last executing test programs: 9.479629997s ago: executing program 2 (id=1008): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendfile(r1, r1, 0x0, 0x8000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) 8.39896059s ago: executing program 4 (id=1015): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc08000, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) 7.171738035s ago: executing program 4 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) getpeername(r1, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x3, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='.', 0x1, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.203979003s ago: executing program 4 (id=1025): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f0000000040)=@ret_unlink={{0x4, 0x3, 0x0, 0x1, 0xffffffff}, {0x7}}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x26, &(0x7f00000007c0)=[@in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f0000000100)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_MTU={0x8, 0x4, 0xfffffff9}, @IFLA_ADDRESS={0xa}]}, 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='f', 0x1}], 0x1) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r5) socket(0x80000000000000a, 0x2, 0x0) 4.847730535s ago: executing program 2 (id=1027): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x40, 0x9, 0x3, {{0x14, 0x4, 0x3, 0x3b, 0xfffffffffffffebd, 0x67, 0x0, 0xf, 0x29, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x9, [{@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7ceb4910}, {@remote, 0x101}, {@broadcast, 0x101}, {@private=0xa010101, 0x4e9}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x7, [0x4, 0x4, 0x200]}]}}}}}) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 4.617666795s ago: executing program 4 (id=1030): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) write$dsp(r0, &(0x7f0000000200)="bb", 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 4.580810283s ago: executing program 2 (id=1031): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.295487784s ago: executing program 2 (id=1033): pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) 3.855540349s ago: executing program 2 (id=1036): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x3ae, 0x0, 0x7f}]}) creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x2000000) 3.476400411s ago: executing program 4 (id=1038): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 3.474773601s ago: executing program 0 (id=1039): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x40, 0x5, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x59) 3.116637458s ago: executing program 4 (id=1042): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2081, 0x0) 2.965807211s ago: executing program 2 (id=1044): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) 2.845315496s ago: executing program 0 (id=1045): sched_setscheduler(0x0, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000004400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r0, &(0x7f0000004380)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4, 0x10000000, 0x7, 0x5, 0x400, 0xa, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r1}, 0x10) 2.401356812s ago: executing program 3 (id=1049): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) writev(0xffffffffffffffff, &(0x7f0000002680), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380), 0x1, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) statfs(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016"], 0x4c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x40046607, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20) 2.243729176s ago: executing program 3 (id=1050): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) write(0xffffffffffffffff, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 2.130022431s ago: executing program 3 (id=1051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r1, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x401, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r2 = syz_io_uring_setup(0xf2d, &(0x7f0000000180)={0x0, 0xb5d2, 0x8, 0x1, 0x33a}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000300)) r3 = eventfd(0x26) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x80b2, 0x110101, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000240), 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0], 0x40c541) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r6, &(0x7f0000000140)='n', 0x1) write(r5, &(0x7f0000000080)='4', 0x1) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0x0, 0x368c, 0xc98d, 0x3d78e91c}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20008000) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.909744178s ago: executing program 0 (id=1052): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 1.685386397s ago: executing program 1 (id=1054): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 1.639131996s ago: executing program 0 (id=1055): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x40, 0x5, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x59) 1.515797703s ago: executing program 1 (id=1056): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.466414484s ago: executing program 3 (id=1057): pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) 1.34569332s ago: executing program 1 (id=1058): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1}) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) 1.29582005s ago: executing program 3 (id=1059): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x10400fb, 0xf, 0x1a, 0x200, &(0x7f0000000640)="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"}) 1.184959464s ago: executing program 0 (id=1060): socket(0x18, 0x3, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000600)=""/19, &(0x7f0000000640)=0x13) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000500)) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0xb5c, &(0x7f0000000400)={0x0, 0x5350, 0x1000, 0x3, 0x1a1, 0x0, r10}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.127308626s ago: executing program 3 (id=1061): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101a00, 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000014}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) 657.714728ms ago: executing program 1 (id=1062): sched_setscheduler(0x0, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r0, &(0x7f0000004380)={0x50, 0x0, r1, {0x7, 0x2d, 0x4, 0x10000000, 0x7, 0x5, 0x400, 0xa, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r4}, 0x10) 594.019701ms ago: executing program 1 (id=1063): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) write$dsp(r0, &(0x7f0000000200)="bb", 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 1.105349ms ago: executing program 0 (id=1064): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x40, 0x9, 0x3, {{0x14, 0x4, 0x3, 0x3b, 0xfffffffffffffebd, 0x67, 0x0, 0xf, 0x29, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x9, [{@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7ceb4910}, {@remote, 0x101}, {@broadcast, 0x101}, {@private=0xa010101, 0x4e9}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x7, [0x4, 0x4, 0x200]}]}}}}}) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 0s ago: executing program 1 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) kernel console output (not intermixed with test programs): 98.386334][ T4322] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.399702][ T4322] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 98.415141][ T4322] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.434449][ T4745] tmpfs: Unknown parameter 'usrquota' [ 99.482140][ T4322] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 99.491318][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.499406][ T4322] usb 4-1: Product: syz [ 99.503715][ T4322] usb 4-1: Manufacturer: syz [ 99.515456][ T4728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.533856][ T4322] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 99.561838][ T4322] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 99.788860][ T4761] comedi comedi0: das-1801st: a I/O base address must be specified [ 99.875583][ T14] usb 4-1: USB disconnect, device number 4 [ 99.894076][ T4766] netlink: 196 bytes leftover after parsing attributes in process `syz.0.84'. [ 99.900161][ T14] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 99.922754][ T14] garmin_gps 4-1:1.0: device disconnected [ 100.021173][ T4767] netlink: 164 bytes leftover after parsing attributes in process `syz.0.84'. [ 100.291612][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.318020][ T4779] device syzkaller0 entered promiscuous mode [ 100.515468][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.597380][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 100.716639][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.958365][ T7] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 101.072466][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 101.176539][ T7] usb 5-1: Product: syz [ 101.237938][ T7] usb 5-1: Manufacturer: syz [ 101.308157][ T4772] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.347572][ T7] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 101.408093][ T7] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 101.420699][ T4790] device syzkaller0 entered promiscuous mode [ 101.505200][ T4792] syz.2.94 uses obsolete (PF_INET,SOCK_PACKET) [ 101.515013][ T4794] comedi comedi0: das-1801st: a I/O base address must be specified [ 101.553663][ T14] usb 5-1: USB disconnect, device number 4 [ 101.574673][ T14] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 101.608366][ T14] garmin_gps 5-1:1.0: device disconnected [ 101.692238][ T4802] netlink: 196 bytes leftover after parsing attributes in process `syz.3.97'. [ 101.755431][ T4805] netlink: 164 bytes leftover after parsing attributes in process `syz.3.97'. [ 101.851738][ T954] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.859075][ T4810] device syzkaller0 entered promiscuous mode [ 102.047838][ T954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 102.065211][ T954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.251561][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.294679][ T954] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 103.211451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.221466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 103.231451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 103.241455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 103.251448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 103.261449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 103.271451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 103.281449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 103.589715][ T4792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.614460][ T4792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.672230][ T4319] usb 3-1: USB disconnect, device number 2 [ 103.724850][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.765692][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 103.799096][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.820316][ T14] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 103.829807][ T4839] comedi comedi0: probed id does not match board id (0xf != 0x7) [ 103.843893][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.853554][ T14] usb 1-1: Product: syz [ 103.857736][ T14] usb 1-1: Manufacturer: syz [ 103.868539][ T4813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.877275][ T14] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 103.905632][ T14] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 104.109709][ T4846] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.164725][ T4846] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.186953][ T4352] usb 1-1: USB disconnect, device number 4 [ 104.206313][ T4352] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 104.220678][ T4352] garmin_gps 1-1:1.0: device disconnected [ 104.330145][ T4856] device syzkaller0 entered promiscuous mode [ 104.648855][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 104.673708][ T954] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.678031][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 104.809423][ T4873] comedi comedi0: das-1801st: a I/O base address must be specified [ 104.883389][ T954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.920258][ T954] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 104.966013][ T954] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.991622][ T954] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 105.026785][ T954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 105.048463][ T954] usb 4-1: Product: syz [ 105.052925][ T954] usb 4-1: Manufacturer: syz [ 105.065527][ T4859] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.084335][ T4887] bond0 speed is unknown, defaulting to 1000 [ 105.090513][ T4887] bond0 speed is unknown, defaulting to 1000 [ 105.096898][ T4887] bond0 speed is unknown, defaulting to 1000 [ 105.106499][ T4887] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 105.121696][ T4887] bond0 speed is unknown, defaulting to 1000 [ 105.128329][ T4887] bond0 speed is unknown, defaulting to 1000 [ 105.134960][ T4887] bond0 speed is unknown, defaulting to 1000 [ 105.141489][ T4887] bond0 speed is unknown, defaulting to 1000 [ 105.148030][ T4887] bond0 speed is unknown, defaulting to 1000 [ 105.158997][ T954] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 105.182595][ T954] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 105.311863][ T4352] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.562322][ T954] usb 4-1: USB disconnect, device number 5 [ 105.577347][ T4352] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 105.650635][ T4352] usb 5-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 105.686993][ T954] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 105.837323][ T4352] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.868380][ T954] garmin_gps 4-1:1.0: device disconnected [ 105.972289][ T4352] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.104335][ T4352] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.248345][ T4352] usb 5-1: Product: syz [ 106.324697][ T4893] tmpfs: Unknown parameter 'usrquota' [ 106.348140][ T4352] usb 5-1: Manufacturer: syz [ 106.415820][ T4352] usb 5-1: SerialNumber: syz [ 106.553095][ T4352] usb 5-1: config 0 descriptor?? [ 106.673883][ T4352] hub 5-1:0.0: bad descriptor, ignoring hub [ 106.763131][ T4352] hub: probe of 5-1:0.0 failed with error -5 [ 107.360442][ T4352] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 107.821934][ T4352] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 108.166707][ T4352] usb 5-1: device descriptor read/all, error -71 [ 108.217764][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 108.261706][ T4951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.130'. [ 108.467799][ T4319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.703074][ T4319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.801644][ T4319] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 108.915974][ T4960] jffs2: notice: (4960) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.936871][ T4319] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.016206][ T4957] virt_wifi0 speed is unknown, defaulting to 1000 [ 109.120824][ T4352] usb 5-1: USB disconnect, device number 5 [ 109.125439][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.147275][ T4319] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 109.157067][ T4957] bond0 speed is unknown, defaulting to 1000 [ 109.162282][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 109.194497][ T4319] usb 3-1: Product: syz [ 109.199530][ T4960] jffs2 filesystem being mounted at /24/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 109.208954][ T4319] usb 3-1: Manufacturer: syz [ 109.240933][ T4968] comedi comedi0: das-1801st: a I/O base address must be specified [ 109.252285][ T4904] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.262836][ T4319] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 109.318095][ T4319] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 109.492378][ T4355] usb 3-1: USB disconnect, device number 3 [ 109.519242][ T4355] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 109.715933][ T4978] virt_wifi0 speed is unknown, defaulting to 1000 [ 109.727242][ T4978] bond0 speed is unknown, defaulting to 1000 [ 109.821731][ T4319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.027882][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.109035][ T4319] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 110.210515][ T4319] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.422153][ T4355] garmin_gps 3-1:1.0: device disconnected [ 110.436268][ T4319] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 110.496205][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 110.506918][ T4319] usb 1-1: Product: syz [ 110.511118][ T4319] usb 1-1: Manufacturer: syz [ 110.547559][ T4977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.582181][ T4319] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 110.600576][ T4319] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 110.829146][ T4355] usb 1-1: USB disconnect, device number 5 [ 111.026955][ T4355] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 111.208374][ T4355] garmin_gps 1-1:1.0: device disconnected [ 112.323418][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 112.469771][ T4998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'. [ 113.293374][ T4290] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.304142][ T4290] Bluetooth: hci3: Injecting HCI hardware error event [ 113.315227][ T4275] Bluetooth: hci3: hardware error 0x00 [ 115.044640][ T4319] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.968958][ T4322] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.977113][ T4275] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 116.114202][ T4319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.143131][ T4319] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 116.171602][ T4319] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.210835][ T4319] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 116.213103][ T4322] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 116.243053][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 116.254987][ T4319] usb 5-1: Product: syz [ 116.265004][ T4319] usb 5-1: Manufacturer: syz [ 116.269718][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.291369][ T5064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 116.310449][ T4319] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 116.331727][ T4260] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.348261][ T4319] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 116.454407][ T5083] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 116.509036][ T4322] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 116.539843][ T4319] usb 5-1: USB disconnect, device number 6 [ 116.550154][ T4260] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.574592][ T4319] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 116.588905][ T4260] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 116.610690][ T4319] garmin_gps 5-1:1.0: device disconnected [ 116.617872][ T4260] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.654067][ T4260] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 116.668982][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 116.693392][ T4260] usb 1-1: Product: syz [ 116.707607][ T4260] usb 1-1: Manufacturer: syz [ 116.737160][ T5077] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 116.757376][ T4260] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 116.777859][ T4260] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 116.793699][ T5089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.841941][ T5089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.902813][ T4322] usb 2-1: USB disconnect, device number 3 [ 116.971236][ T4319] usb 1-1: USB disconnect, device number 6 [ 116.995558][ T4319] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 117.009473][ T4319] garmin_gps 1-1:1.0: device disconnected [ 118.073980][ T5107] device syzkaller0 entered promiscuous mode [ 118.221172][ T5108] comedi comedi1: comedi_config --init_data is deprecated [ 120.722283][ T4319] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.984301][ T4319] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 121.001934][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.020238][ T4319] usb 4-1: Product: syz [ 121.024888][ T4319] usb 4-1: Manufacturer: syz [ 121.029499][ T4319] usb 4-1: SerialNumber: syz [ 121.181774][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.298994][ T4319] rtl8150 4-1:1.0: couldn't reset the device [ 121.310339][ T4319] rtl8150: probe of 4-1:1.0 failed with error -5 [ 121.336267][ T4319] usb 4-1: USB disconnect, device number 6 [ 121.351553][ T4260] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.382866][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.393331][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 121.403522][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.419188][ T14] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 121.429490][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.437796][ T14] usb 5-1: Product: syz [ 121.442701][ T14] usb 5-1: Manufacturer: syz [ 121.457937][ T5134] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 121.469920][ T14] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 121.488919][ T14] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 121.543446][ T4260] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.563956][ T4260] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 121.587281][ T4260] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.646429][ T4260] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 121.665933][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.686215][ T4260] usb 1-1: Product: syz [ 121.690451][ T4260] usb 1-1: Manufacturer: syz [ 121.700277][ T4322] usb 5-1: USB disconnect, device number 7 [ 121.720248][ T4322] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 121.730277][ T5137] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 121.746708][ T4322] garmin_gps 5-1:1.0: device disconnected [ 121.755093][ T4260] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 121.797115][ T4260] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 121.977414][ T5153] device syzkaller0 entered promiscuous mode [ 122.004673][ T4322] usb 1-1: USB disconnect, device number 7 [ 122.026800][ T4322] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 122.067116][ T4322] garmin_gps 1-1:1.0: device disconnected [ 122.441576][ T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.543067][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.561561][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.571330][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.606263][ T22] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.661573][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.696893][ T22] usb 2-1: config 0 descriptor?? [ 123.981975][ T5177] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.086028][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 124.355352][ T4260] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.383891][ T5189] device syzkaller0 entered promiscuous mode [ 124.523681][ T4319] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.556518][ T22] usbhid 2-1:0.0: can't add hid device: -71 [ 124.563413][ T22] usbhid: probe of 2-1:0.0 failed with error -71 [ 124.573209][ T4260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.596762][ T22] usb 2-1: USB disconnect, device number 4 [ 124.600520][ T4260] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.636099][ T4260] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 124.666428][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.725495][ T4319] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 124.743039][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.768963][ T4319] usb 5-1: Product: syz [ 124.777901][ T4319] usb 5-1: Manufacturer: syz [ 124.791572][ T4319] usb 5-1: SerialNumber: syz [ 124.929348][ T5177] device lo entered promiscuous mode [ 124.985916][ T5177] device tunl0 entered promiscuous mode [ 125.039607][ T5177] device gre0 entered promiscuous mode [ 125.047950][ T4319] rtl8150 5-1:1.0: couldn't reset the device [ 125.055530][ T4319] rtl8150: probe of 5-1:1.0 failed with error -5 [ 125.079127][ T4319] usb 5-1: USB disconnect, device number 8 [ 125.182230][ T5177] device gretap0 entered promiscuous mode [ 125.227097][ T5177] device erspan0 entered promiscuous mode [ 125.267699][ T5177] device ip_vti0 entered promiscuous mode [ 125.297240][ T5177] device ip6_vti0 entered promiscuous mode [ 125.350460][ T5177] device sit0 entered promiscuous mode [ 125.429541][ T5177] device ip6tnl0 entered promiscuous mode [ 125.499564][ T5177] device ip6gre0 entered promiscuous mode [ 125.568893][ T5177] device syz_tun entered promiscuous mode [ 125.598502][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.677054][ T5177] device ip6gretap0 entered promiscuous mode [ 125.803495][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.814667][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.822934][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.831823][ T22] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 125.844646][ T5177] device bridge0 entered promiscuous mode [ 125.850600][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.872318][ T22] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 125.886628][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 125.899387][ T22] usb 2-1: Product: syz [ 125.903951][ T22] usb 2-1: Manufacturer: syz [ 125.906158][ T5177] device bond0 entered promiscuous mode [ 125.918841][ T5199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.939253][ T22] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 125.949574][ T5177] device bond_slave_0 entered promiscuous mode [ 125.969877][ T22] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 125.992184][ T5177] device bond_slave_1 entered promiscuous mode [ 126.092562][ T5177] device team0 entered promiscuous mode [ 126.098189][ T5177] device team_slave_0 entered promiscuous mode [ 126.145403][ T5177] device team_slave_1 entered promiscuous mode [ 126.203677][ T5177] device dummy0 entered promiscuous mode [ 126.211286][ T14] usb 2-1: USB disconnect, device number 5 [ 126.278016][ T14] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 126.312273][ T14] garmin_gps 2-1:1.0: device disconnected [ 126.337267][ T5177] device nlmon0 entered promiscuous mode [ 126.375577][ T5177] device caif0 entered promiscuous mode [ 126.406835][ T5177] device batadv0 entered promiscuous mode [ 126.465158][ T5177] device vxcan0 entered promiscuous mode [ 126.577790][ T5177] device vxcan1 entered promiscuous mode [ 126.607939][ T5177] device wg0 entered promiscuous mode [ 126.656093][ T5177] device wg1 entered promiscuous mode [ 126.694086][ T5177] device wg2 entered promiscuous mode [ 126.732115][ T5177] device veth0_to_bridge entered promiscuous mode [ 126.840157][ T5177] device veth1_to_bridge entered promiscuous mode [ 126.938371][ T5177] device veth0_to_bond entered promiscuous mode [ 127.026417][ T5177] device veth1_to_bond entered promiscuous mode [ 127.078243][ T5177] device veth0_to_team entered promiscuous mode [ 127.139173][ T5177] device veth1_to_team entered promiscuous mode [ 127.200569][ T5177] device veth0_to_batadv entered promiscuous mode [ 127.211777][ T4322] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.219776][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.242074][ T5177] device batadv_slave_0 entered promiscuous mode [ 127.278834][ T5177] device veth1_to_batadv entered promiscuous mode [ 127.322823][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.331142][ T5177] device batadv_slave_1 entered promiscuous mode [ 127.358939][ T5177] device xfrm0 entered promiscuous mode [ 127.383186][ T5177] device veth0_to_hsr entered promiscuous mode [ 127.418782][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.431291][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.432010][ T5177] device veth1_to_hsr entered promiscuous mode [ 127.446268][ T4322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.473362][ T4322] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.483410][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.499206][ T4322] usb 1-1: config 0 descriptor?? [ 127.545152][ T5177] device hsr0 entered promiscuous mode [ 127.573125][ T5177] device veth1_virt_wifi entered promiscuous mode [ 127.602181][ T5177] device veth0_virt_wifi entered promiscuous mode [ 127.620236][ T5177] device virt_wifi0 entered promiscuous mode [ 127.666680][ T5177] device vlan0 entered promiscuous mode [ 127.672688][ T5177] device vlan1 entered promiscuous mode [ 127.679639][ T5177] device macvlan0 entered promiscuous mode [ 127.711122][ T5177] device macvlan1 entered promiscuous mode [ 127.723987][ T5177] device ipvlan0 entered promiscuous mode [ 127.731719][ T5177] device ipvlan1 entered promiscuous mode [ 127.773439][ T5177] device macvtap0 entered