318ad717e8466a78dd94498aef0e9c2073fba028530c8ae0666d6c001e2be92a742305f194793c3fb813790111e174e59c43415628746293402e11aae1eabf9162a2091fe3ae10a5308fcf84054a4a7e54181331ecdf9390b82e0842a123339c45c46c5712eead119202d40918886d4aec68568f4febbb52dcdcb311825e8d6cf2bedae8b2cb90ed15c38de39b5da0ac4e7f27214a514e12b7a5f39a3e076c956273d618b10a5d8ea76b20ca4d612c773fd78ec8db5b7a0d1c279fc89516a8af4d8d2d284d8486d0505a4c0a8f90046930da82b93a0b192111e01138a3b5f0597e72a1464612e1f4c6b61397cec639f7bd0c44de0a9e8650c98bf7f8c9970cf6635fa750e4aadb500fc4cb8bffaa1f2e4090b30e6fa63db4c709261c2595804181b700934fb7c67e3f422fd1dec6d9136302eabe83523c28ccf855cbbf0b0b16ff65bdb304db0945b51ab82b98ea122e8c1afb7c888ab52dc9eeb39e1edc70de228568d98659261f3a1208aed26d70605ff41254ace17b5e879a5af2798047b5ed1f38c6f0a3ae8367d11cc9285d994187e8ea2b6a54573f84194b6f9c9303dc7bd24ffb6ec8f4b06b76dfeee7ba7e23fa58b03115b45ce9136461849d81177146f571d411d26b6e4172d7e0052fa147d1ea69118c6ea94d077e6b2c435efe87c9325cd9b3313597ae776c4d94535bb8947214c2938e9132b2349753057047cb9f07f79d546172624b7c44e076de85161a025171208ec828e73a85b5a3f6aed5d9fdb91a18a0e6055730e569d0e6e97e1793c94ed0be8e87a18215339389434606118c563604af54b1f276724aaff41a336c00a7b7cd4f73263633d9a3c92a43a96322e3b2e30392c20369a29caafce4c9d2bdbbd601498c7ca62216dabb97e49365f5b6dde921336200ab6ce3fe75d3f93e65613b6346eea1798bfea3e7ef0bf39108ddd97b0997cf439d40a9e71157f49f043ccaf269bcde73b971021b46b3f856afc31fb2c5eefbf77d7a0cfadc03d9ad84c1cfdd25383b04846a3e929c93f6bcc31bed1d4bcf008551f679f3fb3cf6f063a72af143fd3d92019a54f0e8ce2c7a9ad5dcf11d389de2fee4b431e777a32dd0c2e8de6e8e99db44e9f72f7dc293472a9ef5a75f287333351545a86fefb06cb6e32531c207f57869991fd14067f0c8da1f61b2b3553dc529d409cd8100525aff86f4cc5578d0a9eb300957965769dabce552832d4f37e1c23373b2f76ae46c619289e097ca9be82f9f382cfc8e9bda65fd63ac8f88ceac87f0eda3defae78e1479090a01fe2bb7dc5a77ff056549b6f17a3c44a8fc0969a514e8b6067b16ff0d81688ea8c37672d1ac2d1ab543dd5d688a95e10193ded7129bee828ba6b81aab4cb49b015d8946e9e6fa44a0c913026485756e509d1957cdacb7d7d4248ce0d83d70445cdfd84bf4fe998dd0671f46ebc2702fb1bf641d80e954c324e316ecbba08a29ea20acff678c75cba32e7d2501f295444cbff171bb4a1998674facfc68b70d9ef466a6de6f8864443029121d466a246ac9607f51b60dec7b99d4ea058b7d9df2e57589d5182f445199101849e853f8672e90e5259a620e8e6db069cb4bdd642abc1489cda7663a2298d168ad768a337ff5ff0b8151f086219b0412651936bbf224310ae3d01b7a20f9e50c73d45a8da85ec3e0922a170a7c0938d14a5ea9477bb7cf323d3348ee1309afee49d2c0747c116ac6e0257e572a0f8f168b193e9bdf7d8e49f0fdfd5786771f0cadc18935d5ce736e24b3cde56018a9f78863afe8bc4d020695567184a6d3d7b595cea1b879ec2c13659caed5bad5c4f61373b6b4d9ec80232d9e83049b871d39b6bfdb635018e6181a69748741cf7cdc01e6c1cfca8c87b485dbf9dca63c5e0c701845d4595df4fbf8d4e97c5f71371985b4716b7868070280fc1b0ec549c65f84db587eab3b835888b9dc513bc94c4de91cd13266f5c87c3a0f81818c510107946a4184c3432f47cee2fd1e9a02494e1f80abbc0577eb77751a71d1c6998bccfc747af96f57620634c7d9e8fb314c300bfad916d3113f6dcbd2337ea0d373138e3fb13c64caffb0f470b70bd58dfe0c4fdc6cb11c46bd52e68f6d9b43a8ab697c888ceb2b584c2ac1e1dba136716e9d2126ca9337c3fa3b3a8f3bccead55250f8f2aff481b8466bbbaa4f378b11fac6c3272730514d629ef511b9c99afeb3226eae09a7c67dbb6745c98d1580323f27e503646664bd923d020163b9281ae27f30875c201067a5ef722283d1b0dab94ed4ad889a31292640e0f77e674cc6807e054824911d27dc24836a40de33a850b30b35658258dbd872c0152f97f46a46614fdbb2257f16e73a37741919e8dc0dfd605b67d07939ea0db74747314ec314568489b5168575f74d2d82f6ed7bab8391586a127dded4e1372e541c2b821b4996285ff33045640655083de0c1ec514d3e6f6b93dbe87944cd586aaad9a4b6e69b82ca0fdca70b423ea4e7058f2657cb1082b3448f0f5c63200add6c0c9b1b8dd2718ba472f1fbb49c655189a7c623a6acbf923a2bbc50ea83af048862413af034a9839b9351cc0442c46368e3c92a054e3bad39e92554b7ac554321038caf4edcf96e394a34d81bc6f0dfe6c3d1c2026ae2e070087d227e3b35f3b73ab598905f0d8655f2765d3c9bdd8fcd293d11cca3f1cc0d0e7dad5b09b3166eec5540e21762d698b59b4ee3f2ec449c716761365858119b7ca1f6db6d063150bf4646d87e05b62fb13e7e25e2d290c3a6b275dc9a0b05f52d7e9c8878394881cc2731fb087cb0e8cda9523d69e0faa547f4ce5922a309825a260de0405489bf6d22ed68e198a0f0672f07c103a0457944ebee05062c3e8615549282c74916c8cc28b224b7850daca3d6716297e7e4b6573de75b89dd5a9277943169706e98d02a7b393734dc60ce9ee6bc01ef0466106de03f4740110634a7da0f1efac221febc9c748381c6c8886541618f799e30e45774eb4c7ff3b401710e3f0356462c9cd1a92422fb5d82e4f1b0b39e29e5852b324cb05f537624b6b74fd8fc31ad97495817e0342b41fb73d37c3904a0c3302bff2e9478c72ac74cfd633d7be6044ffdb48c49e076efa431bbe447d65d9f9a03119a0f95bd2b9e4050da54bf16da40f8107d42f3e1e23f9702454ab10be28a16b56487e5063dd233419971d50d8f0092a9b24b3fa90e552ef1711d3817c47da3a84920eac93d007169911915785af786c807f034999fd1451b8b5befb04a30043477ac537d21a77b8b88b7a880fc04103872777d73d9c08ae7ebaa8661be5f6abc8bc8779690704cb7183b796a59af4fb524d6daca1a10d2ebb32c4dc3e1d7a12514578516451b4797c1b4918a46fa3d8f72f2cdcdfb9836f37cc2db78b7cfc452f54fd0d29d97ae9152ab473d3e7de76c7d4ce4f8e701c80873442bb095168b12722d3e7fd88be4992823d569e3f433b89e6d616235640181d58ef46cb5fb13df869eb4d3675facbede52831c4146c4c8aa2a6e93337190c6be16f09ca6a77a353239f6e5bdef3e14afa044742241667c0656af57ecc697ce807d74b1421b81fa1ae89387baa9d1c0f84c8a4e49152ce9ff11aef07f6cc1afd7c70be8192eae394de49a4f9f850eb3a803c428f8dc0c3b7662a4c02e0a6524edc621898ba14c1506dbaa107d6c2ab0f5cbeaeafb6dbc9d99e4aa104790d76bced93f29bfd2f42b9329ed07089036378e35e386eaaaa3c9e7390f1a13e1bf2e09245c897f0d516b66ce8c9b188e1fcb24d6334a0187fa4f9c3c84ad436c26955d549a4ba34eebd7abb49cf60f1bb99217924efdd283d3179705bf054850f1360ab7ad739ad85bb8a3eaed652636d51fb0e8d53a8952cccd03a99a12664c516d727c7c78916c891179097dd4c7fa38d0afaa48ae23f00f8225766548e121c2aa4db44117a45e4095008f1dca1f39c40afc0c6379014fd00e440b6f733bfc55b618ce9a29d85c36b6f984deca8ebfcdac0496dde639014f1b8c31c68c8f2687540e691fb6a30f9160b36b78e2a2614bfea6b2c3a09a1e5b0e504674a875ac5d9bde3de3af589f1605be84add720b8fa7874d4519a21369afc2bd7b37ce84dbbb1836de63dc6eedf1b763ab620b19f6d47e5a1b5488d8f45c3e2e432666b9375fb75bb47f1997c34760813d3251d80134ec0d6cee3fae30400ae768ea716d2076cbe556620c573b8e76f1c2bf4108ff8b2ea9c41e46dc857cebb61a8d8fd6d3a41d29c519d0a5db5c20cd48c27aa04eda418b9a9bae688c8f66e5df254e69002bc24cb5aedc4af0271bf53e63dd4c5bafade231e350be816ef0271f1532e10bba989f0692964251f569cf8dec6d2e8ab3408abeadb70ad14d0d15828024c1f867bb30523748da33671557317747bbd4b36f442dd4208198b97c762b365b93a2fdc7c1b7415cc2c0865f6f3ce3f52476d55d8687c2cb4858905276d751d33e268d23f70bc6ab8df7fd8d0c62742f1e70163c55796df09c32a558e2b0ae43b26b44b0e173b30f9d9944c9f8cf4bfc286546bc750a6336f5609de5aa2341ab5e4ebd21800007ec6ef0e972a8b7d87474d0995a2a1ec50db694d90207e263fd5cfadf1d74715b0f1bf33ce8d380cb1670d286f2815d66314f4ad51fe9171cf83d0aa3b08b3055cf9d25064bafb53f17090221a4e63c92d7197c699876e592e9ec60bb5a27b96a90d6790bac9efd7179a03307c926f2af27c30e21300271b351324461da085247c47f9be8dda5f3cfffc74e026160ba347748d355be7babbf8a63e6798eb455a819048ae8c26e52cc29f7d352bd8df9475559c2a5c715666fa2ba80d861462925478fb4c7299f627f3dcf18e7d691d56f56bf7fafc0aa742a679893b0fccd50e39ee9b33edb0f70dbd4577156b0dd1c7d54f44d7e48314356a6c201232a9aafffed2755bc853088954c3a06d50a6799a21a551eb3a7eedf865c4f30e9d0388dfb34fba84c3dad69ee7df431793a38c9fa330377316a2cf9e7854dd089e1a70076fef597aa565c1b68f4f971f6b11c7a6f03ffdd30eeb39927ad3780ce07fb4948ea12a8f25b5a35269be8778f651e460046165264c2c62b8c474c4450308f3fc355021f", 0x2000, &(0x7f000000b580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b640)={0x20, 0x0, 0xa921, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) 7.620447042s ago: executing program 3 (id=3099): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r2, &(0x7f0000001640)="8b", 0x11) 7.517755969s ago: executing program 0 (id=3100): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000840)={'netdevsim0\x00', &(0x7f0000000880)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x8, 0x0, &(0x7f0000000800)=[@increfs], 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000009c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) 7.457672189s ago: executing program 5 (id=3101): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000000)={0x2, 0x9}) (async) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000000)={0x2, 0x9}) syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0xc0000, 0x0, 0x19, 0x0, 0x0, 0x0) 5.830629815s ago: executing program 0 (id=3102): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 5.584905004s ago: executing program 3 (id=3103): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640)="8b", 0x11) 3.771181079s ago: executing program 2 (id=3105): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)=' /new_domain\nfile read /et', 0x22) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000100)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ext4\x00', 0x800000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (fail_nth: 7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,\x00h']) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r4, 0x2}) 3.625256287s ago: executing program 3 (id=3106): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$video(&(0x7f0000000100), 0xfffffffffffffff8, 0x40000) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x2, 0x30, 0xfffd, 0x4000, 0x0, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x80, 0x0, 0x0, 0x2d9}}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x3, 0xac5) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x80000, 0x48) execveat(r1, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000400)='\'\x00', &(0x7f0000000440)='\xbb\xbb\xbb\xbb\xbb\xbb']}, &(0x7f0000000480)={[&(0x7f00000004c0)='{\x00', &(0x7f0000000500)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000540)='\x00', &(0x7f0000000600)='\xb5{\x00', &(0x7f0000000640)='/dev/video#\x00']}, 0x1000) syz_clone3(&(0x7f0000000680)={0x23800200, &(0x7f0000000700), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000740)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000007c0)={0x3, &(0x7f0000000800)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000840), 0x4000190, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1f}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x2}]}}, 0x0, 0x3e}, 0x28) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000900)=0x10, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="0021000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r5, &(0x7f0000000a00), &(0x7f00000001c0)=@buf="8e4f981a08133aeb6d37324fa410d5b83b7075736d4a5c699a5f6160a16c1d3e7eea51a0a310d2dc0690c4f2950d2ddc5b236fa4ef5a0bacde24c2609532de0b49daa5f13b850aa0d7bf7b9faf809bec6a9b9950560e039921a29591b29a86a71f5a4e17ee7ab3998015f03c5b4afc918ed56962d4889d9b581504569df2a13e0b1a396f1b05ce176303f1f3dc477c8e9a219280ec5e331c603fe08c131ef459b6775aac6557ddf8837ebe3e79e195a66f74d3559cbd034583e7ddd5f6e3ead025cb0d19f3f5c4"}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a80)={r5, &(0x7f0000000ac0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./sys\x00', &(0x7f0000000bc0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000c40)='tps6598x 0x20\n', 0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000d80)='./file1\x00', &(0x7f0000000dc0)='autofs\x00', 0x0, &(0x7f0000000e00)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='mountinfo\x00') 2.549925896s ago: executing program 2 (id=3107): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000380)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x88880) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x10001, [[0x9, 0x10000, 0x80000001, 0x80, 0xa862e2f, 0x1, 0xd7, 0x4], [0xa8b9, 0x5, 0x4, 0x0, 0x0, 0x1800000, 0x6864f090, 0x1], [0x8001, 0xfffeffff, 0x3, 0x5, 0x2f, 0xb, 0x8, 0xa92d]], '\x00', [{0x9, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x8, 0x0, 0x1, 0x1}, {0xfffffffd, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x926, 0x1, 0x1, 0x1}, {0x7, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x10, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x4, 0x1, 0x1}, {0x7, 0x40, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x80000000, 0x6, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x6933}) 2.056831291s ago: executing program 2 (id=3108): socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a3100200000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000480)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) 1.945708405s ago: executing program 4 (id=3109): r0 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000100)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x1, 0x0) write$nsim_port_qreset(r0, &(0x7f0000000140)={0x31, 0x20, 0x30}, 0x3) write$nsim_port_qreset(r0, &(0x7f0000000000)={0x30, 0x20, 0x31}, 0x3) 1.7981298s ago: executing program 5 (id=3110): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000400)) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000440)="830d000010") listns(&(0x7f0000000180)={0x20, 0x0, 0x3}, &(0x7f0000000200)=[0x0], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000040)='dctcp\x00', 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x34ae}], 0x1, 0x22, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000580)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000340)={r4, 0x10, 0x10}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000100)) remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000) 1.672858921s ago: executing program 4 (id=3111): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000180)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write(r1, &(0x7f0000000000)="41c0387bdc1966a3cafe3510d166e1c2eef0d40530a23be85f655ce2311bacc47939452dd1253f4490aabb6c3593bc72adfd7af59416031a9136b6edf7e4132c", 0x40) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 1.64959409s ago: executing program 3 (id=3112): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000840)={'netdevsim0\x00', &(0x7f0000000880)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x8, 0x0, &(0x7f0000000800)=[@increfs], 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000009c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) 960.035157ms ago: executing program 2 (id=3113): r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c80)={0xc73e, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x83c], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffdfff, 0xffffffff, 0x3]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x138a, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x661cb7fb, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4001, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r0, &(0x7f0000000f00)=[{&(0x7f0000000f40)=""/214, 0xd6}, {0x0}], 0x2) 222.46089ms ago: executing program 3 (id=3114): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2}, 0x8}, 0x94) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x28642, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 177.451669ms ago: executing program 2 (id=3115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640)="8b", 0x11) 94.186132ms ago: executing program 4 (id=3116): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="ec050000", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf254a00000008000100670000000800", @ANYRES32=0x0, @ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r0, &(0x7f0000001f40), 0x4000000000001f2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.603005ms ago: executing program 4 (id=3117): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r1 = syz_open_dev$mtd(&(0x7f00000001c0), 0x46, 0x1) ioctl$ECCGETSTATS(r1, 0x80104d12, &(0x7f0000000200)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000300)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000340)=[0x0]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000240)=0x4, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000018000900f6efc2a1fdffffff02000000fe0000010000000008000500ac1414ff"], 0x24}}, 0x4000080) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0f09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 0s ago: executing program 3 (id=3118): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) kernel console output (not intermixed with test programs): .647975][ T5704] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1178.649292][ T5704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1178.650921][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.650938][ T5704] usb 6-1: Product: syz [ 1178.650946][ T5704] usb 6-1: Manufacturer: syz [ 1178.650954][ T5704] usb 6-1: SerialNumber: syz [ 1178.930035][ T5704] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1178.930071][ T5704] usb 6-1: MIDIStreaming interface descriptor not found [ 1179.000795][T10088] usb 3-1: USB disconnect, device number 43 [ 1179.024285][ T5704] usb 6-1: USB disconnect, device number 21 [ 1179.102459][ T5334] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1179.137558][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1179.262526][ T5334] usb 4-1: Using ep0 maxpacket: 32 [ 1179.264368][ T5334] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1179.265347][ T5334] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.265361][ T5334] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.266836][ T5334] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1179.266855][ T5334] usb 4-1: Product: syz [ 1179.266868][ T5334] usb 4-1: Manufacturer: syz [ 1179.289873][ T5334] hub 4-1:4.0: USB hub found [ 1179.508172][ T5334] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 1179.528559][T16818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1179.543831][ T5334] usb 4-1: USB disconnect, device number 13 [ 1179.551178][T16818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1179.551850][T16818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1179.610810][T16818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1179.624818][T16818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1179.646258][T16818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1179.646952][T16818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1179.675246][T16818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1179.865190][ T5795] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1180.573773][ T9550] Bluetooth: hci4: command 0x040f tx timeout [ 1180.599574][ T5795] usb 6-1: Using ep0 maxpacket: 8 [ 1180.646616][ T5795] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1180.741246][ T5795] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1180.741311][ T5795] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1180.741332][ T5795] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1180.741354][ T5795] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1180.741375][ T5795] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1180.741423][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.862510][T15108] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1181.022477][T15108] usb 4-1: Using ep0 maxpacket: 32 [ 1181.024324][T15108] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1181.045460][T15108] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.045490][T15108] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.050791][T15108] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1181.050818][T15108] usb 4-1: Product: syz [ 1181.050881][T15108] usb 4-1: Manufacturer: syz [ 1181.236848][T15108] hub 4-1:4.0: USB hub found [ 1181.409646][T16818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.563908][T15108] hub 4-1:4.0: 1 port detected [ 1181.803119][T15108] hub 4-1:4.0: config failed, can't get hub status (err -5) [ 1182.024044][T16818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.050738][T12686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.050810][T12686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.096214][T12689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.096281][T12689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.369703][ T5795] usb 6-1: usb_control_msg returned -32 [ 1182.369738][ T5795] usbtmc 6-1:16.0: can't read capabilities [ 1182.517185][ T5795] usb 6-1: USB disconnect, device number 22 [ 1182.912494][T10088] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1182.970679][ T31] audit: type=1400 audit(1791988618.435:813): avc: denied { write } for pid=16910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1183.019067][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.041014][ T31] audit: type=1400 audit(1791988618.505:814): avc: denied { write } for pid=16935 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1183.083045][T10088] usb 3-1: Using ep0 maxpacket: 8 [ 1183.088484][T10088] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1183.088522][T10088] usb 3-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1183.089668][T10088] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1183.091994][T10088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.092014][T10088] usb 3-1: Product: syz [ 1183.092028][T10088] usb 3-1: Manufacturer: syz [ 1183.092042][T10088] usb 3-1: SerialNumber: syz [ 1183.135494][ C1] net_ratelimit: 8 callbacks suppressed [ 1183.142783][ T5704] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1183.473776][ T5795] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1183.587482][ T5334] usb 4-1: USB disconnect, device number 14 [ 1183.622907][ T5795] usb 6-1: Using ep0 maxpacket: 16 [ 1183.629775][ T5795] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1183.646110][ T5795] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1183.646141][ T5795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.646181][ T5795] usb 6-1: config 0 has no interface number 0 [ 1183.646331][ T5795] usb 6-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1183.646506][ T5795] usb 6-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1183.646538][ T5795] usb 6-1: config 0 interface 68 has no altsetting 0 [ 1183.662717][ T5704] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.744554][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.744575][ T5704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1183.744628][ T5704] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1183.803675][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.803791][ T5795] usb 6-1: Product: syz [ 1183.803827][ T5795] usb 6-1: Manufacturer: syz [ 1183.803863][ T5795] usb 6-1: SerialNumber: syz [ 1183.856907][T10088] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1183.858914][T10088] usb 3-1: MIDIStreaming interface descriptor not found [ 1183.912609][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.912627][ T5704] usb 1-1: Product: syz [ 1183.912639][ T5704] usb 1-1: Manufacturer: syz [ 1183.912652][ T5704] usb 1-1: SerialNumber: syz [ 1184.093516][T14980] Bluetooth: hci4: command 0x040f tx timeout [ 1184.159257][ T5795] usb 6-1: config 0 descriptor?? [ 1184.172323][ T5704] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1184.172356][ T5704] cdc_ncm 1-1:1.0: bind() failure [ 1184.242124][ T5795] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1184.337484][T10088] usb 3-1: USB disconnect, device number 44 [ 1184.379776][ T5795] usb 1-1: USB disconnect, device number 75 [ 1184.515232][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.944141][T16818] veth0_vlan: entered promiscuous mode [ 1185.044660][ T31] audit: type=1400 audit(1791988620.475:815): avc: denied { write } for pid=16940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1185.310411][T16818] veth1_vlan: entered promiscuous mode [ 1185.413911][T12690] usb 6-1: Failed to submit usb control message: -110 [ 1185.464761][T12690] usb 6-1: unable to send the bmi data to the device: -110 [ 1185.464802][T12690] usb 6-1: unable to get target info from device [ 1185.464879][T12690] usb 6-1: could not get target info (-110) [ 1185.465055][T12690] usb 6-1: could not probe fw (-110) [ 1185.913120][ T5749] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1186.072943][ T5749] usb 3-1: Using ep0 maxpacket: 8 [ 1186.129796][ T5749] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1186.131459][ T5749] usb 3-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1186.172757][T14980] Bluetooth: hci4: command 0x040f tx timeout [ 1186.188603][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1186.252117][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.252135][ T5749] usb 3-1: Product: syz [ 1186.252147][ T5749] usb 3-1: Manufacturer: syz [ 1186.252161][ T5749] usb 3-1: SerialNumber: syz [ 1186.300573][T16818] veth0_macvtap: entered promiscuous mode [ 1186.310745][T16818] veth1_macvtap: entered promiscuous mode [ 1186.811666][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2907'. [ 1187.358578][ T5795] usb 6-1: USB disconnect, device number 23 [ 1187.468516][ T5749] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1187.468550][ T5749] usb 3-1: MIDIStreaming interface descriptor not found [ 1187.520801][T16818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.545505][T16818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.590112][ T5749] usb 3-1: USB disconnect, device number 45 [ 1187.650987][ T31] audit: type=1400 audit(1791988623.115:816): avc: denied { write } for pid=16981 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1187.652864][T12687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.653092][T12687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.653119][T12687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.653144][T12687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.727242][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1187.762833][T14403] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1187.912790][T14403] usb 4-1: Using ep0 maxpacket: 8 [ 1187.919890][T14403] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1187.919930][T14403] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1187.920916][T14403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1187.934698][T14403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.934715][T14403] usb 4-1: Product: syz [ 1187.934727][T14403] usb 4-1: Manufacturer: syz [ 1187.934739][T14403] usb 4-1: SerialNumber: syz [ 1187.977822][T12690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.977837][T12690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.037980][T12686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.037994][T12686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.088445][ T31] audit: type=1400 audit(1791988623.555:817): avc: denied { write } for pid=16818 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1188.224472][T14403] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1188.224508][T14403] usb 4-1: MIDIStreaming interface descriptor not found [ 1188.382636][T10088] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1188.413400][ C1] net_ratelimit: 112 callbacks suppressed [ 1188.460870][T14403] usb 4-1: USB disconnect, device number 15 [ 1188.532706][T10088] usb 6-1: Using ep0 maxpacket: 8 [ 1188.555205][T10088] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1188.555242][T10088] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1188.558563][T10088] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1188.618355][T10088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.618374][T10088] usb 6-1: Product: syz [ 1188.618388][T10088] usb 6-1: Manufacturer: syz [ 1188.618402][T10088] usb 6-1: SerialNumber: syz [ 1188.654217][T15808] udevd[15808]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory [ 1188.738226][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.194151][ T9550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1190.197443][ T9550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1190.198415][ T9550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1190.348654][ T9550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1190.695083][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1190.813942][T10088] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1190.813981][T10088] usb 6-1: MIDIStreaming interface descriptor not found [ 1191.025156][T10088] usb 6-1: USB disconnect, device number 24 [ 1191.089568][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1192.812983][T14980] Bluetooth: hci1: command tx timeout [ 1192.950956][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2912'. [ 1192.951190][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2912'. [ 1192.976164][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2912'. [ 1193.282462][T10088] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1193.385230][ T5749] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1193.413432][T10088] usb 4-1: device descriptor read/64, error -71 [ 1193.452454][ C1] net_ratelimit: 186 callbacks suppressed [ 1193.535221][ T5749] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1193.542031][ T5749] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.542144][ T5749] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1193.545275][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.545292][ T5749] usb 6-1: Product: syz [ 1193.545304][ T5749] usb 6-1: Manufacturer: syz [ 1193.545315][ T5749] usb 6-1: SerialNumber: syz [ 1193.572142][ T5749] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1193.604774][T16999] lo speed is unknown, defaulting to 1000 [ 1193.653042][T10088] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1193.772218][T17010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17010 comm=syz.5.2912 [ 1193.782483][T10088] usb 4-1: device descriptor read/64, error -71 [ 1193.849427][ T5749] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1193.849519][ T5749] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 1193.886911][ T5749] usb 6-1: USB disconnect, device number 25 [ 1193.892854][T10088] usb usb4-port1: attempt power cycle [ 1194.242471][T10088] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1194.268845][T10088] usb 4-1: device descriptor read/8, error -71 [ 1194.331606][T12686] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1194.331919][T12686] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1194.436494][T17048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 1194.490474][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 1194.502505][T10088] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1194.524330][T10088] usb 4-1: device descriptor read/8, error -71 [ 1194.548498][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 1194.569277][ T31] audit: type=1400 audit(1791988630.035:818): avc: denied { write } for pid=17038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.634514][T10088] usb usb4-port1: unable to enumerate USB device [ 1194.726299][ T31] audit: type=1400 audit(1791988630.195:819): avc: denied { write } for pid=17059 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.869661][T12686] bond1 (unregistering): Released all slaves [ 1194.894033][T14980] Bluetooth: hci1: command tx timeout [ 1194.994290][ T8745] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1195.181967][ T8745] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1195.205021][ T8745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.205416][ T8745] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1195.313599][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1195.320735][ T8745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.320754][ T8745] usb 1-1: Product: syz [ 1195.320766][ T8745] usb 1-1: Manufacturer: syz [ 1195.320778][ T8745] usb 1-1: SerialNumber: syz [ 1195.376328][ T8745] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1196.851020][T17048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17048 comm=syz.0.2922 [ 1196.936135][ T8745] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1196.936224][ T8745] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 1196.975212][T14980] Bluetooth: hci1: command tx timeout [ 1197.997127][ T8745] usb 1-1: USB disconnect, device number 76 [ 1198.732513][ C1] net_ratelimit: 183 callbacks suppressed [ 1199.052548][T14980] Bluetooth: hci1: command tx timeout [ 1199.155072][ T31] audit: type=1400 audit(1791988634.625:820): avc: denied { write } for pid=17068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1200.362536][ T5749] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1200.512499][ T5749] usb 4-1: Using ep0 maxpacket: 8 [ 1200.518423][ T5749] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1200.537387][ T5749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.537542][ T5749] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.578886][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.578932][ T5749] usb 4-1: Product: syz [ 1200.578969][ T5749] usb 4-1: Manufacturer: syz [ 1200.579034][ T5749] usb 4-1: SerialNumber: syz [ 1200.670751][ T5749] cdc_ether 4-1:1.0: missing cdc ether descriptor [ 1200.699369][ T5749] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1200.699877][ T5749] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1200.943137][T12686] hsr_slave_0: left promiscuous mode [ 1201.020535][T12686] hsr_slave_1: left promiscuous mode [ 1201.053810][T12686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.127290][T12686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.128870][ T5795] usb 4-1: USB disconnect, device number 20 [ 1201.170259][ T31] audit: type=1400 audit(1791988636.635:821): avc: denied { write } for pid=17111 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1201.431197][ T5749] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1201.584532][ T5749] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1201.587818][ T5749] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.587902][ T5749] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1201.588284][ T5749] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1201.651199][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.651292][ T5749] usb 5-1: Product: syz [ 1201.651365][ T5749] usb 5-1: Manufacturer: syz [ 1201.651413][ T5749] usb 5-1: SerialNumber: syz [ 1201.864559][ T5749] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1201.864596][ T5749] cdc_ncm 5-1:1.0: bind() failure [ 1202.071750][ T5749] usb 5-1: USB disconnect, device number 54 [ 1202.088336][T12686] team0 (unregistering): Port device team_slave_1 removed [ 1202.120710][T12686] team0 (unregistering): Port device team_slave_0 removed [ 1202.252652][ T8745] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1202.402594][ T8745] usb 4-1: device descriptor read/64, error -71 [ 1202.652806][ T8745] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1202.782498][ T8745] usb 4-1: device descriptor read/64, error -71 [ 1202.893154][ T8745] usb usb4-port1: attempt power cycle [ 1203.731989][ T8745] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1203.946806][T16890] net_ratelimit: 39 callbacks suppressed [ 1204.048248][ T8745] usb 4-1: device descriptor read/8, error -71 [ 1204.312502][ T5749] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1204.472491][ T5749] usb 6-1: Using ep0 maxpacket: 8 [ 1204.497631][ T5749] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1204.497761][ T5749] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1204.501216][ T8745] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1204.541539][ T5749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1204.575920][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.576307][ T5749] usb 6-1: Product: syz [ 1204.576655][ T5749] usb 6-1: Manufacturer: syz [ 1204.576681][ T5749] usb 6-1: SerialNumber: syz [ 1204.577387][ T8745] usb 4-1: device descriptor read/8, error -71 [ 1204.734698][ T8745] usb usb4-port1: unable to enumerate USB device [ 1205.534461][ T5749] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1205.534497][ T5749] usb 6-1: MIDIStreaming interface descriptor not found [ 1205.540343][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1205.630510][ T5749] usb 6-1: USB disconnect, device number 26 [ 1205.710684][T12690] smbdirect: ib_dev[syz0] removed [ 1205.794703][ T1202] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1205.810514][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1205.963811][ T1202] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 1205.966328][ T1202] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 1205.966352][ T1202] usb 4-1: config 0 has no interface number 0 [ 1205.966975][ T1202] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1205.967003][ T1202] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1205.970114][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.970140][ T1202] usb 4-1: Product: syz [ 1205.970154][ T1202] usb 4-1: Manufacturer: syz [ 1205.970169][ T1202] usb 4-1: SerialNumber: syz [ 1205.974049][ T1202] usb 4-1: config 0 descriptor?? [ 1206.053952][ T1202] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 1206.071479][ T1202] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1206.152693][T15108] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1206.282185][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.290914][T16999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.291076][T16999] bridge_slave_0: entered allmulticast mode [ 1206.308161][T16999] bridge_slave_0: entered promiscuous mode [ 1206.310325][T12686] IPVS: stop unused estimator thread 0... [ 1206.312446][T15108] usb 1-1: Using ep0 maxpacket: 8 [ 1206.325884][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.325955][T16999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.326109][T16999] bridge_slave_1: entered allmulticast mode [ 1206.327243][T16999] bridge_slave_1: entered promiscuous mode [ 1206.334862][T15108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1206.334895][T15108] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1206.355940][T15108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1206.398188][T15108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.398208][T15108] usb 1-1: Product: syz [ 1206.398223][T15108] usb 1-1: Manufacturer: syz [ 1206.398237][T15108] usb 1-1: SerialNumber: syz [ 1206.615705][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.630206][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.649145][T15108] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1207.649180][T15108] usb 1-1: MIDIStreaming interface descriptor not found [ 1207.733497][T15108] usb 1-1: USB disconnect, device number 77 [ 1207.822928][ T5749] usb 4-1: USB disconnect, device number 25 [ 1207.837758][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.853911][ T5749] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1207.854436][ T5749] kobil_sct 4-1:0.148: device disconnected [ 1207.976491][T16999] team0: Port device team_slave_0 added [ 1207.978746][T16999] team0: Port device team_slave_1 added [ 1208.123461][ T31] audit: type=1800 audit(1791988643.585:822): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2946" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1208.665668][ T1202] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1208.670521][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.670531][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.670553][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.678133][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.678142][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.678161][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.703242][ T31] audit: type=1400 audit(1791988644.165:823): avc: denied { write } for pid=17152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.842567][ T1202] usb 6-1: Using ep0 maxpacket: 8 [ 1208.849160][ T1202] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1208.868448][ T1202] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.868511][ T1202] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.904046][ T1202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.904065][ T1202] usb 6-1: Product: syz [ 1208.904080][ T1202] usb 6-1: Manufacturer: syz [ 1208.904095][ T1202] usb 6-1: SerialNumber: syz [ 1208.961785][ T1202] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1208.983888][ T1202] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1208.983946][ T1202] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1209.044989][T16999] hsr_slave_0: entered promiscuous mode [ 1209.050618][T16999] hsr_slave_1: entered promiscuous mode [ 1209.059339][T16999] debugfs: 'hsr0' already exists in 'hsr' [ 1209.059353][T16999] Cannot create hsr debugfs directory [ 1209.062332][T17181] block2mtd: error: cannot open device /dev/zram0 [ 1209.075686][ T31] audit: type=1400 audit(1791988644.545:824): avc: denied { write } for pid=17182 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1209.325891][ T1202] usb 6-1: USB disconnect, device number 27 [ 1209.621372][ T5749] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1209.692543][ C1] net_ratelimit: 162 callbacks suppressed [ 1209.822165][ T5749] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1209.822201][ T5749] usb 4-1: no configurations [ 1209.822215][ T5749] usb 4-1: can't read configurations, error -22 [ 1210.042966][ T5749] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1210.153486][T17188] block2mtd: error: cannot open device /dev/zram0 [ 1210.207848][ T5749] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1210.207883][ T5749] usb 4-1: no configurations [ 1210.207895][ T5749] usb 4-1: can't read configurations, error -22 [ 1210.384671][ T5749] usb usb4-port1: attempt power cycle [ 1211.373307][ T5749] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1211.418272][ T5749] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1211.418363][ T5749] usb 4-1: no configurations [ 1211.418442][ T5749] usb 4-1: can't read configurations, error -22 [ 1211.542456][ T5749] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1211.566853][ T5749] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1211.566975][ T5749] usb 4-1: no configurations [ 1211.567047][ T5749] usb 4-1: can't read configurations, error -22 [ 1211.567962][ T5749] usb usb4-port1: unable to enumerate USB device [ 1212.290916][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1212.852544][ T5749] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1213.024871][ T5749] usb 6-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 1213.028025][ T5749] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.028105][ T5749] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1213.028422][ T5749] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.161781][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.161972][ T5749] usb 6-1: Product: syz [ 1213.162150][ T5749] usb 6-1: Manufacturer: syz [ 1213.162331][ T5749] usb 6-1: SerialNumber: syz [ 1213.223900][T17216] lo speed is unknown, defaulting to 1000 [ 1213.223949][T17216] lo speed is unknown, defaulting to 1000 [ 1213.464197][T15108] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1213.475206][T17216] lo speed is unknown, defaulting to 1000 [ 1213.477622][T17216] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1213.477653][T17216] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1213.477692][T17216] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1213.487756][T17216] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1213.503617][T17216] lo speed is unknown, defaulting to 1000 [ 1213.505550][T17216] lo speed is unknown, defaulting to 1000 [ 1213.506350][T17216] lo speed is unknown, defaulting to 1000 [ 1213.507183][T17216] lo speed is unknown, defaulting to 1000 [ 1213.507962][T17216] lo speed is unknown, defaulting to 1000 [ 1213.508761][T17216] lo speed is unknown, defaulting to 1000 [ 1213.632686][ T1202] usb 6-1: USB disconnect, device number 28 [ 1213.646471][T15108] usb 5-1: Using ep0 maxpacket: 8 [ 1213.650785][T15108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1213.650822][T15108] usb 5-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1213.679199][T15108] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1213.685024][ T31] audit: type=1400 audit(1791988649.155:825): avc: denied { write } for pid=17209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.723297][T15108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.723315][T15108] usb 5-1: Product: syz [ 1213.723329][T15108] usb 5-1: Manufacturer: syz [ 1213.723343][T15108] usb 5-1: SerialNumber: syz [ 1213.786608][T12686] hsr_slave_0: left promiscuous mode [ 1213.787455][T12686] hsr_slave_1: left promiscuous mode [ 1213.788343][T12686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.789051][T12686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.996309][ T31] audit: type=1800 audit(1791988649.435:826): pid=17233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2956" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1214.495612][T15108] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1214.495633][T15108] usb 5-1: MIDIStreaming interface descriptor not found [ 1214.531296][ T31] audit: type=1400 audit(1791988649.965:827): avc: denied { write } for pid=17229 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1214.732431][ C0] net_ratelimit: 17 callbacks suppressed [ 1215.351476][T15108] usb 5-1: USB disconnect, device number 55 [ 1215.358854][T14403] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1215.515322][T14403] usb 1-1: Using ep0 maxpacket: 8 [ 1215.538613][T14403] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1215.538649][T14403] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1215.541951][T14403] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1215.561768][ T5749] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1215.586200][T14403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.586218][T14403] usb 1-1: Product: syz [ 1215.586231][T14403] usb 1-1: Manufacturer: syz [ 1215.586244][T14403] usb 1-1: SerialNumber: syz [ 1215.725984][ T5749] usb 4-1: Using ep0 maxpacket: 8 [ 1215.744531][ T5749] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1215.748878][ T5749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.749004][ T5749] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1215.838270][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.838299][ T5749] usb 4-1: Product: syz [ 1215.838364][ T5749] usb 4-1: Manufacturer: syz [ 1215.838398][ T5749] usb 4-1: SerialNumber: syz [ 1215.892487][T15108] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1216.020634][T12686] team0 (unregistering): Port device team_slave_1 removed [ 1216.056506][ T5749] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1216.082312][T15108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1216.111274][ T5749] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1216.122320][ T5749] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1216.159116][T15108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.287489][T15108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.287508][T15108] usb 5-1: Product: syz [ 1216.287524][T15108] usb 5-1: Manufacturer: syz [ 1216.287539][T15108] usb 5-1: SerialNumber: syz [ 1216.620879][ T5749] usb 4-1: USB disconnect, device number 30 [ 1216.661324][T12686] team0 (unregistering): Port device team_slave_0 removed [ 1216.860677][T15108] snd-usb-6fire 5-1:1.0: unknown device firmware state received from device: [ 1216.860691][T15108] 00 00 00 00 00 00 00 00 [ 1216.860756][T15108] snd-usb-6fire 5-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1217.839146][ T5795] usb 5-1: USB disconnect, device number 56 [ 1218.050141][T14403] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1218.050318][T14403] usb 1-1: MIDIStreaming interface descriptor not found [ 1219.214238][ T31] audit: type=1800 audit(1791988654.675:828): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2965" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1219.742886][T14403] usb 1-1: USB disconnect, device number 78 [ 1219.772452][ C1] net_ratelimit: 93 callbacks suppressed [ 1219.911713][ T31] audit: type=1800 audit(1791988655.345:829): pid=17279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2966" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1220.499212][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.834841][T14403] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1220.983370][T14403] usb 6-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 1220.984433][T14403] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.984452][T14403] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1220.984492][T14403] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1220.986497][T14403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.986516][T14403] usb 6-1: Product: syz [ 1220.986529][T14403] usb 6-1: Manufacturer: syz [ 1220.986542][T14403] usb 6-1: SerialNumber: syz [ 1221.011982][ T5795] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1221.151315][T12686] IPVS: stop unused estimator thread 0... [ 1221.162490][ T5795] usb 5-1: Using ep0 maxpacket: 8 [ 1221.168320][ T5795] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1221.169325][ T5795] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.169381][ T5795] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1221.172263][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.172282][ T5795] usb 5-1: Product: syz [ 1221.172297][ T5795] usb 5-1: Manufacturer: syz [ 1221.172319][ T5795] usb 5-1: SerialNumber: syz [ 1221.243161][ T5795] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 1221.244131][ T5795] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1221.244186][ T5795] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1221.260089][ T1202] usb 6-1: USB disconnect, device number 29 [ 1221.436131][ T31] audit: type=1400 audit(1791988656.905:830): avc: denied { write } for pid=17289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1221.541932][T14403] usb 5-1: USB disconnect, device number 57 [ 1222.240163][ T31] audit: type=1400 audit(1791988657.705:831): avc: denied { write } for pid=17308 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.241152][T16999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1222.299386][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.301961][T16999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1222.359580][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1222.360344][T16999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1222.440805][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1222.441322][T16999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1222.491870][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1222.562589][T15108] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1222.629308][T16999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.648450][T16999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.663325][ T1202] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1222.727680][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.727762][T12690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.808542][T17328] siw: device registration error -23 [ 1223.248305][ T30] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1223.258696][T12687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.258774][T12687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.277820][T15108] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1223.278899][T15108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.313746][ T1202] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1223.314794][ T1202] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.314815][ T1202] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1223.314864][ T1202] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1223.316946][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.316966][ T1202] usb 5-1: Product: syz [ 1223.316981][ T1202] usb 5-1: Manufacturer: syz [ 1223.317017][ T1202] usb 5-1: SerialNumber: syz [ 1223.392473][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 1223.396077][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1223.396117][ T30] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1223.397172][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1223.403988][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.404006][ T30] usb 6-1: Product: syz [ 1223.404020][ T30] usb 6-1: Manufacturer: syz [ 1223.404035][ T30] usb 6-1: SerialNumber: syz [ 1223.534977][ T1202] cdc_ncm 5-1:1.0: skipping garbage [ 1223.534998][ T1202] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1223.535032][ T1202] cdc_ncm 5-1:1.0: bind() failure [ 1223.561025][ T1202] usb 5-1: USB disconnect, device number 58 [ 1223.584311][T15108] usb 4-1: NFC: Reader power on cmd error 0 [ 1223.584330][T15108] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 1223.584425][T15108] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -22 [ 1223.657366][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1223.657403][ T30] usb 6-1: MIDIStreaming interface descriptor not found [ 1223.918081][ T1202] usb 4-1: USB disconnect, device number 31 [ 1224.836547][T16574] net_ratelimit: 17 callbacks suppressed [ 1224.836885][ T30] usb 6-1: USB disconnect, device number 30 [ 1224.894612][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.010519][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2978'. [ 1225.010840][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2978'. [ 1225.059337][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2978'. [ 1225.418487][ T5733] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1226.377793][ T8745] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1226.404133][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 1226.405963][ T5733] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1226.408698][ T5733] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1226.408759][ T5733] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1226.408780][ T5733] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1226.408803][ T5733] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1226.408825][ T5733] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.408879][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.545095][ T31] audit: type=1400 audit(1791988662.015:832): avc: denied { write } for pid=17329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1226.642505][ T30] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1226.678078][ T8745] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1226.679094][ T8745] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.679181][ T8745] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.715174][ T8745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.715208][ T8745] usb 6-1: Product: syz [ 1226.715251][ T8745] usb 6-1: Manufacturer: syz [ 1226.715297][ T8745] usb 6-1: SerialNumber: syz [ 1227.005400][ T8745] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1227.135515][ T31] audit: type=1400 audit(1791988662.595:833): avc: denied { write } for pid=17376 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.181996][T17347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17347 comm=syz.5.2978 [ 1227.183414][ T30] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1227.185296][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.215157][ T8745] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1227.215245][ T8745] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 1227.231723][ T31] audit: type=1400 audit(1791988662.695:834): avc: denied { watch } for pid=17342 comm="syz.4.2977" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1227.231962][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.284147][ T8745] usb 6-1: USB disconnect, device number 31 [ 1227.321556][T16999] veth0_vlan: entered promiscuous mode [ 1227.435148][ T30] usb 4-1: NFC: Reader power on cmd error 0 [ 1227.435166][ T30] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 1227.435265][ T30] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -22 [ 1227.476371][ T30] usb 4-1: USB disconnect, device number 32 [ 1227.544102][T16999] veth1_vlan: entered promiscuous mode [ 1227.550936][ T5733] usb 5-1: usb_control_msg returned -32 [ 1227.550973][ T5733] usbtmc 5-1:16.0: can't read capabilities [ 1227.655871][T16999] veth0_macvtap: entered promiscuous mode [ 1227.670815][T16999] veth1_macvtap: entered promiscuous mode [ 1227.710840][T16999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.728964][T16999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.814571][T12687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.815023][T12687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.815054][T12687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.815082][T12687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.941181][ T31] audit: type=1400 audit(1791988663.405:835): avc: denied { write } for pid=17381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.978590][T12687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.978603][T12687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.997683][ T30] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1228.048072][T12687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.048085][T12687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.178568][ T31] audit: type=1800 audit(1791988663.645:836): pid=17401 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2985" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1228.312043][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 1228.691984][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1228.695053][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.695267][ T30] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.708711][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.708730][ T30] usb 1-1: Product: syz [ 1228.708744][ T30] usb 1-1: Manufacturer: syz [ 1228.708758][ T30] usb 1-1: SerialNumber: syz [ 1228.788188][ T30] cdc_ether 1-1:1.0: missing cdc ether descriptor [ 1228.789665][ T30] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1228.789721][ T30] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1229.010111][ T5749] usb 1-1: USB disconnect, device number 79 [ 1229.034311][ T31] audit: type=1400 audit(1791988664.505:837): avc: denied { write } for pid=17398 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.436515][ T31] audit: type=1800 audit(1791988664.905:838): pid=17419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2988" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1229.898364][T16890] net_ratelimit: 187 callbacks suppressed [ 1230.059639][ T31] audit: type=1800 audit(1791988665.515:839): pid=17430 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2989" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1230.851360][ T5749] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1231.042700][ T5749] usb 6-1: Using ep0 maxpacket: 8 [ 1231.076669][ T5749] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1231.076856][ T5749] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1231.141010][ T5749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1231.275105][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.275124][ T5749] usb 6-1: Product: syz [ 1231.275145][ T5749] usb 6-1: Manufacturer: syz [ 1231.275159][ T5749] usb 6-1: SerialNumber: syz [ 1231.668417][ T5749] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1231.668448][ T5749] usb 6-1: MIDIStreaming interface descriptor not found [ 1231.908332][ T5749] usb 6-1: USB disconnect, device number 32 [ 1232.712011][ T31] audit: type=1400 audit(1791988668.175:840): avc: denied { write } for pid=17416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.763014][T17455] block2mtd: error: cannot open device /dev/zram0 [ 1232.764329][T17457] block2mtd: error: cannot open device /dev/zram0 [ 1233.052774][T17344] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 1233.216524][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.216592][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.895821][ T5334] usb 5-1: USB disconnect, device number 59 [ 1233.968382][ T31] audit: type=1400 audit(1791988669.425:841): avc: denied { write } for pid=17463 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1234.710367][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2999'. [ 1234.710547][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 1234.744474][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2999'. [ 1234.803571][ T8745] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1234.962548][ T8745] usb 1-1: Using ep0 maxpacket: 32 [ 1234.968364][ T8745] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1234.983111][ T8745] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.983136][ T8745] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.984667][ T8745] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1234.984688][ T8745] usb 1-1: Product: syz [ 1234.984702][ T8745] usb 1-1: Manufacturer: syz [ 1235.041240][ T8745] hub 1-1:4.0: USB hub found [ 1235.132633][ C1] net_ratelimit: 127 callbacks suppressed [ 1235.144549][ T31] audit: type=1800 audit(1791988670.605:842): pid=17490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3000" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1235.645902][ T5334] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1235.646349][ T1202] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1235.703195][ T8745] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 1235.750945][ T8745] usb 1-1: USB disconnect, device number 80 [ 1235.792929][ T5334] usb 4-1: Using ep0 maxpacket: 16 [ 1235.797887][ T1202] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1235.799399][ T1202] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.799507][ T1202] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1235.806163][ T5334] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1235.807485][ T5334] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1235.807507][ T5334] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.807526][ T5334] usb 4-1: config 0 has no interface number 0 [ 1235.807551][ T5334] usb 4-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1235.807613][ T5334] usb 4-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1235.807639][ T5334] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1235.813828][ T5334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.813847][ T5334] usb 4-1: Product: syz [ 1235.813862][ T5334] usb 4-1: Manufacturer: syz [ 1235.813876][ T5334] usb 4-1: SerialNumber: syz [ 1235.818906][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.818925][ T1202] usb 5-1: Product: syz [ 1235.818940][ T1202] usb 5-1: Manufacturer: syz [ 1235.818954][ T1202] usb 5-1: SerialNumber: syz [ 1235.903902][ T5334] usb 4-1: config 0 descriptor?? [ 1235.989338][ T1202] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1236.013783][ T5334] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1236.082107][T17504] siw: device registration error -23 [ 1236.211986][T17472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17472 comm=syz.4.2999 [ 1237.044146][ T8745] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1238.751184][ T998] usb 4-1: Failed to submit usb control message: -110 [ 1238.751217][ T998] usb 4-1: unable to send the bmi data to the device: -110 [ 1238.751232][ T998] usb 4-1: unable to get target info from device [ 1238.751245][ T998] usb 4-1: could not get target info (-110) [ 1238.751260][ T998] usb 4-1: could not probe fw (-110) [ 1238.788676][ T1202] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1238.788784][ T1202] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 1238.864896][ T1202] usb 5-1: USB disconnect, device number 60 [ 1239.633432][ T31] audit: type=1400 audit(1791988675.095:843): avc: denied { write } for pid=17483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.737495][ T5749] usb 4-1: USB disconnect, device number 33 [ 1239.813212][T17524] block2mtd: error: cannot open device /dev/zram0 [ 1240.732409][ C0] net_ratelimit: 40 callbacks suppressed [ 1240.790162][ T1202] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1241.048260][ T31] audit: type=1400 audit(1791988676.515:844): avc: denied { write } for pid=17525 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.222431][ T1202] usb 5-1: Using ep0 maxpacket: 8 [ 1241.226214][ T1202] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1241.227137][ T1202] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1241.227188][ T1202] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1241.227208][ T1202] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1241.227227][ T1202] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1241.227248][ T1202] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.227296][ T1202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.339079][T14980] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1241.462510][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1241.468924][ T31] audit: type=1400 audit(1791988676.935:845): avc: denied { write } for pid=17532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.534401][ T5704] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1241.536794][ T31] audit: type=1400 audit(1791988677.005:846): avc: denied { write } for pid=17550 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.575182][ T5749] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1241.625684][ T10] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1241.628252][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1241.628276][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1241.628349][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.641728][ T10] usb 4-1: NFC: Reader power on cmd error -90 [ 1241.641742][ T10] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 1241.641823][ T10] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -90 [ 1241.674492][ T1202] usb 5-1: usb_control_msg returned -71 [ 1241.674523][ T1202] usbtmc 5-1:16.0: can't read capabilities [ 1241.694223][ T5704] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1241.695181][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.697649][ T1202] usb 5-1: USB disconnect, device number 61 [ 1241.702008][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.702024][ T5704] usb 1-1: Product: syz [ 1241.702037][ T5704] usb 1-1: Manufacturer: syz [ 1241.702050][ T5704] usb 1-1: SerialNumber: syz [ 1241.772603][ T5749] usb 6-1: Using ep0 maxpacket: 16 [ 1241.773725][ T5749] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1241.774685][ T5749] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1241.774704][ T5749] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.774721][ T5749] usb 6-1: config 0 has no interface number 0 [ 1241.774743][ T5749] usb 6-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1241.774773][ T5749] usb 6-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1241.774795][ T5749] usb 6-1: config 0 interface 68 has no altsetting 0 [ 1241.776693][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.776710][ T5749] usb 6-1: Product: syz [ 1241.776723][ T5749] usb 6-1: Manufacturer: syz [ 1241.776736][ T5749] usb 6-1: SerialNumber: syz [ 1241.778589][ T5749] usb 6-1: config 0 descriptor?? [ 1241.819188][ T5749] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1241.857632][ T5749] usb 4-1: USB disconnect, device number 34 [ 1241.928126][ T5704] snd-usb-6fire 1-1:1.0: unknown device firmware state received from device: [ 1241.928140][ T5704] 00 00 00 00 00 00 00 00 [ 1241.928202][ T5704] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1242.410432][ T1202] usb 1-1: USB disconnect, device number 82 [ 1243.307094][T12682] usb 6-1: Failed to submit usb control message: -110 [ 1243.307118][T12682] usb 6-1: unable to send the