promiscuous mode [ 127.790601][ T5177] device macsec0 entered promiscuous mode [ 127.819064][ T5177] device geneve0 entered promiscuous mode [ 127.840678][ T5177] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.849670][ T5177] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.858922][ T5177] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.868211][ T5177] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.877414][ T5177] device geneve1 entered promiscuous mode [ 127.897074][ T5177] device netdevsim0 entered promiscuous mode [ 127.914052][ T5177] device netdevsim1 entered promiscuous mode [ 127.928134][ T5177] device netdevsim2 entered promiscuous mode [ 127.940211][ T5177] device netdevsim3 entered promiscuous mode [ 127.978304][ T5177] device wlan0 entered promiscuous mode [ 127.998074][ T5177] device wlan1 entered promiscuous mode [ 128.026211][ T5229] device syzkaller0 entered promiscuous mode [ 128.042365][ T4355] usb 4-1: USB disconnect, device number 7 [ 128.320638][ T4322] usbhid 1-1:0.0: can't add hid device: -71 [ 128.327837][ T4322] usbhid: probe of 1-1:0.0 failed with error -71 [ 128.342054][ T4322] usb 1-1: USB disconnect, device number 8 [ 129.300748][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 129.309858][ T5265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 129.657735][ T5281] loop0: detected capacity change from 0 to 32768 [ 129.776526][ T5292] device syzkaller0 entered promiscuous mode [ 129.851484][ T4260] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.059761][ T4260] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.093109][ T4260] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 130.103266][ T4260] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.126672][ T4260] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 130.265383][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 130.274192][ T4260] usb 3-1: Product: syz [ 130.301513][ T4260] usb 3-1: Manufacturer: syz [ 130.312360][ T5279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.317172][ T4260] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 130.327609][ T4260] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 130.381716][ T4322] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.518019][ T4260] usb 3-1: USB disconnect, device number 4 [ 130.536541][ T4260] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 130.559815][ T4260] garmin_gps 3-1:1.0: device disconnected [ 130.574483][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.611525][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.633892][ T4322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.667315][ T4322] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.686872][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.702814][ T4322] usb 5-1: config 0 descriptor?? [ 131.615930][ T4322] usbhid 5-1:0.0: can't add hid device: -71 [ 131.653704][ T4322] usbhid: probe of 5-1:0.0 failed with error -71 [ 131.846928][ T4322] usb 5-1: USB disconnect, device number 9 [ 132.645234][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653339][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.941622][ T4898] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.165087][ T4898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 133.213051][ T4898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.605927][ T4898] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 134.624816][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 134.841723][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 134.927108][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.948995][ T5382] bond1: (slave bond0): making interface the new active one [ 134.972275][ T5382] bond1: (slave bond0): Enslaving as an active interface with an up link [ 134.999453][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 135.701542][ T4260] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.861611][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.883152][ T4260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.898207][ T4260] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 135.908667][ T4260] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.924036][ T4260] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 135.933937][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.942250][ T4260] usb 5-1: Product: syz [ 135.946689][ T4260] usb 5-1: Manufacturer: syz [ 135.964557][ T5402] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 135.977194][ T4260] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 135.996311][ T4260] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 136.053133][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.065008][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.075426][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.088936][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.098319][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.108626][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.137390][ T7] usb 2-1: config 0 descriptor?? [ 136.190445][ T4319] usb 5-1: USB disconnect, device number 10 [ 136.212652][ T4319] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 136.225567][ T4319] garmin_gps 5-1:1.0: device disconnected [ 136.303227][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.314340][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 136.324262][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.344997][ T14] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 136.354299][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 136.362849][ T14] usb 1-1: Product: syz [ 136.367142][ T14] usb 1-1: Manufacturer: syz [ 136.381397][ T5418] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 136.390306][ T14] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 136.400002][ T14] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 136.616446][ T4355] usb 1-1: USB disconnect, device number 9 [ 136.633763][ T4355] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 136.643773][ T4355] garmin_gps 1-1:1.0: device disconnected [ 136.971251][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 136.979888][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 137.001921][ T7] usb 2-1: USB disconnect, device number 6 [ 137.316266][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 137.344796][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 137.474883][ T4561] bond1: (slave bond0): link status definitely down, disabling slave [ 137.499549][ T4561] bond1: now running without any active interface! [ 138.111724][ T5450] loop4: detected capacity change from 0 to 512 [ 138.548800][ T5450] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.250: iget: bad i_size value: 38620345925642 [ 138.571059][ T5450] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.250: couldn't read orphan inode 15 (err -117) [ 138.588675][ T5450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.600170][ T5450] EXT4-fs (loop4): unmounting filesystem. [ 138.948793][ T4355] usb 4-1: USB disconnect, device number 8 [ 139.451534][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.643247][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.661688][ T26] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 139.676813][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.738824][ T26] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 139.756474][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 139.777518][ T26] usb 2-1: Product: syz [ 139.791348][ T26] usb 2-1: Manufacturer: syz [ 139.812727][ T5458] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.825107][ T26] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 139.901818][ T26] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 140.035538][ T954] usb 2-1: USB disconnect, device number 7 [ 140.087513][ T954] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 140.135070][ T954] garmin_gps 2-1:1.0: device disconnected [ 140.148155][ T5466] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 140.194805][ T5466] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 140.228297][ T5466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.597778][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 140.620758][ T5486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.263'. [ 140.631518][ T14] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.750283][ T5490] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 140.863171][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.884473][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.916011][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.949506][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.959604][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.987872][ T4552] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xec [ 140.990276][ T14] usb 5-1: config 0 descriptor?? [ 141.131649][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.326432][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.339781][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.354941][ T7] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 141.364195][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.431531][ T954] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.581074][ T4322] usb 2-1: USB disconnect, device number 8 [ 141.643486][ T954] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 141.661450][ T954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.858112][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 141.864280][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 141.881886][ T954] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 141.884109][ T14] usb 5-1: USB disconnect, device number 11 [ 142.271639][ T4275] Bluetooth: hci4: command 0x0405 tx timeout [ 142.334028][ T5512] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 142.445686][ T5513] loop2: detected capacity change from 0 to 512 [ 144.106149][ T5515] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 144.127916][ T5499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.172300][ T5513] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.269: iget: bad i_size value: 38620345925642 [ 144.188980][ T5513] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.269: couldn't read orphan inode 15 (err -117) [ 144.210385][ T5513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.227323][ T5513] EXT4-fs (loop2): unmounting filesystem. [ 144.966922][ T5515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.007155][ T5556] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.281'. [ 147.197812][ T126] usb 4-1: USB disconnect, device number 9 [ 147.821084][ T5568] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 148.404922][ T5568] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 148.757689][ T5568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.478218][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 149.537586][ T5638] device syzkaller0 entered promiscuous mode [ 149.570193][ T5641] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.293'. [ 150.868481][ T5649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 152.500875][ T5664] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 155.896553][ T5698] device syzkaller0 entered promiscuous mode [ 157.567936][ T5750] device-mapper: table: 248:0: integrity: Invalid argument count (-EINVAL) [ 157.577118][ T5750] device-mapper: ioctl: error adding target to table [ 161.443837][ T5771] Zero length message leads to an empty skb [ 161.758789][ T5779] device syzkaller0 entered promiscuous mode [ 163.612226][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.917420][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.002718][ T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 164.202643][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.431204][ T22] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 164.589184][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 164.760045][ T22] usb 1-1: Product: syz [ 164.760343][ T22] usb 1-1: Manufacturer: syz [ 164.964915][ T5788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.074214][ T22] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 165.302208][ T22] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 165.358680][ T22] usb 1-1: USB disconnect, device number 10 [ 165.437042][ T22] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 165.501031][ T22] garmin_gps 1-1:1.0: device disconnected [ 165.701887][ T4352] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.963205][ T4352] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.051515][ T4352] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 166.060597][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 166.189218][ T4352] usb 3-1: Product: syz [ 166.311498][ T4352] usb 3-1: Manufacturer: syz [ 166.317543][ T4352] usb 3-1: SerialNumber: syz [ 166.546170][ T5859] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 166.698404][ T4352] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 167.508699][ T4352] usb 3-1: USB disconnect, device number 5 [ 167.574267][ T4352] usblp0: removed [ 169.025066][ T126] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.140718][ T5874] syz.1.336 (5874) used greatest stack depth: 17072 bytes left [ 169.233074][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.253759][ T126] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.287438][ T126] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 169.320307][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.281663][ T4320] usb 5-1: USB disconnect, device number 12 [ 173.132363][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 173.141186][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.345'. [ 173.187574][ T5912] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.197025][ T5912] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.205842][ T5912] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.214605][ T5912] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.441324][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 173.452212][ T5934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.463110][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 174.124118][ T5952] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 174.451652][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 174.480333][ T5967] device syzkaller0 entered promiscuous mode [ 174.643394][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.661770][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.703153][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 174.715652][ T22] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 