bmi data to the device: -110 [ 1243.307134][T12682] usb 6-1: unable to get target info from device [ 1243.307147][T12682] usb 6-1: could not get target info (-110) [ 1243.307162][T12682] usb 6-1: could not probe fw (-110) [ 1244.620631][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1244.620908][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1244.624225][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1245.232823][ T1202] usb 6-1: USB disconnect, device number 33 [ 1245.352150][T14980] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1245.352168][T14980] CPU: 0 UID: 0 PID: 14980 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1245.352192][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1245.352206][T14980] Workqueue: hci1 hci_rx_work [ 1245.352232][T14980] Call Trace: [ 1245.352240][T14980] [ 1245.352249][T14980] dump_stack_lvl+0x100/0x190 [ 1245.352282][T14980] sysfs_warn_dup.cold+0x1c/0x28 [ 1245.352315][T14980] sysfs_create_dir_ns+0x24b/0x2b0 [ 1245.352348][T14980] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1245.352371][T14980] ? find_held_lock+0x2b/0x80 [ 1245.352395][T14980] ? kobject_add_internal+0x25f/0x930 [ 1245.352415][T14980] ? kobject_add_internal+0x25f/0x930 [ 1245.352442][T14980] kobject_add_internal+0x2c8/0x930 [ 1245.352469][T14980] kobject_add+0x16a/0x1e0 [ 1245.352492][T14980] ? __pfx_kobject_add+0x10/0x10 [ 1245.352513][T14980] ? class_to_subsys+0x10f/0x150 [ 1245.352542][T14980] ? kobject_put+0xb9/0x640 [ 1245.352559][T14980] ? _raw_spin_unlock+0x28/0x50 [ 1245.352589][T14980] device_add+0x294/0x1970 [ 1245.352611][T14980] ? __pfx_dev_set_name+0x10/0x10 [ 1245.352635][T14980] ? __pfx_device_add+0x10/0x10 [ 1245.352657][T14980] ? mgmt_send_event_skb+0x2fb/0x460 [ 1245.352688][T14980] hci_conn_add_sysfs+0x1a3/0x260 [ 1245.352714][T14980] le_conn_complete_evt+0x122f/0x2130 [ 1245.352744][T14980] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1245.352774][T14980] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1245.352803][T14980] ? skb_pull_data+0x15f/0x1e0 [ 1245.352830][T14980] hci_le_meta_evt+0x34a/0x5f0 [ 1245.352858][T14980] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1245.352887][T14980] hci_event_packet+0x51c/0xcd0 [ 1245.352911][T14980] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1245.352937][T14980] ? __pfx_hci_event_packet+0x10/0x10 [ 1245.352965][T14980] ? lockdep_hardirqs_on+0x7d/0x110 [ 1245.352998][T14980] hci_rx_work+0x451/0xfc0 [ 1245.353024][T14980] process_one_work+0xac7/0x1b10 [ 1245.353066][T14980] ? __pfx_process_one_work+0x10/0x10 [ 1245.353097][T14980] ? lock_acquire+0x1d1/0x380 [ 1245.353127][T14980] ? __pfx_hci_rx_work+0x10/0x10 [ 1245.353150][T14980] worker_thread+0x5ef/0xe50 [ 1245.353176][T14980] ? __pfx_worker_thread+0x10/0x10 [ 1245.353196][T14980] ? kthread+0x13a/0x450 [ 1245.353221][T14980] ? __pfx_worker_thread+0x10/0x10 [ 1245.353238][T14980] kthread+0x373/0x450 [ 1245.353264][T14980] ? __pfx_kthread+0x10/0x10 [ 1245.353291][T14980] ret_from_fork+0x730/0xd60 [ 1245.353315][T14980] ? __pfx_ret_from_fork+0x10/0x10 [ 1245.353339][T14980] ? __switch_to+0x800/0x10f0 [ 1245.353368][T14980] ? __pfx_kthread+0x10/0x10 [ 1245.353400][T14980] ret_from_fork_asm+0x1a/0x30 [ 1245.353437][T14980] [ 1245.353532][T14980] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1245.353565][T14980] Bluetooth: hci1: failed to register connection device [ 1245.435187][ T5749] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1245.493465][ T30] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1245.583726][ T5749] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1245.584668][ T5749] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.584759][ T5749] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1245.587081][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.587096][ T5749] usb 5-1: Product: syz [ 1245.587108][ T5749] usb 5-1: Manufacturer: syz [ 1245.587121][ T5749] usb 5-1: SerialNumber: syz [ 1245.653059][ T30] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 1245.654099][ T30] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 1245.654118][ T30] usb 4-1: config 0 has no interface number 0 [ 1245.654148][ T30] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1245.654170][ T30] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1245.656297][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.656313][ T30] usb 4-1: Product: syz [ 1245.656326][ T30] usb 4-1: Manufacturer: syz [ 1245.656337][ T30] usb 4-1: SerialNumber: syz [ 1245.883841][T16890] net_ratelimit: 62 callbacks suppressed [ 1245.911154][ T5749] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1245.969636][T17572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17572 comm=syz.4.3017 [ 1246.341072][ T30] usb 4-1: config 0 descriptor?? [ 1247.478403][ T30] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 1247.587142][ T30] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1248.371622][ T5749] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1248.383766][ T5749] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 1248.650381][ T5749] usb 5-1: USB disconnect, device number 62 [ 1248.735970][T17593] block2mtd: error: cannot open device /dev/zram0 [ 1249.022433][ T5733] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1249.075370][ T1202] usb 4-1: USB disconnect, device number 35 [ 1249.283933][ T1202] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1249.287948][ T5733] usb 6-1: Using ep0 maxpacket: 16 [ 1249.311621][ T5733] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1249.365490][ T1202] kobil_sct 4-1:0.148: device disconnected [ 1249.385992][ T5733] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1249.386018][ T5733] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.386036][ T5733] usb 6-1: config 0 has no interface number 0 [ 1249.386060][ T5733] usb 6-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1249.386087][ T5733] usb 6-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1249.386109][ T5733] usb 6-1: config 0 interface 68 has no altsetting 0 [ 1249.560941][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.560960][ T5733] usb 6-1: Product: syz [ 1249.560974][ T5733] usb 6-1: Manufacturer: syz [ 1249.560988][ T5733] usb 6-1: SerialNumber: syz [ 1249.669818][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1249.728385][ T5733] usb 6-1: config 0 descriptor?? [ 1249.845060][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1249.846587][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1249.850507][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.850522][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.871293][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1249.871311][ T10] usb 3-1: Product: syz [ 1249.871329][ T10] usb 3-1: Manufacturer: syz [ 1249.877867][ T10] hub 3-1:4.0: USB hub found [ 1249.916350][ T5733] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1250.419030][ T31] audit: type=1800 audit(1791988685.645:847): pid=17611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3025" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1250.814018][T17616] siw: device registration error -23 [ 1251.132426][ C1] net_ratelimit: 29 callbacks suppressed [ 1251.272263][T12684] usb 6-1: Failed to submit usb control message: -110 [ 1251.272288][T12684] usb 6-1: unable to send the bmi data to the device: -110 [ 1251.272323][T12684] usb 6-1: unable to get target info from device [ 1251.286734][ T10] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1251.317870][ T10] usb 3-1: USB disconnect, device number 46 [ 1251.327932][T12684] usb 6-1: could not get target info (-110) [ 1251.334475][T12684] usb 6-1: could not probe fw (-110) [ 1251.545939][T14980] Bluetooth: hci1: command 0x0406 tx timeout [ 1251.764640][ T5704] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1251.960638][ T5704] usb 4-1: Using ep0 maxpacket: 8 [ 1252.028652][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1252.028807][ T5704] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1252.057771][ T5704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1252.102103][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.102144][ T5704] usb 4-1: Product: syz [ 1252.102182][ T5704] usb 4-1: Manufacturer: syz [ 1252.102225][ T5704] usb 4-1: SerialNumber: syz [ 1252.498240][ T5704] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1252.498276][ T5704] usb 4-1: MIDIStreaming interface descriptor not found [ 1252.602466][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1252.662072][ T5704] usb 4-1: USB disconnect, device number 36 [ 1252.674542][ T5733] usb 6-1: USB disconnect, device number 34 [ 1253.021846][T17627] ip6erspan0: entered allmulticast mode [ 1253.023149][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1253.023781][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1253.024773][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.024797][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.026219][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1253.026238][ T10] usb 3-1: Product: syz [ 1253.026251][ T10] usb 3-1: Manufacturer: syz [ 1253.059779][ T10] hub 3-1:4.0: USB hub found [ 1253.072436][ T1202] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1253.206890][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1253.235067][ T1202] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 1253.236466][ T1202] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.236487][ T1202] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1253.236525][ T1202] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 1253.240728][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.240746][ T1202] usb 1-1: Product: syz [ 1253.240760][ T1202] usb 1-1: Manufacturer: syz [ 1253.240793][ T1202] usb 1-1: SerialNumber: syz [ 1253.278739][ T10] hub 3-1:4.0: 1 port detected [ 1253.480781][ T1202] usb 1-1: USB disconnect, device number 83 [ 1253.703274][ T5704] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1253.784097][ T5334] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1253.883501][ T5704] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1253.886354][ T5704] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.888332][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.888349][ T5704] usb 6-1: Product: syz [ 1253.888364][ T5704] usb 6-1: Manufacturer: syz [ 1253.888377][ T5704] usb 6-1: SerialNumber: syz [ 1253.922553][ T30] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1253.952408][ T5334] usb 4-1: Using ep0 maxpacket: 8 [ 1253.952982][ T5334] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1253.953915][ T5334] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1253.953968][ T5334] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1253.953981][ T5334] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1253.953994][ T5334] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1253.954023][ T5334] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1253.954054][ T5334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.988716][ T10] usb 3-1: USB disconnect, device number 47 [ 1254.076963][T17638] block2mtd: error: cannot open device /dev/zram0 [ 1254.084128][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 1254.086176][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1254.086209][ T30] usb 5-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1254.098040][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1254.104958][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.104976][ T30] usb 5-1: Product: syz [ 1254.104991][ T30] usb 5-1: Manufacturer: syz [ 1254.105004][ T30] usb 5-1: SerialNumber: syz [ 1254.126147][ T5704] snd-usb-6fire 6-1:1.0: unknown device firmware state received from device: [ 1254.126161][ T5704] 00 00 00 00 00 00 00 00 [ 1254.126221][ T5704] snd-usb-6fire 6-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1254.621408][ T10] usb 6-1: USB disconnect, device number 35 [ 1255.185060][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1255.185094][ T30] usb 5-1: MIDIStreaming interface descriptor not found [ 1255.269028][ T30] usb 5-1: USB disconnect, device number 63 [ 1255.329759][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1255.522679][ T5334] usb 4-1: usb_control_msg returned -32 [ 1255.522715][ T5334] usbtmc 4-1:16.0: can't read capabilities [ 1255.934545][ T8745] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1256.092437][ T5733] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1256.102925][ T8745] usb 3-1: Using ep0 maxpacket: 32 [ 1256.108770][ T8745] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1256.130082][ T8745] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.130113][ T8745] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.172414][ C1] net_ratelimit: 56 callbacks suppressed [ 1256.236019][ T8745] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1256.236078][ T8745] usb 3-1: Product: syz [ 1256.236109][ T8745] usb 3-1: Manufacturer: syz [ 1256.441912][ T8745] hub 3-1:4.0: USB hub found [ 1256.644004][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 1256.644595][ T5733] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1256.645588][ T5733] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 1256.645629][ T5733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.645649][ T5733] usb 1-1: config 0 has no interface number 0 [ 1256.645681][ T5733] usb 1-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1256.645714][ T5733] usb 1-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1256.645739][ T5733] usb 1-1: config 0 interface 68 has no altsetting 0 [ 1256.647732][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.647751][ T5733] usb 1-1: Product: syz [ 1256.647765][ T5733] usb 1-1: Manufacturer: syz [ 1256.647779][ T5733] usb 1-1: SerialNumber: syz [ 1256.650167][ T5733] usb 1-1: config 0 descriptor?? [ 1256.686794][ T8745] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1256.740295][ T8745] usb 3-1: USB disconnect, device number 48 [ 1256.772070][ T5733] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1256.790199][ T10] usb 4-1: USB disconnect, device number 37 [ 1257.145745][ T5733] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1257.189093][ T30] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1257.328430][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1257.331480][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1257.477773][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1257.543589][ T5733] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1257.544961][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 1257.546086][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1257.567825][ T5733] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.567845][ T5733] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1257.567891][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.592762][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.593447][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1257.605415][ T8745] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1257.767728][ T8745] usb 3-1: Using ep0 maxpacket: 32 [ 1257.790798][ T8745] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1257.819504][ T8745] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.819583][ T8745] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.845201][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.845219][ T30] usb 6-1: Product: syz [ 1257.845233][ T30] usb 6-1: Manufacturer: syz [ 1257.845249][ T30] usb 6-1: SerialNumber: syz [ 1257.941931][ T8745] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1257.941959][ T8745] usb 3-1: Product: syz [ 1257.942002][ T8745] usb 3-1: Manufacturer: syz [ 1257.975103][T12687] usb 1-1: Failed to submit usb control message: -110 [ 1257.975172][T12687] usb 1-1: unable to send the bmi data to the device: -110 [ 1257.975214][T12687] usb 1-1: unable to get target info from device [ 1257.975253][T12687] usb 1-1: could not get target info (-110) [ 1257.975294][T12687] usb 1-1: could not probe fw (-110) [ 1257.996785][ T5733] usb 5-1: config 0 descriptor?? [ 1258.053470][ T31] audit: type=1400 audit(1791988693.525:848): avc: denied { write } for pid=17650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.252510][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1258.260252][ C0] raw-gadget.4 gadget.3: ignoring, device is not running [ 1258.315647][ T8745] hub 3-1:4.0: USB hub found [ 1258.443399][ T10] usb 4-1: device descriptor read/64, error -32 [ 1258.584169][ T30] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1258.585019][ T30] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1258.585150][ T30] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1258.600092][ T8745] hub 3-1:4.0: 1 port detected [ 1258.622147][ T30] usb 6-1: USB disconnect, device