174.735296][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.750817][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 174.774971][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.804342][ T5969] bond1: (slave bond0): making interface the new active one [ 174.816652][ T5969] bond1: (slave bond0): Enslaving as an active interface with an up link [ 174.830596][ T5972] netlink: 'syz.0.357': attribute type 4 has an invalid length. [ 174.841874][ T5972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.357'. [ 174.880561][ T5972] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 174.988091][ T954] usb 2-1: USB disconnect, device number 9 [ 175.040440][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 175.058545][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 175.162974][ T11] bond1: (slave bond0): link status definitely down, disabling slave [ 175.182745][ T11] bond1: now running without any active interface! [ 175.201649][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 175.413563][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 177.273455][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.838723][ T22] usb 5-1: can't set config #1, error -71 [ 178.861918][ T22] usb 5-1: USB disconnect, device number 13 [ 179.311864][ T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 179.593849][ T6021] loop2: detected capacity change from 0 to 512 [ 179.624233][ T6021] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.367: iget: bad i_size value: 38620345925642 [ 179.639352][ T6021] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.367: couldn't read orphan inode 15 (err -117) [ 179.653710][ T6021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.664369][ T6021] EXT4-fs (loop2): unmounting filesystem. [ 179.713190][ T6025] device syzkaller0 entered promiscuous mode [ 179.821864][ T4398] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.878718][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.901148][ T22] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 180.929059][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.981057][ T22] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 181.010583][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 181.023691][ T22] usb 5-1: Product: syz [ 181.027894][ T22] usb 5-1: Manufacturer: syz [ 181.042166][ T5997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.060095][ T22] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 181.078760][ T22] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 181.326012][ T6036] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.351378][ T6036] bond0 speed is unknown, defaulting to 1000 [ 181.388385][ T4260] usb 5-1: USB disconnect, device number 14 [ 181.415168][ T4260] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 181.438207][ T4260] garmin_gps 5-1:1.0: device disconnected [ 181.498478][ T27] audit: type=1800 audit(6085399167.631:2): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.372" name="id" dev="configfs" ino=39206 res=0 errno=0 [ 181.757492][ T6052] process 'syz.1.377' launched '/dev/fd/3' with NULL argv: empty string added [ 181.871493][ T4355] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.062625][ T4355] usb 1-1: Dual-Role OTG device on HNP port [ 182.069369][ T4355] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 182.100437][ T4355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.126766][ T4355] gspca_main: spca501-2.14.0 probing 0000:0000 [ 182.152642][ T4355] gspca_spca501: reg write: error -32 [ 182.156291][ T6061] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 182.181554][ T4355] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 182.189546][ T4355] spca501: probe of 1-1:1.0 failed with error -22 [ 182.570609][ T6071] loop4: detected capacity change from 0 to 512 [ 186.894136][ T126] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.101665][ T126] usb 2-1: device descriptor read/64, error -71 [ 187.399108][ T6071] EXT4-fs: error -4 creating inode table initialization thread [ 187.407886][ T6071] EXT4-fs (loop4): mount failed [ 187.411538][ T126] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.641513][ T6080] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.741495][ T126] usb 2-1: device descriptor read/64, error -71 [ 187.861684][ T126] usb usb2-port1: attempt power cycle [ 188.271459][ T126] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 188.322504][ T126] usb 2-1: device descriptor read/8, error -71 [ 188.335511][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 188.373897][ T6122] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 188.550718][ T6130] device syzkaller0 entered promiscuous mode [ 188.575233][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 188.611520][ T126] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 188.655929][ T126] usb 2-1: device descriptor read/8, error -71 [ 188.781756][ T126] usb usb2-port1: unable to enumerate USB device [ 188.975432][ T6141] loop4: detected capacity change from 0 to 512 [ 189.246992][ T6141] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.396: iget: bad i_size value: 38620345925642 [ 189.271931][ T6141] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.396: couldn't read orphan inode 15 (err -117) [ 189.287747][ T6141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.305144][ T6141] EXT4-fs (loop4): unmounting filesystem. [ 190.710782][ T6154] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 191.051473][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 191.051797][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 191.057490][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 191.064348][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 191.229126][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 191.289508][ T6165] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 191.556327][ T6173] device syzkaller0 entered promiscuous mode [ 191.981579][ T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 192.146377][ T126] usb 3-1: device descriptor read/64, error -71 [ 192.338455][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 192.347699][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 192.434031][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 192.518278][ T6201] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 192.581467][ T126] usb 3-1: device descriptor read/64, error -71 [ 192.638584][ T6205] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.420'. [ 192.703979][ T126] usb usb3-port1: attempt power cycle [ 192.730862][ T6207] device syzkaller0 entered promiscuous mode [ 193.091201][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 193.114137][ T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.162371][ T126] usb 3-1: device descriptor read/8, error -71 [ 193.438491][ T6237] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 193.441961][ T126] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 193.458051][ T6239] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.432'. [ 193.512123][ T126] usb 3-1: device descriptor read/8, error -71 [ 193.642324][ T126] usb usb3-port1: unable to enumerate USB device [ 193.689217][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 194.090918][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.097324][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.775562][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 194.972161][ T6267] device syzkaller0 entered promiscuous mode [ 195.308389][ T27] audit: type=1800 audit(6085399181.441:3): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.441" name="id" dev="configfs" ino=39659 res=0 errno=0 [ 196.026231][ T27] audit: type=1800 audit(6085399182.161:4): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.443" name="id" dev="configfs" ino=40525 res=0 errno=0 [ 196.202729][ T6286] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 197.252063][ T4355] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 197.441837][ T4355] usb 5-1: device descriptor read/64, error -71 [ 197.731630][ T4355] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.922090][ T4355] usb 5-1: device descriptor read/64, error -71 [ 197.998980][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 198.049294][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 198.065005][ T4355] usb usb5-port1: attempt power cycle [ 198.094426][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 198.114687][ T6319] device syzkaller0 entered promiscuous mode [ 198.481820][ T4355] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 198.543844][ T4355] usb 5-1: device descriptor read/8, error -71 [ 198.882577][ T4355] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 198.943375][ T4355] usb 5-1: device descriptor read/8, error -71 [ 199.137886][ T4355] usb usb5-port1: unable to enumerate USB device [ 199.200317][ T27] audit: type=1800 audit(6085399185.331:5): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.458" name="id" dev="configfs" ino=40616 res=0 errno=0 [ 199.362423][ T6334] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 199.426156][ T27] audit: type=1800 audit(6085399185.561:6): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.460" name="id" dev="configfs" ino=39828 res=0 errno=0 [ 199.851636][ T6358] device syzkaller0 entered promiscuous mode [ 201.291016][ T6385] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 201.367676][ T27] audit: type=1800 audit(6085399187.501:7): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.474" name="id" dev="configfs" ino=40769 res=0 errno=0 [ 201.400063][ T6385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 201.781532][ T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 201.827775][ T27] audit: type=1800 audit(6085399187.961:8): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.477" name="id" dev="configfs" ino=39899 res=0 errno=0 [ 201.947447][ T126] usb 3-1: device descriptor read/64, error -71 [ 202.221502][ T126] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 202.384677][ T126] usb 3-1: device descriptor read/64, error -71 [ 202.441093][ T6421] device syzkaller0 entered promiscuous mode [ 202.525539][ T126] usb usb3-port1: attempt power cycle [ 202.931556][ T126] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.983030][ T126] usb 3-1: device descriptor read/8, error -71 [ 203.281683][ T126] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.334935][ T126] usb 3-1: device descriptor read/8, error -71 [ 203.482186][ T126] usb usb3-port1: unable to enumerate USB device [ 204.935783][ T6410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.846654][ T27] audit: type=1800 audit(6085399191.981:9): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.486" name="id" dev="configfs" ino=40830 res=0 errno=0 [ 206.014254][ T6439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.488'. [ 206.062558][ T6437] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 206.117599][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.487'. [ 206.416878][ T27] audit: type=1800 audit(6085399192.551:10): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.491" name="id" dev="configfs" ino=40863 res=0 errno=0 [ 207.463451][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.508761][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.746256][ T6485] netlink: 48 bytes leftover after parsing attributes in process `syz.4.501'. [ 208.826082][ T27] audit: type=1800 audit(6085399194.961:11): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.500" name="id" dev="configfs" ino=41057 res=0 errno=0 [ 208.983847][ T6496] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 209.089310][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.502'. [ 210.004213][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.015032][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.518171][ T6465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.826200][ T27] audit: type=1800 audit(6085399196.961:12): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.506" name="id" dev="configfs" ino=41170 res=0 errno=0 [ 211.415906][ T6529] netlink: 48 bytes leftover after parsing attributes in process `syz.1.512'. [ 211.452020][ T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.611882][ T22] usb 4-1: device descriptor read/64, error -71 [ 211.892425][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 212.111625][ T22] usb 4-1: device descriptor read/64, error -71 [ 212.241715][ T22] usb usb4-port1: attempt power cycle [ 212.420634][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.441452][ T27] audit: type=1800 audit(6085399198.571:13): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.513" name="id" dev="configfs" ino=40956 res=0 errno=0 [ 212.461779][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.651486][ T22] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 212.707866][ T22] usb 4-1: device descriptor read/8, error -71 [ 212.941477][ T4319] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 212.991493][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 213.042666][ T22] usb 4-1: device descriptor read/8, error -71 [ 213.126266][ T4319] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 213.138944][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.161717][ T22] usb usb4-port1: unable to enumerate USB device [ 213.209970][ T6553] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 213.283369][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 213.379185][ T4319] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 213.633949][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.642691][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.652756][ T4319] usb 2-1: USB disconnect, device number 14 [ 214.543412][ T27] audit: type=1800 audit(6085399200.681:14): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.521" name="id" dev="configfs" ino=42096 res=0 errno=0 [ 214.902287][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'. [ 214.911606][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.523'. [ 214.925674][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.523'. [ 215.010124][ T6580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.523'. [ 215.700373][ T6545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.135882][ T27] audit: type=1800 audit(6085399202.271:15): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.526" name="id" dev="configfs" ino=41295 res=0 errno=0 [ 216.381475][ T126] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 216.599605][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.618693][ T126] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 216.651166][ T126] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.679898][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.696868][ T126] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 216.709370][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.724960][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 216.739805][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.758830][ T126] usb 2-1: Product: syz [ 216.767632][ T126] usb 2-1: Manufacturer: syz [ 216.779696][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.800468][ T6625] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.817612][ T126] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 216.843825][ T4319] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 216.856197][ T126] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 217.064225][ T4319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.083455][ T4319] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 217.097189][ T126] usb 2-1: USB disconnect, device number 15 [ 217.105828][ T4319] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 217.123236][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 217.132038][ T126] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 217.149290][ T126] garmin_gps 2-1:1.0: device disconnected [ 217.157411][ T4319] usb 4-1: Product: syz [ 217.168529][ T4319] usb 4-1: Manufacturer: syz [ 217.390040][ T126] usb 4-1: USB disconnect, device number 14 [ 217.621595][ T27] audit: type=1800 audit(6085399203.761:16): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.532" name="id" dev="configfs" ino=41329 res=0 errno=0 [ 217.840316][ T6670] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 217.856875][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 217.947531][ T27] audit: type=1800 audit(6085399204.081:17): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.535" name="id" dev="configfs" ino=41374 res=0 errno=0 [ 219.272008][ T27] audit: type=1800 audit(6085399205.411:18): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.540" name="id" dev="configfs" ino=42262 res=0 errno=0 [ 219.529596][ T6715] fuse: Bad value for 'group_id' [ 219.669982][ T6720] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 219.690578][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 219.741491][ T4320] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 219.842171][ T6727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.549'. [ 219.921703][ T4319] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 219.936597][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.957305][ T4320] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 219.971577][ T4355] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 219.986614][ T4320] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.025365][ T4320] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 220.050509][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 220.084778][ T4320] usb 2-1: Product: syz [ 220.088995][ T4320] usb 2-1: Manufacturer: syz [ 220.113587][ T4319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 220.132187][ T6711] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.160674][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.170731][ T4320] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 220.172715][ T4355] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.194466][ T4320] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 220.235224][ T4355] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 220.389941][ T4323] usb 2-1: USB disconnect, device number 16 [ 220.420921][ T4319] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 220.482896][ T4323] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 220.556837][ T4323] garmin_gps 2-1:1.0: device disconnected [ 220.694352][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.834044][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.962775][ T4323] usb 5-1: USB disconnect, device number 19 [ 221.371784][ T4355] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 221.391104][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 221.401234][ T4355] usb 3-1: Product: syz [ 221.405626][ T4355] usb 3-1: Manufacturer: syz [ 221.637659][ T22] usb 3-1: USB disconnect, device number 14 [ 221.803049][ T27] audit: type=1800 audit(6085399207.941:19): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.556" name="id" dev="configfs" ino=41492 res=0 errno=0 [ 221.951585][ T6771] fuse: Bad value for 'group_id' [ 222.133696][ T6776] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 222.292203][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 222.301020][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 222.801634][ T4260] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 222.983373][ T4260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.001684][ T4260] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 223.029305][ T4260] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.045218][ T4260] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 223.054719][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 223.063162][ T4260] usb 5-1: Product: syz [ 223.067542][ T4260] usb 5-1: Manufacturer: syz [ 223.083282][ T6791] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.095458][ T4260] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 223.114779][ T4260] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 223.369539][ T4355] usb 5-1: USB disconnect, device number 20 [ 223.564861][ T4355] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 223.688980][ T4355] garmin_gps 5-1:1.0: device disconnected [ 224.345909][ T6807] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 224.461544][ T4352] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 224.642965][ T4352] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 224.652529][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.866793][ T4352] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 225.120247][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.129388][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.138351][ T954] usb 5-1: USB disconnect, device number 21 [ 225.262954][ T6778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.556710][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 225.576486][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 225.823200][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.855500][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.043965][ T6842] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 226.207479][ T6853] jffs2: notice: (6853) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 226.227717][ T6853] jffs2 filesystem being mounted at /113/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 226.861545][ T27] audit: type=1800 audit(6085399213.001:20): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.589" name="id" dev="configfs" ino=42647 res=0 errno=0 [ 227.261145][ T6882] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 227.291572][ T4355] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 227.494794][ T4355] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 227.503947][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.721864][ T4355] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 227.974762][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.984275][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.993342][ T4260] usb 5-1: USB disconnect, device number 22 [ 228.803671][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 228.813212][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 229.099633][ T6847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.171787][ T954] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 229.364027][ T954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.392613][ T954] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 229.402765][ T954] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.432039][ T954] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 229.441205][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 229.450301][ T954] usb 5-1: Product: syz [ 229.455043][ T954] usb 5-1: Manufacturer: syz [ 229.470731][ T6889] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.483579][ T954] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 229.501888][ T954] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 229.702860][ T4320] usb 5-1: USB disconnect, device number 23 [ 229.771610][ T6906] virt_wifi0 speed is unknown, defaulting to 1000 [ 229.784192][ T6906] bond0 speed is unknown, defaulting to 1000 [ 229.920114][ T4320] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 230.068477][ T4320] garmin_gps 5-1:1.0: device disconnected [ 230.321604][ T4288] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 230.330464][ T4288] Bluetooth: hci0: Injecting HCI hardware error event [ 230.340193][ T4290] Bluetooth: hci0: hardware error 0x00 [ 230.665692][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 230.696999][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.707023][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 230.724834][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.744823][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.771599][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.826377][ T6920] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 231.210663][ T6933] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 231.340669][ T27] audit: type=1800 audit(6085399217.471:21): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.613" name="id" dev="configfs" ino=42776 res=0 errno=0 [ 231.434279][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 231.460338][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 231.818162][ T27] audit: type=1800 audit(6085399217.951:22): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.615" name="id" dev="configfs" ino=42801 res=0 errno=0 [ 232.066771][ T27] audit: type=1800 audit(6085399218.201:23): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.618" name="id" dev="configfs" ino=41918 res=0 errno=0 [ 232.411524][ T4290] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 232.441528][ T27] audit: type=1800 audit(6085399218.571:24): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.621" name="id" dev="configfs" ino=41931 res=0 errno=0 [ 232.612009][ T6976] loop2: detected capacity change from 0 to 512 [ 232.965421][ T6976] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.620: iget: bad i_size value: 38620345925642 [ 232.980425][ T6976] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.620: couldn't read orphan inode 15 (err -117) [ 232.994770][ T6976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 233.012355][ T6976] EXT4-fs (loop2): unmounting filesystem. [ 234.056609][ T4352] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 234.091934][ T6991] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 234.256168][ T4352] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.280007][ T4352] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 234.297011][ T4352] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.314626][ T4352] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 234.341278][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 234.394762][ T4352] usb 2-1: Product: syz [ 234.398971][ T4352] usb 2-1: Manufacturer: syz [ 234.431765][ T6984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.440390][ T4352] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 234.465061][ T4352] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 234.757640][ T4260] usb 2-1: USB disconnect, device number 17 [ 235.018483][ T4260] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 235.116618][ T4260] garmin_gps 2-1:1.0: device disconnected [ 235.544817][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 235.553814][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 236.684669][ T6981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.902869][ T4319] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 236.983040][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 237.021653][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 238.281743][ T4319] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 238.290883][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.195083][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 239.201701][ T4319] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 239.204308][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 239.307525][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.321835][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.446294][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.502298][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.530911][ T4352] usb 2-1: USB disconnect, device number 18 [ 239.979367][ T7057] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 241.873175][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 241.882211][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 245.024745][ T7095] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 245.335575][ T4355] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.552859][ T4355] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.571451][ T4355] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 245.581221][ T4355] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.599143][ T4355] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 245.610269][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.623733][ T4355] usb 3-1: Product: syz [ 245.627930][ T4355] usb 3-1: Manufacturer: syz [ 245.638068][ T7100] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.649317][ T4355] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 245.662323][ T4355] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 245.676482][ T22] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 245.864817][ T4323] usb 3-1: USB disconnect, device number 15 [ 245.878098][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 245.887698][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.890406][ T4323] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 245.922469][ T4323] garmin_gps 3-1:1.0: device disconnected [ 246.115861][ T22] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 246.276048][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 246.286122][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 246.378638][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.401833][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.410586][ T22] usb 4-1: USB disconnect, device number 15 [ 246.445353][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 246.454382][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 246.468927][ T7127] fuse: Unknown parameter 'grou00000000000000000000' [ 