number 36 [ 1258.667206][ T31] audit: type=1400 audit(1791988694.135:849): avc: denied { write } for pid=17682 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.702528][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1258.770819][ T5334] usb 1-1: USB disconnect, device number 84 [ 1258.853977][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1258.855781][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.855892][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1258.858035][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.858054][ T10] usb 4-1: Product: syz [ 1258.858094][ T10] usb 4-1: Manufacturer: syz [ 1258.858108][ T10] usb 4-1: SerialNumber: syz [ 1258.897739][ T10] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1259.112296][T17677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17677 comm=syz.3.3043 [ 1259.474962][ T30] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1259.623402][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 1259.631907][ T30] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1259.645172][ T30] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1259.645221][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.645267][ T30] usb 6-1: config 0 has no interface number 0 [ 1259.645336][ T30] usb 6-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1259.645453][ T30] usb 6-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1259.645505][ T30] usb 6-1: config 0 interface 68 has no altsetting 0 [ 1259.696775][ T31] audit: type=1400 audit(1791988695.165:850): avc: denied { write } for pid=17684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.746727][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.746746][ T30] usb 6-1: Product: syz [ 1259.746760][ T30] usb 6-1: Manufacturer: syz [ 1259.746774][ T30] usb 6-1: SerialNumber: syz [ 1259.794175][ T8745] hub 3-1:4.0: activate --> -90 [ 1259.796385][ T30] usb 6-1: config 0 descriptor?? [ 1259.821741][ T31] audit: type=1400 audit(1791988695.285:851): avc: denied { write } for pid=17704 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.908852][ T1202] usb 5-1: USB disconnect, device number 64 [ 1259.929999][ T30] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1260.002143][ T30] usb 3-1: USB disconnect, device number 49 [ 1260.072910][T17712] block2mtd: error: cannot open device /dev/zram0 [ 1261.046231][T12684] usb 6-1: Failed to submit usb control message: -110 [ 1261.046348][T12684] usb 6-1: unable to send the bmi data to the device: -110 [ 1261.046365][T12684] usb 6-1: unable to get target info from device [ 1261.046409][T12684] usb 6-1: could not get target info (-110) [ 1261.046491][T12684] usb 6-1: could not probe fw (-110) [ 1261.222566][ C0] net_ratelimit: 63 callbacks suppressed [ 1261.483369][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1261.483456][ T10] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 1262.892921][ T10] usb 4-1: USB disconnect, device number 39 [ 1262.995356][ T5733] usb 6-1: USB disconnect, device number 37 [ 1263.092485][ T30] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1263.165580][ T5612] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1263.237937][T17732] fuse: Bad value for 'fd' [ 1263.249843][ T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1263.261992][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.275793][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.275808][ T30] usb 5-1: Product: syz [ 1263.275819][ T30] usb 5-1: Manufacturer: syz [ 1263.275831][ T30] usb 5-1: SerialNumber: syz [ 1263.362443][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1263.482634][ T5334] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1263.489390][ T30] snd-usb-6fire 5-1:1.0: unknown device firmware state received from device: [ 1263.489401][ T30] 00 00 00 00 00 00 00 00 [ 1263.489495][ T30] snd-usb-6fire 5-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1263.522595][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1263.523435][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1263.524593][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1263.524641][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1263.524658][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1263.524678][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1263.524698][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1263.524744][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.632450][ T5334] usb 4-1: Using ep0 maxpacket: 8 [ 1263.634215][ T5334] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1263.634238][ T5334] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1263.635160][ T5334] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1263.637002][ T5334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.637013][ T5334] usb 4-1: Product: syz [ 1263.637021][ T5334] usb 4-1: Manufacturer: syz [ 1263.637030][ T5334] usb 4-1: SerialNumber: syz [ 1263.699811][ T8745] usb 5-1: USB disconnect, device number 65 [ 1263.889285][ T5334] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.889320][ T5334] usb 4-1: MIDIStreaming interface descriptor not found [ 1263.993462][ T10] usb 3-1: usb_control_msg returned -32 [ 1263.993498][ T10] usbtmc 3-1:16.0: can't read capabilities [ 1264.064031][ T5334] usb 4-1: USB disconnect, device number 40 [ 1264.141732][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.192428][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1264.290981][ T31] audit: type=1400 audit(1791988699.755:852): avc: denied { write } for pid=17738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.343109][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1264.343989][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.345793][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.345804][ T10] usb 6-1: Product: syz [ 1264.345812][ T10] usb 6-1: Manufacturer: syz [ 1264.345821][ T10] usb 6-1: SerialNumber: syz [ 1264.397871][ T5733] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1264.420434][ T31] audit: type=1400 audit(1791988699.885:853): avc: denied { write } for pid=17754 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.514216][ T8745] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1264.554711][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 1264.555994][ T5733] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1264.557009][ T5733] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 1264.557029][ T5733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.557046][ T5733] usb 1-1: config 0 has no interface number 0 [ 1264.557070][ T5733] usb 1-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1264.557118][ T5733] usb 1-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1264.557143][ T5733] usb 1-1: config 0 interface 68 has no altsetting 0 [ 1264.560114][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.560133][ T5733] usb 1-1: Product: syz [ 1264.560146][ T5733] usb 1-1: Manufacturer: syz [ 1264.560159][ T5733] usb 1-1: SerialNumber: syz [ 1264.569222][ T5733] usb 1-1: config 0 descriptor?? [ 1264.578837][ T10] snd-usb-6fire 6-1:1.0: unknown device firmware state received from device: [ 1264.578852][ T10] 00 00 00 00 00 00 00 00 [ 1264.578917][ T10] snd-usb-6fire 6-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1264.617991][ T5733] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1264.742796][ T8745] usb 5-1: Using ep0 maxpacket: 8 [ 1264.747791][ T8745] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1264.767192][ T8745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.767250][ T8745] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.839307][ T8745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.839397][ T8745] usb 5-1: Product: syz [ 1264.839412][ T8745] usb 5-1: Manufacturer: syz [ 1264.839602][ T8745] usb 5-1: SerialNumber: syz [ 1265.066704][ T8745] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1265.067564][ T8745] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1265.067617][ T8745] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1265.625853][ T8745] usb 5-1: USB disconnect, device number 66 [ 1265.760421][ T5334] usb 6-1: USB disconnect, device number 38 [ 1265.772798][ T998] usb 1-1: Failed to submit usb control message: -110 [ 1265.772823][ T998] usb 1-1: unable to send the bmi data to the device: -110 [ 1265.772841][ T998] usb 1-1: unable to get target info from device [ 1265.772854][ T998] usb 1-1: could not get target info (-110) [ 1265.772870][ T998] usb 1-1: could not probe fw (-110) [ 1265.910541][ T31] audit: type=1400 audit(1791988701.375:854): avc: denied { write } for pid=17756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.082883][ T31] audit: type=1400 audit(1791988701.555:855): avc: denied { write } for pid=17780 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.252415][ C1] net_ratelimit: 27 callbacks suppressed [ 1267.664069][ T5733] usb 1-1: USB disconnect, device number 85 [ 1267.717863][T17791] block2mtd: error: cannot open device /dev/zram0 [ 1267.827993][ T5749] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1268.072510][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 1268.080970][ T5749] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1268.094909][ T5749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.094991][ T5749] usb 4-1: config 0 has no interfaces? [ 1268.126524][T17799] siw: device registration error -23 [ 1268.146908][ T30] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1268.229586][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.229631][ T5749] usb 4-1: Product: syz [ 1268.229692][ T5749] usb 4-1: Manufacturer: syz [ 1268.229733][ T5749] usb 4-1: SerialNumber: syz [ 1268.315062][ T30] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1268.322176][ T5749] usb 4-1: config 0 descriptor?? [ 1268.322608][ T5733] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1268.375627][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1268.375645][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1268.375677][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.390099][ T30] usb 5-1: NFC: Reader power on cmd error -90 [ 1268.390112][ T30] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 1268.390206][ T30] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -90 [ 1268.532879][ T5733] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1268.533724][ T5733] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1268.533738][ T5733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1268.533769][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.539071][ T5733] usb 1-1: NFC: Reader power on cmd error -90 [ 1268.539086][ T5733] pn533_usb 1-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 1268.539200][ T5733] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -90 [ 1268.580714][ T5733] usb 4-1: USB disconnect, device number 41 [ 1268.625063][ T8745] usb 5-1: USB disconnect, device number 67 [ 1268.769955][ T1202] usb 1-1: USB disconnect, device number 86 [ 1269.533199][T17730] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 1269.802608][ T5733] usb 3-1: USB disconnect, device number 50 [ 1269.907291][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1269.907619][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1269.911174][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1270.999680][ T5334] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1271.166886][ T5334] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1271.170713][ T5334] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.170988][ T5334] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1271.260198][ T5334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.260272][ T5334] usb 6-1: Product: syz [ 1271.260309][ T5334] usb 6-1: Manufacturer: syz [ 1271.260344][ T5334] usb 6-1: SerialNumber: syz [ 1271.443881][ T5334] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1271.532413][ C1] net_ratelimit: 179 callbacks suppressed [ 1271.718078][T17812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17812 comm=syz.5.3066 [ 1271.818562][ T5334] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1271.818988][ T5334] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 1272.111253][ T5334] usb 6-1: USB disconnect, device number 39 [ 1272.488249][T17826] FAULT_INJECTION: forcing a failure. [ 1272.488249][T17826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.488277][T17826] CPU: 0 UID: 0 PID: 17826 Comm: syz.0.3069 Not tainted syzkaller #0 PREEMPT(full) [ 1272.488291][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1272.488299][T17826] Call Trace: [ 1272.488303][T17826] [ 1272.488308][T17826] dump_stack_lvl+0x100/0x190 [ 1272.488336][T17826] should_fail_ex.cold+0x5/0xa [ 1272.488355][T17826] _copy_from_user+0x2e/0xd0 [ 1272.488373][T17826] __sys_bpf+0x2f5/0x4a30 [ 1272.488390][T17826] ? __pfx___sys_bpf+0x10/0x10 [ 1272.488402][T17826] ? find_held_lock+0x2b/0x80 [ 1272.488419][T17826] ? futex_wake+0x4ea/0x5e0 [ 1272.488440][T17826] ? rcu_read_lock_any_held+0x6a/0x90 [ 1272.488457][T17826] ? find_held_lock+0x2b/0x80 [ 1272.488474][T17826] ? ksys_write+0x190/0x250 [ 1272.488488][T17826] ? ksys_write+0x190/0x250 [ 1272.488511][T17826] ? __x64_sys_futex+0x34f/0x4d0 [ 1272.488527][T17826] ? __x64_sys_futex+0x358/0x4d0 [ 1272.488544][T17826] ? fput+0x7c/0x100 [ 1272.488560][T17826] ? __pfx___x64_sys_futex+0x10/0x10 [ 1272.488575][T17826] ? ksys_write+0x1ac/0x250 [ 1272.488590][T17826] ? __x64_sys_bpf+0xce/0x140 [ 1272.488602][T17826] __x64_sys_bpf+0xce/0x140 [ 1272.488615][T17826] ? do_syscall_64+0xae/0x790 [ 1272.488632][T17826] do_syscall_64+0x123/0x790 [ 1272.488648][T17826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.488660][T17826] RIP: 0033:0x7f18f1d9e2d9 [ 1272.488671][T17826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.488681][T17826] RSP: 002b:00007f18f2c04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1272.488693][T17826] RAX: ffffffffffffffda RBX: 00007f18f2025fa0 RCX: 00007f18f1d9e2d9 [ 1272.488701][T17826] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 1272.488709][T17826] RBP: 00007f18f1e35888 R08: 0000000000000000 R09: 0000000000000000 [ 1272.488716][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.488724][T17826] R13: 00007f18f2026038 R14: 00007f18f2025fa0 R15: 00007ffc4dee08b8 [ 1272.488740][T17826] [ 1272.868683][T14980] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1272.973103][T17840] ip6erspan0: entered allmulticast mode [ 1273.696769][ T5334] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1273.789671][ T8745] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1274.052561][ T5334] usb 5-1: Using ep0 maxpacket: 16 [ 1274.063522][ T5334] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1274.119183][ T5334] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 1274.119211][ T5334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.119230][ T5334] usb 5-1: config 0 has no interface number 0 [ 1274.119255][ T5334] usb 5-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1274.119287][ T5334] usb 5-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1274.119311][ T5334] usb 5-1: config 0 interface 68 has no altsetting 0 [ 1274.151212][ T8745] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1274.273359][ T8745] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.283258][ T5334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.283278][ T5334] usb 5-1: Product: syz [ 1274.283292][ T5334] usb 5-1: Manufacturer: syz [ 1274.283306][ T5334] usb 5-1: SerialNumber: syz [ 1274.459173][ T8745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.459191][ T8745] usb 4-1: Product: syz [ 1274.459204][ T8745] usb 4-1: Manufacturer: syz [ 1274.459219][ T8745] usb 4-1: SerialNumber: syz [ 1274.485663][ T5334] usb 5-1: config 0 descriptor?? [ 1274.492447][ T5749] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1274.529909][ T5334] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1274.642439][ T5749] usb 6-1: Using ep0 maxpacket: 8 [ 1274.658716][ T5749] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1274.658944][ T5749] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1274.686987][ T5749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1274.687940][ T30] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1274.768159][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.768178][ T5749] usb 6-1: Product: syz [ 1274.768213][ T5749] usb 6-1: Manufacturer: syz [ 1274.768268][ T5749] usb 6-1: SerialNumber: syz [ 1274.882810][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 1274.888802][ T30] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1274.922006][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.933338][ T30] usb 3-1: config 0 has no interfaces? [ 1274.984125][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.984504][ T30] usb 3-1: Product: syz [ 1274.985509][ T30] usb 3-1: Manufacturer: syz [ 1274.986116][ T30] usb 3-1: SerialNumber: syz [ 1275.035049][ T8745] snd-usb-6fire 4-1:1.0: unknown device firmware state received from device: [ 1275.035070][ T8745] 00 00 00 00 00 00 00 00 [ 1275.035134][ T8745] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1275.239071][ T30] usb 3-1: config 0 descriptor?? [ 1276.254350][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 1276.307256][T12689] usb 5-1: Failed to submit usb control message: -110 [ 1276.307280][T12689] usb 5-1: unable to send the bmi data to the device: -110 [ 1276.307312][T12689] usb 5-1: unable to get target info from device [ 1276.307324][T12689] usb 5-1: could not get target info (-110) [ 1276.307337][T12689] usb 5-1: could not probe fw (-110) [ 1276.615013][ T5334] usb 3-1: USB disconnect, device number 51 [ 1277.191234][ T5334] usb 4-1: USB disconnect, device number 42 [ 1277.372395][ C0] net_ratelimit: 42 callbacks suppressed [ 1277.467112][ T5749] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1277.467153][ T5749] usb 6-1: MIDIStreaming interface descriptor not found [ 1277.572663][ T5749] usb 6-1: USB disconnect, device number 40 [ 1277.650088][T17867] netlink: 'syz.5.3080': attribute type 1 has an invalid length. [ 1277.650102][T17867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3080'. [ 1277.750326][ T5795] usb 5-1: USB disconnect, device number 68 [ 1277.763667][T15810] udevd[15810]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.855753][T17870] siw: device registration error -23 [ 1278.577625][T17875] FAULT_INJECTION: forcing a failure. [ 1278.577625][T17875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.577666][T17875] CPU: 0 UID: 0 PID: 17875 Comm: syz.4.3082 Not tainted syzkaller #0 PREEMPT(full) [ 1278.577690][T17875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1278.577702][T17875] Call Trace: [ 1278.577710][T17875] [ 1278.577718][T17875] dump_stack_lvl+0x100/0x190 [ 1278.577753][T17875] should_fail_ex.cold+0x5/0xa [ 1278.577790][T17875] _copy_from_user+0x2e/0xd0 [ 1278.577819][T17875] __sys_bpf+0x2f5/0x4a30 [ 1278.577850][T17875] ? __pfx___sys_bpf+0x10/0x10 [ 1278.577872][T17875] ? __pfx_futex_hash+0x10/0x10 [ 1278.577912][T17875] ? rcu_is_watching+0x13/0xc0 [ 1278.577950][T17875] ? rcu_is_watching+0x13/0xc0 [ 1278.577979][T17875] ? trace_sched_exit_tp+0x120/0x160 [ 1278.578024][T17875] ? __x64_sys_futex+0x34f/0x4d0 [ 1278.578052][T17875] ? __x64_sys_futex+0x358/0x4d0 [ 1278.578084][T17875] ? xfd_validate_state+0x129/0x190 [ 1278.578110][T17875] ? __x64_sys_bpf+0xce/0x140 [ 1278.578131][T17875] __x64_sys_bpf+0xce/0x140 [ 1278.578154][T17875] ? do_syscall_64+0xae/0x790 [ 1278.578183][T17875] do_syscall_64+0x123/0x790 [ 1278.578214][T17875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.578234][T17875] RIP: 0033:0x7feb31d9e2d9 [ 1278.578251][T17875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.578271][T17875] RSP: 002b:00007feb32b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1278.578290][T17875] RAX: ffffffffffffffda RBX: 00007feb32026090 RCX: 00007feb31d9e2d9 [ 1278.578304][T17875] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 1278.578317][T17875] RBP: 00007feb31e35888 R08: 0000000000000000 R09: 0000000000000000 [ 1278.578329][T17875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.578342][T17875] R13: 00007feb32026128 R14: 00007feb32026090 R15: 00007fffbc14ac58 [ 1278.578369][T17875] [ 1279.564786][T14980] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1279.642516][ T5795] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1279.652794][ T5749] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1279.660066][ T5334] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1279.793850][ T5795] usb 1-1: Using ep0 maxpacket: 8 [ 1279.794343][ T5795] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1279.795383][ T5795] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1279.795434][ T5795] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1279.795455][ T5795] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1279.795476][ T5795] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1279.795498][ T5795] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.795532][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.802447][ T5334] usb 6-1: Using ep0 maxpacket: 8 [ 1279.809141][ T5334] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1279.810906][ T5334] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.810951][ T5334] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.813133][ T5334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.813149][ T5334] usb 6-1: Product: syz [ 1279.813162][ T5334] usb 6-1: Manufacturer: syz [ 1279.813175][ T5334] usb 6-1: SerialNumber: syz [ 1279.817241][ T5749] usb 4-1: Using ep0 maxpacket: 8 [ 1279.826260][ T5334] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1279.826982][ T5334] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1279.827028][ T5334] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1279.836881][ T5749] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1279.884078][ T5749] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1279.884140][ T5749] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1279.884159][ T5749] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1279.884179][ T5749] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1279.884200][ T5749] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.884245][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.904257][ T1202] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1280.040010][ T5334] usb 6-1: USB disconnect, device number 41 [ 1280.052477][ T1202] usb 5-1: Using ep0 maxpacket: 8 [ 1280.059757][ T1202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1280.059795][ T1202] usb 5-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 1280.061904][ T1202] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1280.065611][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.065628][ T1202] usb 5-1: Product: syz [ 1280.065641][ T1202] usb 5-1: Manufacturer: syz [ 1280.065654][ T1202] usb 5-1: SerialNumber: syz [ 1280.250417][ T5795] usb 1-1: usb_control_msg returned -32 [ 1280.250452][ T5795] usbtmc 1-1:16.0: can't read capabilities [ 1280.369867][ T1202] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1280.369905][ T1202] usb 5-1: MIDIStreaming interface descriptor not found [ 1280.421957][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1280.425536][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1280.441625][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1280.455120][ T5749] usb 4-1: usb_control_msg returned -32 [ 1280.455160][ T5749] usbtmc 4-1:16.0: can't read capabilities [ 1280.506074][ T1202] usb 5-1: USB disconnect, device number 69 [ 1280.621564][T15716] udevd[15716]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.725976][ T31] audit: type=1400 audit(1791988716.185:856): avc: denied { write } for pid=17890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1280.844577][ T5334] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1281.005573][ T5334] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1281.041746][ T5334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.042327][ T5334] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1281.134349][ T5334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.134375][ T5334] usb 3-1: Product: syz [ 1281.134585][ T5334] usb 3-1: Manufacturer: syz [ 1281.134647][ T5334] usb 3-1: SerialNumber: syz [ 1281.572018][ T5334] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1281.648792][ T31] audit: type=1400 audit(1791988717.115:857): avc: denied { write } for pid=17908 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1281.694526][T17895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17895 comm=syz.2.3087 [ 1281.931375][ T31] audit: type=1400 audit(1791988717.395:858): avc: denied { write } for pid=17911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1281.994598][ T31] audit: type=1400 audit(1791988717.465:859): avc: denied { write } for pid=17926 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.024615][ T8745] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1282.042433][ T1202] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1282.182511][ T8745] usb 6-1: Using ep0 maxpacket: 32 [ 1282.184243][ T8745] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1282.185601][ T8745] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.185615][ T8745] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.187103][ T8745] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1282.187114][ T8745] usb 6-1: Product: syz [ 1282.187123][ T8745] usb 6-1: Manufacturer: syz [ 1282.192479][ T1202] usb 5-1: Using ep0 maxpacket: 8 [ 1282.193850][ T1202] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1282.194860][ T1202] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.194878][ T1202] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1282.194971][ T1202] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1282.195874][ T8745] hub 6-1:4.0: USB hub found [ 1282.200587][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.200610][ T1202] usb 5-1: Product: syz [ 1282.200634][ T1202] usb 5-1: Manufacturer: syz [ 1282.200673][ T1202] usb 5-1: SerialNumber: syz [ 1282.399725][ T8745] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1282.434771][ T8745] usb 6-1: USB disconnect, device number 42 [ 1282.492641][ C0] net_ratelimit: 39 callbacks suppressed [ 1282.862477][ T8745] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1283.012537][ T8745] usb 6-1: Using ep0 maxpacket: 32 [ 1283.013397][ T8745] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1283.015191][ T8745] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.015206][ T8745] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.017118][ T8745] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1283.017130][ T8745] usb 6-1: Product: syz [ 1283.017139][ T8745] usb 6-1: Manufacturer: syz [ 1283.085682][ T8745] hub 6-1:4.0: USB hub found [ 1283.261598][ T1202] usb 5-1: unit 4 not found! [ 1283.293746][ T8745] hub 6-1:4.0: 1 port detected [ 1283.311698][ T1202] usb 5-1: USB disconnect, device number 70 [ 1283.408441][ T5334] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1283.408556][ T5334] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 1283.424979][ T5334] usb 3-1: USB disconnect, device number 52 [ 1283.529924][T17930] syzkaller1: entered promiscuous mode [ 1283.529934][T17930] syzkaller1: entered allmulticast mode [ 1283.872476][ T30] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1284.022464][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 1284.022993][ T30] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1284.023933][ T30] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 1284.023952][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.023970][ T30] usb 3-1: config 0 has no interface number 0 [ 1284.023993][ T30] usb 3-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1284.024023][ T30] usb 3-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1284.024046][ T30] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1284.026933][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.026954][ T30] usb 3-1: Product: syz [ 1284.026968][ T30] usb 3-1: Manufacturer: syz [ 1284.026984][ T30] usb 3-1: SerialNumber: syz [ 1284.029148][ T30] usb 3-1: config 0 descriptor?? [ 1284.123871][ T8745] hub 6-1:4.0: activate --> -90 [ 1284.140582][ T30] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1284.330377][ T30] usb 6-1: USB disconnect, device number 43 [ 1285.452458][T14980] Bluetooth: hci0: command 0x0406 tx timeout [ 1285.842626][ T30] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1286.003028][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 1286.007151][ T30] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1286.009794][ T30] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1286.009815][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.009909][ T30] usb 6-1: config 0 has no interface number 0 [ 1286.010078][ T30] usb 6-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 1286.010174][ T30] usb 6-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1286.010204][ T30] usb 6-1: config 0 interface 68 has no altsetting 0 [ 1286.012648][T17887] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 1286.106060][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.106079][ T30] usb 6-1: Product: syz [ 1286.106093][ T30] usb 6-1: Manufacturer: syz [ 1286.106107][ T30] usb 6-1: SerialNumber: syz [ 1286.109766][ T30] usb 6-1: config 0 descriptor?? [ 1286.128608][ T998] usb 3-1: Failed to submit usb control message: -110 [ 1286.128629][ T998] usb 3-1: unable to send the bmi data to the device: -110 [ 1286.128644][ T998] usb 3-1: unable to get target info from device [ 1286.128656][ T998] usb 3-1: could not get target info (-110) [ 1286.128669][ T998] usb 3-1: could not probe fw (-110) [ 1286.191098][ T30] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1286.222737][ T30] usb 4-1: USB disconnect, device number 43 [ 1286.223373][ T8745] usb 1-1: USB disconnect, device number 87 [ 1286.223521][ T5334] usb 3-1: USB disconnect, device number 53 [ 1287.612526][ C1] net_ratelimit: 27 callbacks suppressed [ 1289.157484][T12686] usb 6-1: Failed to submit usb control message: -110 [ 1289.157504][T12686] usb 6-1: unable to send the bmi data to the device: -110 [ 1289.157513][T12686] usb 6-1: unable to get target info from device [ 1289.157522][T12686] usb 6-1: could not get target info (-110) [ 1289.157531][T12686] usb 6-1: could not probe fw (-110) [ 1289.961834][ T5749] usb 6-1: USB disconnect, device number 44 [ 1292.652394][ C1] net_ratelimit: 196 callbacks suppressed [ 1293.921461][T14980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1293.939872][T14980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1293.946407][T14980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1293.952603][ T31] audit: type=1400 audit(1791988729.415:860): avc: denied { append } for pid=17988 comm="syz.2.3105" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1293.952734][T17990] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 1293.987222][T14980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1294.001096][T14980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1294.338581][T17991] /dev/sg0: Can't lookup blockdev [ 1294.353190][T17991] FAULT_INJECTION: forcing a failure. [ 1294.353190][T17991] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.353244][T17991] CPU: 0 UID: 0 PID: 17991 Comm: syz.2.3105 Not tainted syzkaller #0 PREEMPT(full) [ 1294.353265][T17991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1294.353277][T17991] Call Trace: [ 1294.353284][T17991] [ 1294.353291][T17991] dump_stack_lvl+0x100/0x190 [ 1294.353324][T17991] should_fail_ex.cold+0x5/0xa [ 1294.353351][T17991] should_failslab+0xc2/0x120 [ 1294.353379][T17991] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1294.353405][T17991] ? proc_alloc_inode+0x25/0x200 [ 1294.353427][T17991] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1294.353447][T17991] proc_alloc_inode+0x25/0x200 [ 1294.353466][T17991] alloc_inode+0x68/0x250 [ 1294.353487][T17991] new_inode+0x22/0x1c0 [ 1294.353511][T17991] proc_pid_make_inode+0x22/0x160 [ 1294.353531][T17991] proc_pident_instantiate+0x85/0x310 [ 1294.353553][T17991] proc_pident_lookup+0x1e3/0x270 [ 1294.353574][T17991] ? __pfx_down_read+0x10/0x10 [ 1294.353595][T17991] __lookup_slow+0x155/0x320 [ 1294.353619][T17991] lookup_slow+0x50/0x70 [ 1294.353639][T17991] link_path_walk+0x1377/0x1cc0 [ 1294.353672][T17991] path_openat+0x1ac/0x2440 [ 1294.353702][T17991] ? __pfx_path_openat+0x10/0x10 [ 1294.353735][T17991] do_file_open+0x20e/0x430 [ 1294.353764][T17991] ? __pfx_do_file_open+0x10/0x10 [ 1294.353800][T17991] ? __pfx_kfree_link+0x10/0x10 [ 1294.353831][T17991] ? _raw_spin_unlock+0x28/0x50 [ 1294.353852][T17991] ? alloc_fd+0x471/0x7a0 [ 1294.353886][T17991] do_sys_openat2+0x10f/0x1e0 [ 1294.353905][T17991] ? __pfx_do_sys_openat2+0x10/0x10 [ 1294.353924][T17991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1294.353952][T17991] ? __fget_files+0x21f/0x3d0 [ 1294.353982][T17991] __x64_sys_openat+0x12d/0x210 [ 1294.354001][T17991] ? __pfx___x64_sys_openat+0x10/0x10 [ 1294.354017][T17991] ? ksys_write+0x1ac/0x250 [ 1294.354054][T17991] do_syscall_64+0x123/0x790 [ 1294.354083][T17991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.354102][T17991] RIP: 0033:0x7f197375eb0e [ 1294.354118][T17991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1294.354136][T17991] RSP: 002b:00007f197457eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1294.354155][T17991] RAX: ffffffffffffffda RBX: 00007f197457f6c0 RCX: 00007f197375eb0e [ 1294.354167][T17991] RDX: 