246.672020][ T4323] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 246.766769][ T7135] loop2: detected capacity change from 0 to 512 [ 249.499490][ T7113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.127070][ T7140] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 252.219299][ T7135] EXT4-fs: error -4 creating inode table initialization thread [ 252.227229][ T7135] EXT4-fs (loop2): mount failed [ 252.725660][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 252.840658][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 253.109358][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 253.135091][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 253.141525][ T4323] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 253.160685][ T7188] fuse: Unknown parameter 'grou00000000000000000000' [ 253.168682][ T7186] bond1: (slave bond0): Releasing active interface [ 253.358584][ T4323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.387305][ T4323] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 253.406714][ T4323] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.422268][ T4323] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 253.431957][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 253.451572][ T4323] usb 2-1: Product: syz [ 253.455791][ T4323] usb 2-1: Manufacturer: syz [ 253.479749][ T7182] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.512074][ T4323] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 253.532407][ T4323] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 253.707778][ T4352] usb 2-1: USB disconnect, device number 19 [ 253.721458][ T4318] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 253.808649][ T7198] loop3: detected capacity change from 0 to 512 [ 253.893671][ T4355] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 253.940142][ T4352] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 253.968536][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.055809][ T7198] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.683: iget: bad i_size value: 38620345925642 [ 254.073503][ T7198] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.683: couldn't read orphan inode 15 (err -117) [ 254.087678][ T7198] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 254.106718][ T7198] EXT4-fs (loop3): unmounting filesystem. [ 254.192465][ T4352] garmin_gps 2-1:1.0: device disconnected [ 254.192545][ T4318] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.226162][ T4318] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 254.265155][ T4355] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 254.314882][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.455463][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 254.633173][ T4318] usb 3-1: Product: syz [ 254.637754][ T4318] usb 3-1: Manufacturer: syz [ 254.837744][ T4355] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 254.991748][ T4318] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 255.198789][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.381182][ T4318] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 255.503939][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.521619][ T4318] garmin_gps: probe of ttyUSB0 failed with error -22 [ 255.528952][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.544464][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.697930][ T4318] usb 3-1: USB disconnect, device number 16 [ 255.989537][ T4318] garmin_gps 3-1:1.0: device disconnected [ 256.071216][ T22] usb 5-1: USB disconnect, device number 25 [ 256.993949][ T7207] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 258.441292][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 258.857898][ T7229] fuse: Unknown parameter 'grou00000000000000000000' [ 258.993805][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 259.113436][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 260.278548][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 260.441342][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 261.045282][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.171839][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.388537][ T7252] loop4: detected capacity change from 0 to 512 [ 261.449270][ T7252] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.696: iget: bad i_size value: 38620345925642 [ 261.464842][ T7252] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.696: couldn't read orphan inode 15 (err -117) [ 261.478651][ T7252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 261.492855][ T7252] EXT4-fs (loop4): unmounting filesystem. [ 262.073290][ T7261] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 262.561805][ T22] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 263.605722][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.713996][ T22] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 263.958442][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.302010][ T22] usb 3-1: string descriptor 0 read error: -71 [ 264.308269][ T22] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 264.368690][ T7272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.377706][ T7272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.387296][ T7272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.396080][ T7272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.402546][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 264.424991][ T7276] fuse: Unknown parameter 'group_i00000000000000000000' [ 264.485480][ T22] usb 3-1: can't set config #1, error -71 [ 264.508125][ T22] usb 3-1: USB disconnect, device number 17 [ 264.516991][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 264.536192][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 264.604705][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 264.714420][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 264.738333][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 265.261736][ T4260] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 265.498198][ T7306] loop1: detected capacity change from 0 to 512 [ 265.760345][ T7306] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.710: iget: bad i_size value: 38620345925642 [ 265.781760][ T7306] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.710: couldn't read orphan inode 15 (err -117) [ 265.802870][ T7306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 265.819496][ T7306] EXT4-fs (loop1): unmounting filesystem. [ 266.475852][ T7305] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 267.448188][ T4260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.557203][ T4260] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.784128][ T4260] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 268.813539][ T4260] usb 4-1: string descriptor 0 read error: -71 [ 268.819839][ T4260] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 268.902767][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 268.973719][ T4260] usb 4-1: can't set config #1, error -71 [ 269.008384][ T7324] fuse: Unknown parameter 'group_i00000000000000000000' [ 269.015828][ T4260] usb 4-1: USB disconnect, device number 16 [ 269.049988][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 269.079178][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 269.197558][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 269.231508][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 269.300739][ T7329] bond1: (slave bond0): Releasing active interface [ 269.691930][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 269.702108][ T27] audit: type=1800 audit(6085399255.841:25): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.722" name="id" dev="configfs" ino=43663 res=0 errno=0 [ 270.071465][ T4319] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 270.557956][ T4319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 271.051040][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.188898][ T7374] fuse: Unknown parameter 'group_i00000000000000000000' [ 271.285875][ T4319] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 271.549457][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.709974][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.917357][ T4319] usb 5-1: USB disconnect, device number 26 [ 273.003298][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 273.163753][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 275.104572][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 275.168729][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 275.274329][ T27] audit: type=1800 audit(6085399261.411:26): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.735" name="id" dev="configfs" ino=44841 res=0 errno=0 [ 275.430096][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 275.693649][ T7424] fuse: Unknown parameter 'group_id00000000000000000000' [ 276.430616][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 276.442949][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 276.769354][ T7449] netlink: 64 bytes leftover after parsing attributes in process `syz.1.745'. [ 276.931667][ T4352] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 277.146778][ T4352] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 277.210013][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.988812][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.727029][ T4352] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 278.740703][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.950534][ T4352] usb 5-1: USB disconnect, device number 27 [ 280.330291][ T27] audit: type=1800 audit(6085399266.461:27): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.749" name="id" dev="configfs" ino=45013 res=0 errno=0 [ 281.847826][ T7483] fuse: Bad value for 'fd' [ 282.128169][ T7486] fuse: Unknown parameter 'group_id00000000000000000000' [ 282.471678][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 282.641608][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 282.641630][ T4352] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 282.801482][ T7] usb 3-1: device descriptor read/64, error -71 [ 282.876775][ T4352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.956158][ T4352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.108303][ T4352] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.317314][ T4352] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.413731][ T4352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.566249][ T4352] usb 2-1: config 0 descriptor?? [ 284.001443][ T7] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 284.112025][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.127549][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.139355][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.149570][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.161579][ T7] usb 3-1: device descriptor read/64, error -71 [ 284.297373][ T7] usb usb3-port1: attempt power cycle [ 284.453884][ T4352] usbhid 2-1:0.0: can't add hid device: -71 [ 284.501329][ T4352] usbhid: probe of 2-1:0.0 failed with error -71 [ 284.639635][ T4352] usb 2-1: USB disconnect, device number 20 [ 285.739229][ T7527] fuse: Unknown parameter 'group_id00000000000000000000' [ 288.890415][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 290.133629][ T7575] fuse: Bad value for 'user_id' [ 290.261608][ T4352] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 290.467229][ T4352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.491509][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 290.524945][ T4352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.628428][ T7585] netlink: 48 bytes leftover after parsing attributes in process `syz.0.781'. [ 290.647102][ T4352] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.755000][ T4352] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.868242][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.010523][ T4352] usb 4-1: config 0 descriptor?? [ 291.026738][ T7586] tipc: Started in network mode [ 291.161691][ T7586] tipc: Node identity 2002a3a, cluster identity 4711 [ 291.168416][ T7586] tipc: Node number set to 33565242 [ 291.311721][ T7] usb 2-1: device descriptor read/64, error -71 [ 291.411719][ T954] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 291.585540][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 291.671264][ T954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 291.682026][ T954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.748314][ T7600] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.755493][ T7] usb 2-1: device descriptor read/64, error -71 [ 291.767485][ T7600] bond0 speed is unknown, defaulting to 1000 [ 291.893511][ T7] usb usb2-port1: attempt power cycle [ 291.947959][ T4352] usbhid 4-1:0.0: can't add hid device: -71 [ 292.312200][ T7] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 292.363884][ T7] usb 2-1: device descriptor read/8, error -71 [ 292.419767][ T4352] usbhid: probe of 4-1:0.0 failed with error -71 [ 292.429412][ T4352] usb 4-1: USB disconnect, device number 17 [ 292.637358][ T954] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 292.661654][ T7] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 292.686623][ T7609] fuse: Bad value for 'user_id' [ 292.702226][ T7] usb 2-1: device descriptor read/8, error -71 [ 292.825727][ T7] usb usb2-port1: unable to enumerate USB device [ 292.895416][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.921889][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.946189][ T7] usb 3-1: USB disconnect, device number 21 [ 292.992756][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 295.091477][ T4260] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 295.160340][ T7650] virt_wifi0 speed is unknown, defaulting to 1000 [ 295.171776][ T7650] bond0 speed is unknown, defaulting to 1000 [ 295.561244][ T7653] fuse: Bad value for 'user_id' [ 295.679744][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.691944][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.702761][ T4260] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.731458][ T4260] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.740547][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.786901][ T4260] usb 4-1: config 0 descriptor?? [ 295.941774][ T126] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 296.121787][ T126] usb 3-1: device descriptor read/64, error -71 [ 296.136476][ T7672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.175448][ T7672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.303763][ T7674] loop4: detected capacity change from 0 to 512 [ 297.494863][ T4260] usbhid 4-1:0.0: can't add hid device: -71 [ 297.500881][ T4260] usbhid: probe of 4-1:0.0 failed with error -71 [ 297.510313][ T7674] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.805: iget: bad i_size value: 38620345925642 [ 297.514133][ T4260] usb 4-1: USB disconnect, device number 18 [ 297.533237][ T7674] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.805: couldn't read orphan inode 15 (err -117) [ 297.546595][ T7674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 297.563158][ T7674] EXT4-fs (loop4): unmounting filesystem. [ 298.391476][ T126] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 298.591668][ T126] usb 3-1: device descriptor read/64, error -71 [ 299.350776][ T7692] fuse: Bad value for 'fd' [ 299.371649][ T126] usb usb3-port1: attempt power cycle [ 299.421711][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 299.651303][ T7701] virt_wifi0 speed is unknown, defaulting to 1000 [ 299.661725][ T7701] bond0 speed is unknown, defaulting to 1000 [ 300.598607][ T7715] netlink: 56 bytes leftover after parsing attributes in process `syz.3.820'. [ 302.550692][ T7728] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.572534][ T4260] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 302.689551][ T7728] bond0 speed is unknown, defaulting to 1000 [ 302.726792][ T7730] fuse: Bad value for 'fd' [ 302.836077][ T4260] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 302.889534][ T4260] usb 2-1: can't read configurations, error -61 [ 303.172151][ T4260] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 303.344105][ T7732] Bluetooth: MGMT ver 1.22 [ 303.421837][ T4260] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 303.429532][ T4260] usb 2-1: can't read configurations, error -61 [ 303.452514][ T4260] usb usb2-port1: attempt power cycle [ 304.451441][ T4260] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 305.561688][ T4260] usb 2-1: device descriptor read/8, error -71 [ 305.590391][ T27] audit: type=1800 audit(6085399291.721:28): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.830" name="id" dev="configfs" ino=45622 res=0 errno=0 [ 305.684798][ T7738] virt_wifi0 speed is unknown, defaulting to 1000 [ 305.694183][ T7738] bond0 speed is unknown, defaulting to 1000 [ 305.947003][ T27] audit: type=1326 audit(6085399292.081:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.2.835" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88efd9e159 code=0x0 [ 306.954751][ T7768] FAULT_INJECTION: forcing a failure. [ 306.954751][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 306.967956][ T7768] CPU: 0 PID: 7768 Comm: syz.4.838 Not tainted syzkaller #0 [ 306.975264][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.985345][ T7768] Call Trace: [ 306.988629][ T7768] [ 306.991558][ T7768] dump_stack_lvl+0x188/0x24e [ 306.996255][ T7768] ? asm_sysvec_call_function_single+0x16/0x20 [ 307.002416][ T7768] ? show_regs_print_info+0x12/0x12 [ 307.007614][ T7768] ? asm_sysvec_call_function_single+0x16/0x20 [ 307.013771][ T7768] should_fail_ex+0x390/0x4c0 [ 307.018455][ T7768] should_failslab+0x5/0x20 [ 307.022950][ T7768] slab_pre_alloc_hook+0x59/0x300 [ 307.027975][ T7768] kmem_cache_alloc_lru+0x49/0x2e0 [ 307.033086][ T7768] ? __d_alloc+0x2e/0x6e0 [ 307.037418][ T7768] __d_alloc+0x2e/0x6e0 [ 307.041567][ T7768] ? d_alloc_pseudo+0xe/0x70 [ 307.046152][ T7768] d_alloc_pseudo+0x19/0x70 [ 307.050644][ T7768] alloc_file_pseudo+0xe0/0x200 [ 307.055501][ T7768] ? alloc_empty_file_noaccount+0x80/0x80 [ 307.061220][ T7768] ? anon_inode_make_secure_inode+0xf7/0x160 [ 307.067198][ T7768] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 307.072660][ T7768] ? _raw_spin_unlock+0x24/0x40 [ 307.077526][ T7768] __se_sys_memfd_secret+0x125/0x2f0 [ 307.082816][ T7768] do_syscall_64+0x4c/0xa0 [ 307.087234][ T7768] ? clear_bhb_loop+0x60/0xb0 [ 307.091903][ T7768] ? clear_bhb_loop+0x60/0xb0 [ 307.096573][ T7768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.102474][ T7768] RIP: 0033:0x7f317f19e159 [ 307.106887][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.126499][ T7768] RSP: 002b:00007f317ffbb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 307.134955][ T7768] RAX: ffffffffffffffda RBX: 00007f317f425fa0 RCX: 00007f317f19e159 [ 307.142940][ T7768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.150907][ T7768] RBP: 00007f317f23506b R08: 0000000000000000 R09: 0000000000000000 [ 307.158872][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.166846][ T7768] R13: 00007f317f426038 R14: 00007f317f425fa0 R15: 00007ffd5e134708 [ 307.174824][ T7768] [ 307.242784][ T7772] fuse: Bad value for 'fd' [ 307.503929][ T27] audit: type=1800 audit(6085399293.641:30): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.841" name="id" dev="configfs" ino=46543 res=0 errno=0 [ 307.595279][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.617325][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.671424][ T4352] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 307.691525][ T126] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 307.841590][ T4352] usb 2-1: device descriptor read/64, error -71 [ 307.900918][ T7791] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.911044][ T7791] bond0 speed is unknown, defaulting to 1000 [ 307.948060][ T126] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 308.121761][ T4352] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 308.281521][ T4352] usb 2-1: device descriptor read/64, error -71 [ 308.413157][ T4352] usb usb2-port1: attempt power cycle [ 308.599967][ T126] usb 5-1: can't read configurations, error -61 [ 308.751453][ T126] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 308.841424][ T4352] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 311.050250][ T4352] usb 2-1: device descriptor read/8, error -71 [ 311.105647][ T7796] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.126608][ T7796] bond0 speed is unknown, defaulting to 1000 [ 311.448452][ T7814] fuse: Bad value for 'fd' [ 311.601270][ T27] audit: type=1800 audit(6085399297.731:31): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.856" name="id" dev="configfs" ino=45752 res=0 errno=0 [ 311.732720][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.758997][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.066865][ T7829] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.077167][ T7829] bond0 speed is unknown, defaulting to 1000 [ 312.453893][ T4260] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 312.741567][ T4318] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 312.914332][ T4260] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 314.037438][ T4260] usb 4-1: can't read configurations, error -61 [ 314.048652][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.067500][ T4318] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 314.211463][ T4260] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 314.226563][ T4318] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 314.251427][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 314.259458][ T4318] usb 3-1: Product: syz [ 314.268658][ T4318] usb 3-1: Manufacturer: syz [ 314.437623][ T7853] fuse: Bad value for 'fd' [ 314.453519][ T4260] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 314.461164][ T4260] usb 4-1: can't read configurations, error -61 [ 314.478263][ T4260] usb usb4-port1: attempt power cycle [ 314.486093][ T4318] usb 3-1: USB disconnect, device number 25 [ 314.638562][ T27] audit: type=1800 audit(6085399300.771:32): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.871" name="id" dev="configfs" ino=46695 res=0 errno=0 [ 314.710777][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.729463][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.051128][ T7871] virt_wifi0 speed is unknown, defaulting to 1000 [ 316.060943][ T7871] bond0 speed is unknown, defaulting to 1000 [ 316.963398][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.969735][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.138742][ T27] audit: type=1800 audit(6085399305.271:33): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.880" name="id" dev="configfs" ino=46748 res=0 errno=0 [ 319.672917][ T27] audit: type=1800 audit(6085399305.801:34): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.883" name="id" dev="configfs" ino=46780 res=0 errno=0 [ 319.713951][ T126] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 319.985658][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.068026][ T126] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 320.182287][ T126] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 320.304301][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.671561][ T4260] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 320.714948][ T126] usb 2-1: USB disconnect, device number 33 [ 320.894304][ T4260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.963887][ T4260] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 321.057065][ T4260] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 321.156676][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 321.181975][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.245831][ T4260] usb 4-1: Product: syz [ 321.275248][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.301895][ T4260] usb 4-1: Manufacturer: syz [ 321.609688][ T126] usb 4-1: USB disconnect, device number 22 [ 324.017551][ T7920] device syzkaller0 entered promiscuous mode [ 324.028001][ T7920] 0: reclassify loop, rule prio 0, protocol 700 [ 324.036180][ T7920] netlink: 168 bytes leftover after parsing attributes in process `syz.3.892'. [ 324.339041][ T7924] virt_wifi0 speed is unknown, defaulting to 1000 [ 324.348083][ T7924] bond0 speed is unknown, defaulting to 1000 [ 325.988244][ T7927] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.999092][ T7927] bond0 speed is unknown, defaulting to 1000 [ 327.369253][ T27] audit: type=1800 audit(6085399313.501:35): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.896" name="id" dev="configfs" ino=46039 res=0 errno=0 [ 328.151792][ T27] audit: type=1800 audit(6085399314.291:36): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.898" name="id" dev="configfs" ino=46877 res=0 errno=0 [ 328.561495][ T126] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 328.784684][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 328.860404][ T126] usb 3-1: config 0 has no interfaces? [ 328.936299][ T126] usb 3-1: config 0 has no interfaces? [ 329.037080][ T126] usb 3-1: config 0 has no interfaces? [ 329.163444][ T126] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 329.275460][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.416971][ T126] usb 3-1: Product: syz [ 329.472443][ T126] usb 3-1: Manufacturer: syz [ 329.537810][ T126] usb 3-1: SerialNumber: syz [ 329.625843][ T126] usb 3-1: config 0 descriptor?? [ 330.135962][ T7951] FAULT_INJECTION: forcing a failure. [ 330.135962][ T7951] name failslab, interval 1, probability 0, space 0, times 0 [ 330.171750][ T7951] CPU: 1 PID: 7951 Comm: syz.2.899 Not tainted syzkaller #0 [ 330.179094][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.189170][ T7951] Call Trace: [ 330.192471][ T7951] [ 330.195424][ T7951] dump_stack_lvl+0x188/0x24e [ 330.200142][ T7951] ? show_regs_print_info+0x12/0x12 [ 330.205376][ T7951] ? load_image+0x410/0x410 [ 330.209920][ T7951] ? __lock_acquire+0x7c40/0x7c40 [ 330.214993][ T7951] should_fail_ex+0x390/0x4c0 [ 330.219701][ T7951] should_failslab+0x5/0x20 [ 330.224219][ T7951] slab_pre_alloc_hook+0x59/0x300 [ 330.229261][ T7951] ? netlink_has_listeners+0x73/0x3d0 [ 330.234652][ T7951] kmem_cache_alloc_node+0x5a/0x310 [ 330.239872][ T7951] ? __alloc_skb+0xf9/0x7d0 [ 330.244396][ T7951] __alloc_skb+0xf9/0x7d0 [ 330.248744][ T7951] alloc_uevent_skb+0x7d/0x230 [ 330.253534][ T7951] kobject_uevent_net_broadcast+0x2e6/0x530 [ 330.259455][ T7951] kobject_uevent_env+0x555/0x890 [ 330.264530][ T7951] driver_register+0x3e2/0x430 [ 330.269329][ T7951] usb_gadget_register_driver_owner+0xf5/0x260 [ 330.275527][ T7951] raw_ioctl+0x13a0/0x3cd0 [ 330.279967][ T7951] ? __kmem_cache_free+0xb6/0x200 [ 330.285010][ T7951] ? tomoyo_path_number_perm+0x205/0x650 [ 330.290756][ T7951] ? tomoyo_path_number_perm+0x5a4/0x650 [ 330.296414][ T7951] ? tomoyo_path_number_perm+0x205/0x650 [ 330.302072][ T7951] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 330.307555][ T7951] ? make_qualifier+0x3b0/0x3b0 [ 330.312457][ T7951] ? __fget_files+0x28/0x460 [ 330.317086][ T7951] ? bpf_lsm_file_ioctl+0x5/0x10 [ 330.322045][ T7951] ? security_file_ioctl+0x7c/0xa0 [ 330.327176][ T7951] ? make_qualifier+0x3b0/0x3b0 [ 330.332049][ T7951] __se_sys_ioctl+0xfa/0x170 [ 330.336667][ T7951] do_syscall_64+0x4c/0xa0 [ 330.341097][ T7951] ? clear_bhb_loop+0x60/0xb0 [ 330.345787][ T7951] ? clear_bhb_loop+0x60/0xb0 [ 330.350501][ T7951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.356430][ T7951] RIP: 0033:0x7f88efd9ddeb [ 330.360861][ T7951] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 330.380491][ T7951] RSP: 002b:00007f88f0b82f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.388930][ T7951] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f88efd9ddeb [ 330.396927][ T7951] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 330.404912][ T7951] RBP: 00007f88f0b83fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 330.412907][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.420918][ T7951] R13: 0000200000000040 R14: 0000000000000005 R15: 0000000000000868 [ 330.428937][ T7951] [ 330.536659][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.718811][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.421490][ T4352] usb 3-1: USB disconnect, device number 26 [ 331.898951][ T27] audit: type=1800 audit(6085399318.031:37): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.907" name="id" dev="configfs" ino=47136 res=0 errno=0 [ 332.941914][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 333.033304][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 333.752365][ T7988] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.777827][ T7988] bond0 speed is unknown, defaulting to 1000 [ 334.450245][ T7987] virt_wifi0 speed is unknown, defaulting to 1000 [ 334.461118][ T7987] bond0 speed is unknown, defaulting to 1000 [ 336.414911][ T27] audit: type=1800 audit(6085399322.551:38): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.914" name="id" dev="configfs" ino=47208 res=0 errno=0 [ 336.594350][ T8013] netlink: 220 bytes leftover after parsing attributes in process `syz.4.916'. [ 336.619486][ T8013] tc_dump_action: action bad kind [ 336.981284][ T27] audit: type=1800 audit(6085399323.111:39): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.920" name="id" dev="configfs" ino=47253 res=0 errno=0 [ 337.241397][ T4319] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 