0000000000000002 RSI: 00007f197457ef90 RDI: ffffffffffffff9c [ 1294.354178][T17991] RBP: 00007f197457f090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.354189][T17991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.354199][T17991] R13: 00007f1973a26128 R14: 00007f1973a26090 R15: 00007ffd4aeb9e38 [ 1294.354226][T17991] [ 1294.660335][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.660373][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.994326][T18010] siw: device registration error -23 [ 1295.126381][T18006] No control pipe specified [ 1295.587030][T17993] tps6598x 0-0020: failed to read vendor ID: -5, vid: 0x0 [ 1295.606597][T17993] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 1295.683082][T18016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3108'. [ 1296.122463][ T30] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1296.122914][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1296.252427][ T30] usb 6-1: device descriptor read/64, error -32 [ 1296.334830][ T5612] Bluetooth: hci2: command tx timeout [ 1296.633309][ T30] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1296.742819][ T5612] Bluetooth: hci4: command 0x040f tx timeout [ 1296.784670][ T30] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1296.837661][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.042277][T17987] lo speed is unknown, defaulting to 1000 [ 1297.772385][ C0] net_ratelimit: 91 callbacks suppressed [ 1297.772514][ T1202] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1297.922512][ T1202] usb 5-1: Using ep0 maxpacket: 32 [ 1297.924816][ T1202] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1297.928179][ T1202] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1297.928279][ T1202] usb 5-1: config 0 has no interface number 0 [ 1297.973262][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.973324][ T1202] usb 5-1: Product: syz [ 1297.973427][ T1202] usb 5-1: Manufacturer: syz [ 1297.973477][ T1202] usb 5-1: SerialNumber: syz [ 1298.022039][ T1202] usb 5-1: config 0 descriptor?? [ 1298.170759][ C1] ========= ** replaying previous printk message ** [ 1298.170759][ C1] ================================================================== [ 1298.170768][ C1] BUG: KASAN: slab-out-of-bounds in hex_dump_to_buffer+0xbc4/0xc60 [ 1298.170796][ C1] Read of size 1 at addr ffff888055a45640 by task kworker/1:1H/2093 [ 1298.170814][ C1] [ 1298.170825][ C1] CPU: 1 UID: 0 PID: 2093 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1298.170853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1298.170869][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 1298.170896][ C1] Call Trace: [ 1298.170904][ C1] [ 1298.170914][ C1] dump_stack_lvl+0x100/0x190 [ 1298.170945][ C1] print_report+0x13d/0x4b0 [ 1298.170985][ C1] ? __virt_addr_valid+0x239/0x430 [ 1298.171011][ C1] ? hex_dump_to_buffer+0xbc4/0xc60 [ 1298.171033][ C1] kasan_report+0xdf/0x1c0 [ 1298.171068][ C1] ? hex_dump_to_buffer+0xbc4/0xc60 [ 1298.171094][ C1] hex_dump_to_buffer+0xbc4/0xc60 [ 1298.171117][ C1] print_hex_dump+0x14a/0x1f0 [ 1298.171138][ C1] ? __pfx_print_hex_dump+0x10/0x10 [ 1298.171158][ C1] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1298.171191][ C1] ? __alloc_skb+0x4e9/0x710 [ 1298.171220][ C1] ? find_held_lock+0x2b/0x80 [ 1298.171249][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1298.171279][ C1] ? kcov_remote_start+0x2e6/0x6d0 [ 1298.171302][ C1] ? kcov_remote_start+0x2e6/0x6d0 [ 1298.171328][ C1] pn533_recv_frame+0x48e/0x6d0 [ 1298.171353][ C1] ? pn533_recv_response+0x7c/0x200 [ 1298.171383][ C1] __usb_hcd_giveback_urb+0x38e/0x610 [ 1298.171412][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1298.171441][ C1] dummy_timer+0xdaf/0x3820 [ 1298.171475][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1298.171506][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1298.171534][ C1] ? mark_held_locks+0x40/0x70 [ 1298.171559][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1298.171585][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1298.171613][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1298.171649][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 1298.171671][ C1] handle_softirqs+0x1e6/0x9d0 [ 1298.171695][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1298.171715][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1298.171738][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1298.171760][ C1] __irq_exit_rcu+0x16a/0x210 [ 1298.171782][ C1] irq_exit_rcu+0x9/0x30 [ 1298.171803][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1298.171833][ C1] [ 1298.171841][ C1] [ 1298.171850][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1298.171875][ C1] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 1298.171903][ C1] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 b3 fe ff 09 e8 1e 42 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1298.171925][ C1] RSP: 0018:ffffc9000707f8d8 EFLAGS: 00000202 [ 1298.171944][ C1] RAX: 0000000003e2065d RBX: ffff88802e538000 RCX: 0000000000000040 [ 1298.171985][ C1] RDX: 0000000000000001 RSI: ffffffff8e3e346f RDI: ffff88802e539718 [ 1298.172002][ C1] RBP: ffffc9000707f930 R08: 0000000000000001 R09: 0000000000000000 [ 1298.172017][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88808d78a580 [ 1298.172031][ C1] R13: 0000000000000001 R14: ffffffff92459904 R15: ffff8880b833bf00 [ 1298.172053][ C1] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1298.172084][ C1] __schedule+0x1261/0x6920 [ 1298.172117][ C1] ? __pfx___schedule+0x10/0x10 [ 1298.172145][ C1] ? __wake_up+0x3f/0x60 [ 1298.172164][ C1] ? __wake_up+0x3f/0x60 [ 1298.172182][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1298.172210][ C1] preempt_schedule_common+0x3c/0xb0 [ 1298.172239][ C1] preempt_schedule_thunk+0x16/0x40 [ 1298.172269][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1298.172297][ C1] snd_rawmidi_transmit+0xf1/0x130 [ 1298.172324][ C1] snd_vmidi_output_work+0x111/0x390 [ 1298.172347][ C1] ? process_one_work+0xa2c/0x1b10 [ 1298.172376][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1298.172399][ C1] ? process_one_work+0x906/0x1b10 [ 1298.172432][ C1] ? process_one_work+0x906/0x1b10 [ 1298.172465][ C1] process_one_work+0xac7/0x1b10 [ 1298.172502][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1298.172537][ C1] ? lock_acquire+0x1d1/0x380 [ 1298.172564][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1298.172581][ C1] worker_thread+0x5ef/0xe50 [ 1298.172598][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1298.172616][ C1] ? kthread+0x13a/0x450 [ 1298.172641][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1298.172657][ C1] kthread+0x373/0x450 [ 1298.172682][ C1] ? __pfx_kthread+0x10/0x10 [ 1298.172707][ C1] ret_from_fork+0x730/0xd60 [ 1298.172729][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1298.172751][ C1] ? __switch_to+0x800/0x10f0 [ 1298.172776][ C1] ? __pfx_kthread+0x10/0x10 [ 1298.172802][ C1] ret_from_fork_asm+0x1a/0x30 [ 1298.172827][ C1] [ 1298.172835][ C1] [ 1298.172839][ C1] Allocated by task 2093: [ 1298.172848][ C1] kasan_save_stack+0x30/0x50 [ 1298.172872][ C1] kasan_save_track+0x14/0x30 [ 1298.172894][ C1] __kasan_slab_alloc+0x89/0x90 [ 1298.172916][ C1] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 1298.172939][ C1] kmalloc_reserve+0x148/0x350 [ 1298.172960][ C1] __alloc_skb+0x185/0x710 [ 1298.172990][ C1] pn533_recv_response+0x100/0x200 [ 1298.173016][ C1] __usb_hcd_giveback_urb+0x38e/0x610 [ 1298.173039][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1298.173062][ C1] dummy_timer+0xdaf/0x3820 [ 1298.173087][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1298.173113][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 1298.173129][ C1] handle_softirqs+0x1e6/0x9d0 [ 1298.173146][ C1] __irq_exit_rcu+0x16a/0x210 [ 1298.173164][ C1] irq_exit_rcu+0x9/0x30 [ 1298.173181][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1298.173204][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1298.173222][ C1] [ 1298.173227][ C1] The buggy address belongs to the object at ffff888055a45380 [ 1298.173227][ C1] which belongs to the cache skbuff_small_head of size 704 [ 1298.173242][ C1] The buggy address is located 0 bytes to the right of [ 1298.173242][ C1] allocated 704-byte region [ffff888055a45380, ffff888055a45640) [ 1298.173260][ C1] [ 1298.173265][ C1] The buggy address belongs to the physical page: [ 1298.173274][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55a44 [ 1298.173292][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1298.173306][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1298.173323][ C1] page_type: f5(slab) [ 1298.173339][ C1] raw: 00fff00000000040 ffff888021ae8b40 dead000000000100 dead000000000122 [ 1298.173356][ C1] raw: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000 [ 1298.173373][ C1] head: 00fff00000000040 ffff888021ae8b40 dead000000000100 dead000000000122 [ 1298.173390][ C1] head: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000 [ 1298.173407][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1298.173424][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1298.173435][ C1] page dumped because: kasan: bad access detected [ 1298.173444][ C1] page_owner tracks the page as allocated [ 1298.173450][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16404, tgid 16404 (syz-executor), ts 1143707632772 [ 1298.173480][ C1] post_alloc_hook+0xfd/0x120 [ 1298.173498][ C1] get_page_from_freelist+0x110d/0x35d0 [ 1298.173518][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1298.173538][ C1] new_slab+0xa9/0x6e0 [ 1298.173555][ C1] refill_objects+0xe3/0x410 [ 1298.173573][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 1298.173591][ C1] kmem_cache_alloc_node_noprof+0x4f2/0x6e0 [ 1298.173614][ C1] kmalloc_reserve+0x148/0x350 [ 1298.173634][ C1] __alloc_skb+0x185/0x710 [ 1298.173659][ C1] netlink_alloc_large_skb+0x69/0x150 [ 1298.173686][ C1] netlink_sendmsg+0x680/0xda0 [ 1298.173711][ C1] __sys_sendto+0x48b/0x4e0 [ 1298.173735][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 1298.173760][ C1] do_syscall_64+0x123/0x790 [ 1298.173783][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.173801][ C1] page last free pid 15280 tgid 15280 ts 1031381640257 stack trace: [ 1298.173814][ C1] __free_frozen_pages+0x79f/0x10f0 [ 1298.173840][ C1] qlist_free_all+0x47/0xf0 [ 1298.173860][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1298.173882][ C1] __kasan_slab_alloc+0x69/0x90 [ 1298.173905][ C1] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1298.173927][ C1] jbd2__journal_start+0x194/0x6b0 [ 1298.173951][ C1] __ext4_journal_start_sb+0x314/0x610 [ 1298.173973][ C1] ext4_dirty_inode+0xa1/0x130 [ 1298.173991][ C1] __mark_inode_dirty+0x1f3/0x16e0 [ 1298.174012][ C1] file_update_time_flags+0x49c/0x520 [ 1298.174031][ C1] ext4_page_mkwrite+0x324/0x1860 [ 1298.174049][ C1] do_page_mkwrite+0x17a/0x440 [ 1298.174070][ C1] do_fault+0x659/0x1830 [ 1298.174092][ C1] __handle_mm_fault+0x150b/0x2f60 [ 1298.174108][ C1] handle_mm_fault+0x363/0xa20 [ 1298.174124][ C1] do_user_addr_fault+0x59c/0x12f0 [ 1298.174147][ C1] [ 1298.174151][ C1] Memory state around the buggy address: [ 1298.174161][ C1] ffff888055a45500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1298.174174][ C1] ffff888055a45580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1298.174187][ C1] >ffff888055a45600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1298.174197][ C1] ^ [ 1298.174207][ C1] ffff888055a45680: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1298.174219][ C1] ffff888055a45700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1298.174229][ C1] ================================================================== [ 1298.174239][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1299.116321][ C1] CPU: 1 UID: 0 PID: 2093 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 1299.125754][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1299.135800][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 1299.142197][ C1] Call Trace: [ 1299.145466][ C1] [ 1299.148300][ C1] dump_stack_lvl+0x100/0x190 [ 1299.152977][ C1] vpanic+0x553/0x970 [ 1299.156936][ C1] ? __pfx_vpanic+0x10/0x10 [ 1299.161412][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1299.166450][ C1] ? hex_dump_to_buffer+0xbc4/0xc60 [ 1299.171640][ C1] panic+0xd1/0xe0 [ 1299.175341][ C1] ? __pfx_panic+0x10/0x10 [ 1299.179747][ C1] ? end_report.part.0+0x23/0x90 [ 1299.184678][ C1] ? rcu_is_watching+0x13/0xc0 [ 1299.189444][ C1] ? end_report.part.0+0x23/0x90 [ 1299.194363][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1299.199724][ C1] end_report.part.0+0x3a/0x90 [ 1299.204477][ C1] kasan_report.cold+0xe/0x18 [ 1299.209154][ C1] ? hex_dump_to_buffer+0xbc4/0xc60 [ 1299.214328][ C1] hex_dump_to_buffer+0xbc4/0xc60 [ 1299.219336][ C1] print_hex_dump+0x14a/0x1f0 [ 1299.223989][ C1] ? __pfx_print_hex_dump+0x10/0x10 [ 1299.229163][ C1] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1299.234611][ C1] ? __alloc_skb+0x4e9/0x710 [ 1299.239197][ C1] ? find_held_lock+0x2b/0x80 [ 1299.243879][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1299.248803][ C1] ? kcov_remote_start+0x2e6/0x6d0 [ 1299.253917][ C1] ? kcov_remote_start+0x2e6/0x6d0 [ 1299.259012][ C1] pn533_recv_frame+0x48e/0x6d0 [ 1299.263859][ C1] ? pn533_recv_response+0x7c/0x200 [ 1299.269055][ C1] __usb_hcd_giveback_urb+0x38e/0x610 [ 1299.274408][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1299.279603][ C1] dummy_timer+0xdaf/0x3820 [ 1299.284106][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1299.289899][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1299.294829][ C1] ? mark_held_locks+0x40/0x70 [ 1299.299573][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1299.305361][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1299.310292][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1299.315485][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 1299.320585][ C1] handle_softirqs+0x1e6/0x9d0 [ 1299.325336][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1299.330612][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1299.335457][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1299.341077][ C1] __irq_exit_rcu+0x16a/0x210 [ 1299.345733][ C1] irq_exit_rcu+0x9/0x30 [ 1299.349966][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1299.355599][ C1] [ 1299.358505][ C1] [ 1299.361429][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1299.367399][ C1] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 1299.373892][ C1] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 b3 fe ff 09 e8 1e 42 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1299.393475][ C1] RSP: 0018:ffffc9000707f8d8 EFLAGS: 00000202 [ 1299.399530][ C1] RAX: 0000000003e2065d RBX: ffff88802e538000 RCX: 0000000000000040 [ 1299.407485][ C1] RDX: 0000000000000001 RSI: ffffffff8e3e346f RDI: ffff88802e539718 [ 1299.415434][ C1] RBP: ffffc9000707f930 R08: 0000000000000001 R09: 0000000000000000 [ 1299.423377][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88808d78a580 [ 1299.431330][ C1] R13: 0000000000000001 R14: ffffffff92459904 R15: ffff8880b833bf00 [ 1299.439284][ C1] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1299.445179][ C1] __schedule+0x1261/0x6920 [ 1299.449680][ C1] ? __pfx___schedule+0x10/0x10 [ 1299.454509][ C1] ? __wake_up+0x3f/0x60 [ 1299.458749][ C1] ? __wake_up+0x3f/0x60 [ 1299.462977][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1299.468345][ C1] preempt_schedule_common+0x3c/0xb0 [ 1299.473615][ C1] preempt_schedule_thunk+0x16/0x40 [ 1299.478793][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1299.484401][ C1] snd_rawmidi_transmit+0xf1/0x130 [ 1299.489496][ C1] snd_vmidi_output_work+0x111/0x390 [ 1299.494760][ C1] ? process_one_work+0xa2c/0x1b10 [ 1299.499867][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1299.505670][ C1] ? process_one_work+0x906/0x1b10 [ 1299.510768][ C1] ? process_one_work+0x906/0x1b10 [ 1299.515871][ C1] process_one_work+0xac7/0x1b10 [ 1299.520803][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1299.526184][ C1] ? lock_acquire+0x1d1/0x380 [ 1299.530850][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1299.536651][ C1] worker_thread+0x5ef/0xe50 [ 1299.541237][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1299.546336][ C1] ? kthread+0x13a/0x450 [ 1299.550570][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1299.555657][ C1] kthread+0x373/0x450 [ 1299.559740][ C1] ? __pfx_kthread+0x10/0x10 [ 1299.564308][ C1] ret_from_fork+0x730/0xd60 [ 1299.568874][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1299.573960][ C1] ? __switch_to+0x800/0x10f0 [ 1299.578626][ C1] ? __pfx_kthread+0x10/0x10 [ 1299.583194][ C1] ret_from_fork_asm+0x1a/0x30 [ 1299.587944][ C1] [ 1299.591158][ C1] Kernel Offset: disabled [ 1299.595462][ C1] Rebooting in 86400 seconds..