337.433141][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.639291][ T8037] virt_wifi0 speed is unknown, defaulting to 1000 [ 337.649919][ T8037] bond0 speed is unknown, defaulting to 1000 [ 340.830540][ T4319] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 342.434590][ T4319] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.455947][ T4319] usb 2-1: string descriptor 0 read error: -71 [ 342.466039][ T4319] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 342.477146][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 342.487482][ T4319] usb 2-1: can't set config #1, error -71 [ 342.494332][ T4319] usb 2-1: USB disconnect, device number 34 [ 342.530595][ T8046] virt_wifi0 speed is unknown, defaulting to 1000 [ 342.542160][ T8046] bond0 speed is unknown, defaulting to 1000 [ 342.861774][ T8058] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 343.036335][ T27] audit: type=1800 audit(6085399329.151:40): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.928" name="id" dev="configfs" ino=47071 res=0 errno=0 [ 343.439434][ T27] audit: type=1800 audit(6085399329.571:41): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.933" name="id" dev="configfs" ino=47352 res=0 errno=0 [ 343.915538][ T8094] virt_wifi0 speed is unknown, defaulting to 1000 [ 343.922739][ T4322] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 343.932944][ T8094] bond0 speed is unknown, defaulting to 1000 [ 344.156579][ T4322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.484957][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 345.600919][ T4322] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.792386][ T4322] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 345.812173][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 345.820208][ T4322] usb 3-1: Product: syz [ 345.824777][ T4322] usb 3-1: Manufacturer: syz [ 345.833082][ T8090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.979057][ T4322] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 345.988745][ T4322] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 346.287977][ T4352] usb 3-1: USB disconnect, device number 27 [ 346.725542][ T4352] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 346.735582][ T4352] garmin_gps 3-1:1.0: device disconnected [ 346.805789][ T8105] loop9: detected capacity change from 0 to 255852544 [ 346.872538][ T8106] virt_wifi0 speed is unknown, defaulting to 1000 [ 346.943656][ T8106] bond0 speed is unknown, defaulting to 1000 [ 347.212986][ T8112] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 347.454679][ T27] audit: type=1800 audit(6085399333.591:42): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.943" name="id" dev="configfs" ino=47437 res=0 errno=0 [ 347.840745][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 347.919373][ T27] audit: type=1800 audit(6085399334.051:43): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.945" name="id" dev="configfs" ino=47460 res=0 errno=0 [ 348.089606][ T8143] Illegal XDP return value 4294967294 on prog (id 43) dev syz_tun, expect packet loss! [ 348.410733][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 348.565312][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 348.866564][ T8163] virt_wifi0 speed is unknown, defaulting to 1000 [ 348.880262][ T8163] bond0 speed is unknown, defaulting to 1000 [ 349.171535][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.596877][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.905615][ T27] audit: type=1800 audit(6085399336.041:44): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.955" name="id" dev="configfs" ino=48221 res=0 errno=0 [ 350.070526][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 351.745489][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 351.851220][ T27] audit: type=1800 audit(6085399337.981:45): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.962" name="id" dev="configfs" ino=47589 res=0 errno=0 [ 351.892792][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 353.942519][ T8212] fuse: Bad value for 'fd' [ 354.361436][ T8224] virt_wifi0 speed is unknown, defaulting to 1000 [ 354.371925][ T8224] bond0 speed is unknown, defaulting to 1000 [ 355.277283][ T27] audit: type=1800 audit(6085399341.411:46): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.971" name="id" dev="configfs" ino=48280 res=0 errno=0 [ 355.352252][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 355.388220][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 355.512362][ T27] audit: type=1800 audit(6085399341.651:47): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.972" name="id" dev="configfs" ino=48299 res=0 errno=0 [ 355.553519][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 356.455585][ T27] audit: type=1800 audit(6085399342.591:48): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.976" name="id" dev="configfs" ino=47689 res=0 errno=0 [ 356.765567][ T8261] virt_wifi0 speed is unknown, defaulting to 1000 [ 356.822048][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 356.845285][ T8266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.981'. [ 356.861369][ T8261] bond0 speed is unknown, defaulting to 1000 [ 358.187891][ T8278] virt_wifi0 speed is unknown, defaulting to 1000 [ 358.197918][ T8278] bond0 speed is unknown, defaulting to 1000 [ 359.245608][ T27] audit: type=1800 audit(6085399345.371:49): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.989" name="out_ports" dev="configfs" ino=48373 res=0 errno=0 [ 360.635425][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 360.678110][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 360.689772][ T8304] device bond0 left promiscuous mode [ 361.835405][ T8325] device syzkaller0 entered promiscuous mode [ 361.896180][ T8326] 0: reclassify loop, rule prio 0, protocol 700 [ 361.925337][ T8325] netlink: 220 bytes leftover after parsing attributes in process `syz.4.996'. [ 361.951630][ T8325] tc_dump_action: action bad kind [ 363.793339][ T8329] virt_wifi0 speed is unknown, defaulting to 1000 [ 363.806365][ T8329] bond0 speed is unknown, defaulting to 1000 [ 364.138451][ T8339] virt_wifi0 speed is unknown, defaulting to 1000 [ 364.183800][ T8339] bond0 speed is unknown, defaulting to 1000 [ 364.428995][ T27] audit: type=1800 audit(6085399350.561:50): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1004" name="id" dev="configfs" ino=47938 res=0 errno=0 [ 365.218204][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 365.263809][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 367.330492][ T27] audit: type=1800 audit(6085399353.461:51): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1018" name="id" dev="configfs" ino=48499 res=0 errno=0 [ 367.617603][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 367.626871][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 368.025638][ T8402] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.026549][ T8402] bond0 speed is unknown, defaulting to 1000 [ 369.981289][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 370.070856][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 370.309995][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1031'. [ 370.351679][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 370.760168][ T27] audit: type=1800 audit(6085399356.891:52): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1032" name="id" dev="configfs" ino=48103 res=0 errno=0 [ 371.406742][ T27] audit: type=1800 audit(6085399357.541:53): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1038" name="id" dev="configfs" ino=48635 res=0 errno=0 [ 371.526152][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 371.855319][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1043'. [ 371.877323][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 372.376996][ T8497] autofs4:pid:8497:autofs_fill_super: called with bogus options [ 372.407371][ T8497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1049'. [ 372.530839][ T27] audit: type=1800 audit(6085399358.661:54): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1050" name="id" dev="configfs" ino=48708 res=0 errno=0 [ 372.683789][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 372.936960][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 372.982219][ T27] audit: type=1800 audit(6085399359.121:55): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1052" name="id" dev="configfs" ino=48795 res=0 errno=0 [ 373.001974][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.275039][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 373.295661][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 374.739962][ T4352] [ 374.742328][ T4352] ============================================ [ 374.748464][ T4352] WARNING: possible recursive locking detected [ 374.754603][ T4352] syzkaller #0 Not tainted [ 374.758999][ T4352] -------------------------------------------- [ 374.765150][ T4352] kworker/1:5/4352 is trying to acquire lock: [ 374.771195][ T4352] ffff88814c4d1930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 [ 374.781037][ T4352] [ 374.781037][ T4352] but task is already holding lock: [ 374.788382][ T4352] ffff888078929930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 [ 374.798120][ T4352] [ 374.798120][ T4352] other info that might help us debug this: [ 374.806184][ T4352] Possible unsafe locking scenario: [ 374.806184][ T4352] [ 374.813634][ T4352] CPU0 [ 374.816899][ T4352] ---- [ 374.820158][ T4352] lock(&grp->list_lock); [ 374.824553][ T4352] lock(&grp->list_lock); [ 374.828949][ T4352] [ 374.828949][ T4352] *** DEADLOCK *** [ 374.828949][ T4352] [ 374.837079][ T4352] May be due to missing lock nesting notation [ 374.837079][ T4352] [ 374.845383][ T4352] 3 locks held by kworker/1:5/4352: [ 374.850559][ T4352] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 374.860989][ T4352] #1: ffffc90004cb7d00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 374.872887][ T4352] #2: ffff888078929930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8d0 [ 374.883045][ T4352] [ 374.883045][ T4352] stack backtrace: [ 374.888930][ T4352] CPU: 1 PID: 4352 Comm: kworker/1:5 Not tainted syzkaller #0 [ 374.896379][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.906441][ T4352] Workqueue: events snd_rawmidi_input_event_work [ 374.912892][ T4352] Call Trace: [ 374.916179][ T4352] [ 374.919116][ T4352] dump_stack_lvl+0x188/0x24e [ 374.923823][ T4352] ? show_regs_print_info+0x12/0x12 [ 374.929030][ T4352] ? load_image+0x410/0x410 [ 374.933554][ T4352] __lock_acquire+0x12c8/0x7c40 [ 374.938459][ T4352] ? verify_lock_unused+0x140/0x140 [ 374.943655][ T4352] ? ktime_get_ts64+0x111/0x470 [ 374.948576][ T4352] ? verify_lock_unused+0x140/0x140 [ 374.953785][ T4352] ? verify_lock_unused+0x140/0x140 [ 374.958970][ T4352] ? __rwlock_init+0x140/0x140 [ 374.963723][ T4352] lock_acquire+0x1bb/0x4a0 [ 374.968240][ T4352] ? snd_seq_deliver_event+0x1cb/0x8d0 [ 374.973717][ T4352] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 374.979693][ T4352] ? read_lock_is_recursive+0x10/0x10 [ 374.985053][ T4352] ? lock_chain_count+0x20/0x20 [ 374.989888][ T4352] ? do_raw_read_unlock+0x39/0x70 [ 374.994898][ T4352] _raw_read_lock+0x32/0x40 [ 374.999484][ T4352] ? snd_seq_deliver_event+0x1cb/0x8d0 [ 375.004956][ T4352] snd_seq_deliver_event+0x1cb/0x8d0 [ 375.010231][ T4352] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 375.016296][ T4352] snd_seq_control_queue+0x8ff/0x1010 [ 375.021728][ T4352] ? snd_seq_queue_remove_cells+0x2e0/0x2e0 [ 375.027608][ T4352] ? mark_lock+0x94/0x320 [ 375.031929][ T4352] ? snd_seq_port_use_ptr+0xfd/0x120 [ 375.037205][ T4352] ? __lock_acquire+0x7c40/0x7c40 [ 375.042217][ T4352] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 375.048145][ T4352] ? _raw_spin_unlock+0x40/0x40 [ 375.053004][ T4352] ? mark_lock+0x94/0x320 [ 375.057328][ T4352] ? do_raw_read_unlock+0x39/0x70 [ 375.062350][ T4352] ? _raw_read_unlock+0x24/0x40 [ 375.067216][ T4352] ? snd_seq_port_use_ptr+0xfd/0x120 [ 375.072485][ T4352] ? snd_seq_system_notify+0x170/0x170 [ 375.077935][ T4352] snd_seq_deliver_single_event+0x806/0xb30 [ 375.083817][ T4352] ? snd_seq_deliver_event+0x1e2/0x8d0 [ 375.089262][ T4352] ? snd_sequencer_device_done+0x20/0x20 [ 375.094883][ T4352] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 375.100943][ T4352] snd_seq_oss_timer_start+0x2ce/0x510 [ 375.106410][ T4352] ? snd_seq_oss_process_timer_event+0x3d0/0x3d0 [ 375.112721][ T4352] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 375.118601][ T4352] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 375.124477][ T4352] ? _raw_spin_unlock+0x40/0x40 [ 375.129312][ T4352] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 375.135191][ T4352] ? _raw_spin_unlock+0x40/0x40 [ 375.140025][ T4352] ? mark_lock+0x94/0x320 [ 375.144341][ T4352] ? snd_seq_oss_readq_put_timestamp+0x33f/0x5c0 [ 375.150655][ T4352] snd_seq_oss_midi_input+0x2e8/0x890 [ 375.156016][ T4352] ? snd_seq_oss_midi_get_addr+0x260/0x260 [ 375.161812][ T4352] ? do_raw_read_unlock+0x39/0x70 [ 375.166818][ T4352] ? _raw_read_unlock+0x24/0x40 [ 375.171670][ T4352] ? snd_seq_port_use_ptr+0xfd/0x120 [ 375.176937][ T4352] ? snd_seq_oss_process_event+0x2910/0x2910 [ 375.182978][ T4352] snd_seq_deliver_single_event+0x806/0xb30 [ 375.188881][ T4352] ? snd_sequencer_device_done+0x20/0x20 [ 375.194508][ T4352] ? do_raw_read_unlock+0x39/0x70 [ 375.199515][ T4352] snd_seq_deliver_event+0x49d/0x8d0 [ 375.204784][ T4352] snd_seq_kernel_client_dispatch+0x1fc/0x2f0 [ 375.210835][ T4352] snd_midi_input_event+0x5ab/0x6f0 [ 375.216020][ T4352] ? event_process_midi+0x650/0x650 [ 375.221199][ T4352] ? _raw_spin_unlock+0x40/0x40 [ 375.226034][ T4352] ? _raw_spin_unlock_irq+0x1f/0x40 [ 375.231212][ T4352] ? process_one_work+0x7b4/0x1160 [ 375.236305][ T4352] process_one_work+0x8ab/0x1160 [ 375.241222][ T4352] ? worker_detach_from_pool+0x240/0x240 [ 375.246836][ T4352] ? _raw_spin_lock_irq+0xb7/0xf0 [ 375.251846][ T4352] ? _raw_spin_lock_irqsave+0x100/0x100 [ 375.257384][ T4352] ? wq_worker_running+0x97/0x190 [ 375.262403][ T4352] worker_thread+0xaf5/0x12a0 [ 375.267073][ T4352] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 375.272965][ T4352] kthread+0x29d/0x330 [ 375.277091][ T4352] ? worker_clr_flags+0x1a0/0x1a0 [ 375.282117][ T4352] ? kthread_blkcg+0xd0/0xd0 [ 375.286687][ T4352] ret_from_fork+0x1f/0x30 [ 375.291168][ T4352] [ 375.414733][ T27] audit: type=1800 audit(6085399361.551:56): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1065" name="id" dev="configfs" ino=49254 res=0 errno=0 [ 376.401428][ T8559] comedi comedi1: reset error (fatal) [ 378.402862][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.409185][ T1277] ieee802154 phy1 wpan1: encryption failed: -22